AKS components I assumed that you are familiar with the Kubernetes Cluster concepts (elementary level). Therefore I didn’t do any deep dive into the elementary components. The focus of this post is the following topics: The control plane (Kubernetes core component) It’s the core of the Kubernetes Cluster and doesn’t matter on which cloud providerContinue reading “Azure Kubernetes Service (AKS) with Terraform deployment”
Category Archives: Cloud
Azure Arc enabled Kubernetes
Introduction What does “Arc-enabled Kubernetes” mean? it means a Kubernetes Cluster that the Azure Arc Agent has been installed on. Should an instance of Azure Arc be provisioned? No, Azure Arc is a global service. What about data security? very good question! I’ll explain it below. Because first, you have to know how Azure ArcContinue reading “Azure Arc enabled Kubernetes”
Azure Identity & Access Managemen
Introduction As we know Microsoft Azure Cloud platform works seamlessly with Azure Active Directory (AAD). The following products are three of many cloud-based Microsoft products. As demonstrated below each of them has its own RBAC. But only AAD manages the identities and the Azure Subscription & Azure DevOps and also the other products which canContinue reading “Azure Identity & Access Managemen”
Multi-Cloud
Introduction This document gives us the definition of different cloud classifications and focuses on the Multicloud and Hybrid cloud and the organization’s tendency to adapt to the cloud specially for multi-cloud. This document even refers to the challenges of multi-cloud at the management and technical level and the reasons of them, and in the lastContinue reading “Multi-Cloud”
Throttling Design Pattern
Knows as Rate Limiting. We place a throttle in front of the target service or process to control control the rate of the invocations or data flow into the target. We can use the cloud services to apply this design pattern. This can be useful if we have an old system and we don’t wantContinue reading “Throttling Design Pattern”
Security
The security in “Bring Your Enterprise on Cloud” topic is a very hug job. But it’s implementation is not impossible. This topic is based on the related links. The conceptual check list for security is as follows Enterprise Infrastructure Security Network security Data encryption Key and secret management Identity & Access Management Duty segregation LeastContinue reading “Security”
Clouds : Credential Management
Azure Key-Vault Key-Vault managed HSM Dedicated HSM AWS Secret Manager Certificate Manager CloudHSM Key Management Service (KMS) GCP IBM HSM features Azure AWS GCP IBM FIPS 140-2 level 3 FIPS 140-2 level 3 Single tenant Single tenant
Bring Your Enterprise on Cloud
We cannot generalize a migration way to the cloud for all the companies & enterprises. But I have provided a check list of topics which can help to have a good start without wasting the time with staring from scratch. Enterprise Infrastructure On-Prem <-> Cloud Azure VPN Express Route AWS … DNS Azure DNS private,Continue reading “Bring Your Enterprise on Cloud”
Terraform : Cloud
Create organization and workspace in terraform cloud Sign up/in to this URL (https://app.terraform.io/signup/account) Skip all the questions Create an organization 4. Create a workspace (by clicking on create one now) 5. Select the type of the workspace (CLI-driven workflow) 6. Give a name to the workspace. 7. Create the workspace. 8. After creation the workspaceContinue reading “Terraform : Cloud”
Clouds : Shared responsibility model
In doesn’t make difference which cloud vendor you have chosen as the platform. All of them follow the shared responsibility model. What does it mean? It means the cloud provider has the security responsibility of the cloud and cloud customer has the security responsibility in the cloud. Azure AWS GCP IBM Shared responsibility model SharedContinue reading “Clouds : Shared responsibility model”
Multi Cloud Solutions 