Learning Cloud Security

Chapter 5. Cloud Platform and Infrastructure Security

Topics covered in this chapter include:

• Security architecture

• Data center security

• Virtualization security

• Network security in the cloud

One of the challenges with talking about cloud computing is it’s easy to miss out on the case where you are using a private cloud. This means you need to take care of all security considerations related to physical infrastructure that you wouldn’t normally think about with respect to cloud computing. This should include what goes into creating a well-protected data center. When it comes to data center security, there is a lot to factor in, because it comes down to making sure there are adequate resources so users can continue to use the services provided. When a company is developing its own cloud infrastructure for use, there are still the same expectations related to availability that you would want a cloud provider to offer. Local does not mean reduced requirements for availability.

There is a lot that goes into developing a fully reliable data center, however, that can withstand issues with power, weather, natural disasters, network outages, and failures without the infrastructure itself. Additionally, when you are creating your own data center, you are responsible for all the physical security control.

No matter where you are getting your services, though, there are some essential security functions that apply. These include identity and access management, data protection, logging, ...