AWS – Multi Cloud Solutions

AWS : IAM User

Multi-Cloud

Introduction This document gives us the definition of different cloud classifications and focuses on the Multicloud and Hybrid cloud and the organization’s tendency to adapt to the cloud specially for multi-cloud. This document even refers to the challenges of multi-cloud at the management and technical level and the reasons of them, and in the lastContinue reading “Multi-Cloud”

Clouds : Organization Structure

Azure AWS GCP Azure Policy Guardrails (via the ControlTower Service) Organization Policy Service – Organization Service (optional) Organization Node Root Root Account – Management Group (optional) Organization Unit (optional)(via the Organization Service) Folder (optional) Subscription Account(via the Organization Service) – Resource Group – Project Resources Resources Resources Azure Policy The following types are available: ApplyContinue reading “Clouds : Organization Structure”

Throttling Design Pattern

Knows as Rate Limiting. We place a throttle in front of the target service or process to control control the rate of the invocations or data flow into the target. We can use the cloud services to apply this design pattern. This can be useful if we have an old system and we don’t wantContinue reading “Throttling Design Pattern”

Security

The security in “Bring Your Enterprise on Cloud” topic is a very hug job. But it’s implementation is not impossible. This topic is based on the related links. The conceptual check list for security is as follows Enterprise Infrastructure Security Network security Data encryption Key and secret management Identity & Access Management Duty segregation LeastContinue reading “Security”

Clouds : Credential Management

Azure Key-Vault Key-Vault managed HSM Dedicated HSM AWS Secret Manager Certificate Manager CloudHSM Key Management Service (KMS) GCP IBM HSM features Azure AWS GCP IBM FIPS 140-2 level 3 FIPS 140-2 level 3 Single tenant Single tenant

Bring Your Enterprise on Cloud

We cannot generalize a migration way to the cloud for all the companies & enterprises. But I have provided a check list of topics which can help to have a good start without wasting the time with staring from scratch. Enterprise Infrastructure On-Prem <-> Cloud Azure VPN Express Route AWS … DNS Azure DNS private,Continue reading “Bring Your Enterprise on Cloud”

Terraform : Cloud

Create organization and workspace in terraform cloud Sign up/in to this URL (https://app.terraform.io/signup/account) Skip all the questions Create an organization 4. Create a workspace (by clicking on create one now) 5. Select the type of the workspace (CLI-driven workflow) 6. Give a name to the workspace. 7. Create the workspace. 8. After creation the workspaceContinue reading “Terraform : Cloud”

Clouds : Shared responsibility model

In doesn’t make difference which cloud vendor you have chosen as the platform. All of them follow the shared responsibility model. What does it mean? It means the cloud provider has the security responsibility of the cloud and cloud customer has the security responsibility in the cloud. Azure AWS GCP IBM Shared responsibility model SharedContinue reading “Clouds : Shared responsibility model”

AWS : Monitor, React, and Recover

Topics Key concepts Monitoring concept CloudWatch How to use CloudWatch CloudWatch Alert Recovering From Failure by using CloudTrail Automating recovery Chaos engineering Edge cases Related topics AWS : Virtual Private Network (VPC) AWS : Infrastructure Deployment AWS : Business Objectives AWS : DynamoDB AWS : Resiliency AWS : Serverless Key concepts Monitoring : is for understanding what isContinue reading “AWS : Monitor, React, and Recover”