Cloud Computing Notes

Cheatsheet Content

### Business Continuity Business Continuity is the ability of an organization to continue its important operations during and after a disaster, cyberattack, or system failure. It ensures that business services remain available with minimum interruption. Business continuity includes backup systems, recovery plans, and risk management strategies to reduce losses and maintain normal functioning. ### Aneka Framework Aneka Framework is a cloud computing platform developed for building and managing distributed applications. It provides tools and services for application development, scheduling, and resource management in cloud environments. It supports different programming models and helps developers run applications on private and public clouds efficiently. ### Satellite Image Processing in CC Satellite Image Processing in Cloud Computing refers to storing, processing, and analyzing satellite images using cloud resources. Cloud computing provides high storage capacity and fast processing for handling large satellite datasets. It is used in weather forecasting, agriculture, remote sensing, disaster management, and environmental monitoring. ### Virtualization Virtualization is the technology of creating virtual versions of computer resources such as servers, storage devices, and operating systems. It allows multiple virtual machines to run on a single physical machine. **Benefits:** * Better resource utilization * Reduced hardware cost Virtualization also improves flexibility and simplifies system management. ### Cloud Security Requirements Cloud security requirements are the measures needed to protect cloud data, applications, and services from threats and unauthorized access. **Main security requirements:** * **Confidentiality** – Protecting data from unauthorized users * **Integrity** – Ensuring data is accurate and unchanged * **Availability** – Ensuring services are always accessible * **Authentication** – Verifying user identity * **Authorization** – Providing access only to permitted users These requirements help maintain secure cloud environments. ### Amazon S3 and EBS #### Amazon S3 Amazon Simple Storage Service (S3) is a cloud storage service provided by Amazon Web Services (AWS). It is used to store and retrieve large amounts of data from anywhere on the internet. **Features of S3:** * Highly scalable * Secure data storage * Backup and recovery support * High availability **Uses:** * Data backup * Media storage * Big data storage #### Amazon EBS Amazon Elastic Block Store (EBS) provides block-level storage volumes for virtual machines in AWS. It is mainly used with EC2 instances. **Features of EBS:** * Persistent storage * High performance * Data backup support * Easy scalability **Difference:** * S3 is object storage. * EBS is block storage. Both services are important components of AWS cloud storage. ### Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) #### Business Continuity Planning (BCP) BCP is a process that ensures important business operations continue during disasters or failures. It focuses on maintaining services with minimum interruption. **Objectives of BCP:** * Reduce downtime * Protect business data * Continue critical operations **Steps in BCP:** * Risk assessment * Business impact analysis * Recovery strategy * Testing and maintenance #### Disaster Recovery Planning (DRP) DRP is a plan for recovering IT systems, networks, and data after a disaster such as fire, cyberattack, or hardware failure. **Objectives of DRP:** * Restore systems quickly * Recover lost data * Minimize financial loss **Techniques:** * Data backup * Replication * Cloud recovery services **Difference:** BCP focuses on overall business operations, while DRP mainly focuses on IT recovery. ### Risk Management and Strategies Risk Management is the process of identifying, analyzing, and reducing risks that may affect cloud systems and business operations. **Steps of Risk Management:** * Risk identification * Risk analysis * Risk evaluation * Risk control * Monitoring **Risk Management Strategies:** * **Risk Avoidance** Avoid activities that create risk. * **Risk Reduction** Take measures to minimize risk impact. * **Risk Transfer** Transfer risk through insurance or third-party services. * **Risk Acceptance** Accept small risks when losses are manageable. **Benefits:** * Improves security * Reduces losses * Increases system reliability Risk management is essential for secure and reliable cloud computing. ### Security Challenges and Security Architecture in CC Cloud Computing faces many security challenges because data and services are stored on remote servers and accessed through the internet. **Security Challenges:** * Data breaches * Unauthorized access * Data loss * Malware attacks * Insecure APIs * Insider threats #### Security Architecture in Cloud Computing Security architecture refers to the design of security mechanisms used to protect cloud resources. **Components:** * **Authentication** Verifies user identity. * **Authorization** Controls access permissions. * **Encryption** Protects sensitive data. * **Firewall** Prevents unauthorized network access. * **Intrusion Detection System (IDS)** Detects suspicious activities. **Advantages:** * Protects cloud resources * Ensures privacy * Improves reliability ### Compare VMware, KVM, and Xen. Also, explain any two virtualization mechanisms/tools. | Feature | VMware | KVM | Xen | |---------------|-----------------|---------------------|---------------------| | Type | Proprietary | Open-source | Open-source | | Performance | High | High | Good | | Cost | Expensive | Free | Free | | OS Support | Multiple OS | Linux-based | Multiple OS | | Usage | Enterprise systems | Linux virtualization | Cloud environments | #### Virtualization Tools/Mechanisms 1. **Hypervisor** A hypervisor is software that creates and manages virtual machines. It allows multiple operating systems to run on a single system. **Types:** * Type 1 Hypervisor * Type 2 Hypervisor 2. **Virtual Machine (VM)** A VM is a virtual computer system that behaves like a real computer. Each VM has its own OS and applications. **Advantages:** * Better resource utilization * Reduced hardware cost * Isolation between systems ### Regulatory Issues and Government Policies in CC Regulatory issues in cloud computing refer to laws and rules related to data storage, privacy, and security. Since cloud data may be stored in different countries, organizations must follow government regulations. **Regulatory Issues:** * Data privacy * Data ownership * Data location * Compliance requirements * Security standards #### Government Policies Governments create policies to ensure safe and secure cloud services. **Objectives:** * Protect user data * Ensure cybersecurity * Maintain legal compliance **Examples:** * Data protection laws * Cybersecurity policies * Digital governance frameworks These policies help build trust and improve security in cloud computing. ### Full-Virtualization and Para-virtualization Virtualization is a technology that allows multiple operating systems to run on a single physical machine. Full virtualization and para-virtualization are two important virtualization techniques used in cloud computing. #### Full Virtualization In full virtualization, the complete hardware environment is simulated virtually. The guest operating system runs without any modification because it believes it is running on real hardware. A hypervisor manages all virtual machines and hardware resources. **Features:** * Guest OS does not need modification * Better isolation between VMs * Easy to run multiple operating systems **Advantages:** * Strong security and isolation * Supports unmodified operating systems * Better flexibility **Disadvantages:** * Higher overhead * Slower performance compared to para-virtualization **Examples:** * VMware * VirtualBox #### Para-Virtualization In para-virtualization, the guest operating system is modified to communicate directly with the hypervisor. Since the OS is aware of virtualization, performance improves. **Features:** * Guest OS modification required * Better performance * Efficient resource usage **Advantages:** * Faster execution * Lower overhead * Better system efficiency **Disadvantages:** * Modified OS required * Limited compatibility **Examples:** * Xen #### Difference between Full and Para-Virtualization | Full Virtualization | Para-Virtualization | |--------------------------|--------------------------| | No OS modification needed | OS modification required | | Higher overhead | Lower overhead | | Slower performance | Faster performance | | Better compatibility | Limited compatibility | **Conclusion** Both virtualization techniques are important in cloud computing. Full virtualization provides better compatibility, while para-virtualization offers higher performance and efficiency. ### AWS, Azure, and Google App Engine AWS, Microsoft Azure, and Google App Engine are popular cloud computing platforms that provide services such as storage, networking, databases, and application hosting. #### Amazon Web Services (AWS) AWS is a cloud platform provided by Amazon. It offers services like EC2, S3, Lambda, and RDS for computing and storage. **Features:** * Highly scalable * Large number of cloud services * Global infrastructure * Pay-as-you-go pricing **Applications:** * Web hosting * Big data processing * Machine learning #### Microsoft Azure Azure is Microsoft’s cloud platform used for application development, virtual machines, databases, and networking. **Features:** * Strong integration with Microsoft products * Hybrid cloud support * High security * AI and analytics services **Applications:** * Enterprise applications * Business solutions * Cloud databases #### Google App Engine Google App Engine is a Platform as a Service (PaaS) provided by Google for developing and hosting applications. **Features:** * Automatic scaling * Easy deployment * Fully managed platform * Supports multiple programming languages **Applications:** * Web applications * Mobile backends * Scalable cloud apps #### Difference between AWS, Azure, and Google App Engine | Feature | AWS | Azure | Google App Engine | |---------------------|-----------------|--------------------|-------------------| | Provider | Amazon | Microsoft | Google | | Type | IaaS/PaaS | IaaS/PaaS | PaaS | | Best For | General cloud services | Enterprise solutions | App hosting | | Scalability | High | High | Automatic | | Popular Services | EC2, S3 | Virtual Machines | App Engine | **Conclusion** AWS, Azure, and Google App Engine are widely used cloud platforms. AWS provides a large number of services, Azure is suitable for enterprise environments, and Google App Engine is best for easy application deployment. ### Cloud Computing Security Architecture Cloud Computing Security Architecture is the framework of technologies, policies, and security controls used to protect cloud data, applications, and infrastructure from threats and attacks. It ensures confidentiality, integrity, and availability of cloud services. #### Components of Cloud Security Architecture 1. **Authentication** Verifies the identity of users before providing access. 2. **Authorization** Provides access permissions based on user roles. 3. **Encryption** Protects sensitive data during storage and transmission. 4. **Firewall** Blocks unauthorized network access. 5. **Intrusion Detection System (IDS)** Detects suspicious activities and attacks. 6. **Backup and Recovery** Helps recover data during failures or disasters.