Unit 4 Part 1 & Part 2
Unit 4 Part 1 & Part 2
3/29/2022
by
Mr. Ajay Kumar Badhan
Assistant Professor
M.TECH[CST], B.TECH [CSE]
Email: [email protected]
Personal Blog: https://ajaykumarbadhan.wordpress.com/
CONTENT
CLOUD COMPUTING TECHNOLOGIES AND APPLICATIONS
Comparison of Services
Resource Management
CONTENT
INTRODUCTION
When you begin to leverage cloud services, you must have a clear understanding of how that
resources will be managed by that provider.
The company has to manage the underlying infrastructure that the user is using (along with its
multitude of other customers).
It includes the physical servers, networks, and storage as well as other virtual servers.
Someone has to manage the databases and applications that are running on top of this infrastructure.
The cloud is a complex environment and many parties may be part of the cloud service delivery
model.
The parties include the cloud infrastructure provider, a SaaS provider, and the own set of
developers and delivery team.
The vast majority of cloud applications take advantage of request/response communication
between clients and stateless servers.
INTRODUCTION
Stateless Server
A stateless server does not require a client to first establish a connection to the server. Instead, it
views a client request as an independent transaction and responds to it.
The advantages of the stateless server are obvious. Recovering from a server failure requires
considerable overhead for a server that maintains the state of all its connections.
A stateless system is simpler, more robust, and scalable. The IT department needs to enable
administration systems that let them monitor every dimension of the service they are getting.
A client does not have to be concerned with the state of the server.
If the client receives a response to a request, that means that the server is up and running, if not,
it should resend the request later.
@Mr. authentication solutions provide the most sophisticated approaches to better protect assets
Ajay Kumar Badhan
9 PART -I: CLOUD COMPUTING TECHNOLOGIES & APPLICATIONS
TYPES OF IAM AUTHENTICATION
Types
1. Single Sign-On
It increases productivity and reduces friction for users.
With one set of login credentials (Username & Password) entered one time, an individual can
access multiple applications, switching between them seamlessly.
The process or framework for collecting and analyzing identity data across an organization is called
identity governance
Having a robust identity governance program can help you meet regulatory requirements and control
risk to your organization.
In the diagram, a developer runs an application on an EC2 instance that requires access to the S3
bucket that is named photos. An administrator creates the IAM role and attaches the role to the
EC2 instance.
The role includes a permissions policy that grants read-only access to the specified S3 bucket.
It also includes a trust policy that allows the EC2 instance to assume the role and retrieve the
temporary credentials.
When the application runs on the instance, it can use the role's temporary credentials to access the
photos bucket. The administrator does not need to grant the application developer permission to
access the photos bucket, and the developer never needs to share or manage credentials.
1. US Safe
1. SAS70 Type Harbor
Industry
II 1. US Safe 1. US Safe 2. SAS 70 1. US Safe 1. SAS Type II
Regulatory
2. HIP AA Harbor Harbor Type II & Harbour 2. Safe Harbor Policy
Compliance
3. SOX Sys trust
Certified
3/29/2022
by
Mr. Ajay Kumar Badhan
Assistant Professor
M.TECH[CST], B.TECH [CSE]
Email: [email protected]
Personal Blog: https://ajaykumarbadhan.wordpress.com/
CONTENT
CLOUD ECONOMICS
Laws of Cloudonomics
Cost Estimation
CONTENT
INTRODUCTION
It is the study of cloud computing costs, benefits, and the economic principles that underpin them
Developing an Economic Strategy
1. Reducing operating costs and optimizing IT environments are pivotal to understanding
and being able to compare the cost models behind provisioning on-premise and cloud-
based environments.
2. The pricing structures used by public clouds are typically based on utility-centric pay-
INTRODUCTION
ELABORATION
Visibility on Cloud Inventory
1. As per the survey of IT professionals, 75% report, they lack visibility of their cloud
resources.
2. The lack of visibility of resources in the cloud can lead to poor management of those
resources.
3. Effective cloud cost management begins with an in-depth analysis of the entire
infrastructure. And if some resources in the cloud are going unused due to lack of
awareness, but the organization is still paying for them, cloud costs will climb
unnecessarily – and cut into the infrastructure savings and other financial benefits the
cloud can bring.
4. Admins who have access to a single pane of glass and detailed Resource Dashboards
are equipped to better organize, manage, and optimize that ecosystem across all accounts,
clouds, departments, and teams.
@Mr. Ajay Kumar Badhan
7 PART -II: CLOUD ECONOMICS
ELABORATION
Cost Analytics
1. Complete visibility on the cloud services used, the actual usage patterns, and trends is the first step.
2. No matter your cloud environment, in addition to tracking what you have spent, it is important to
project what you will be spending.
3. You need consolidated as well granular details in the form of interactive graphical and tabular
reports across multiple dimensions, time frames in a multi-cloud environment to correlate data for
analysis and reporting against business objectives.
Role-Based Access
1. Permit users to actively manage the infrastructure after setting an Enterprise-wide mechanism that
clearly defines permissions and accessibility within the platform.
2. Limit the data and actions visible to users by organizations and roles and identify who launched,
terminated, or changed infrastructure, and what they did to take corrective action and control
costs.
ELABORATION
Controlled Stack Templates
1. A crucial characteristic of any DevOps team is to enable teams more autonomy over-provisioning
resources without the red tape and extensive time delay of traditional IT environments.
2. If it is implemented without the accompanying automation and process best practices, decentralized
teams have the potential to produce convoluted and non-standard security rules, configurations,
storage volumes, etc., and therefore drive up costs.
3. Using predefined stack templates, Administrators can bake in security, network, and instance
family/size configurations, so that the process of deploying instances is not only faster but aligned
with the Departmental user’s roles and privileges and ensures only specific Resources are
provisioned.
ELABORATION
ELABORATION
Automated Alerts & notifications
1. Stay on top of day-to-day changes in your environment and participate in the critical decision by
sharing standard and custom-built reports with details on cost, usage, performance with stakeholders.
2. Automated alerts and notifications about authorization failures, budget overruns, cost spikes,
untagged infrastructure result in increased visibility and accountability.
Budgets
1. Define and allocate budgets for Departments, cost centers, projects and ensure approval
mechanisms to avoid cloud cost overrun by sending out alerts when thresholds are breached.
2. We can use the Show-back report to charge-back Departments for their cloud usage and limit the
cloud cost and use of resources.
3. This alignment of cost with value ensures the anticipated business benefit once the cloud resources
are in production.
ELABORATION
Policy-Based Governance
1. Using cloud-based governance tools the user can track cloud usage and costs and alert administrators
when the total usage for the account is greater than a certain value or when the total usage for a
vendor-specific product is greater than a certain value helps control cost.
2. Schedule operational hours to automatically shut down & start virtual machines, and automated
events that alert administrators on volumes that have been disassociated from Virtual machines
(standalone VMs) for more than a set number of days.
3. In short, make use of integrated data sources, metadata, or custom tags to define a set of rules that
lead to improved cost management, reporting, and optimization.
2. It includes
3. Up-front costs for the purchase and deployment of on-premise IT resources tend to be high.
4. Up-front cost for the leasing of cloud-based IT resources tends to be very low.
Example: The labor cost required to assess and set up a cloud environment
LAWS OF CLOUDONOMICS
Joe Wienman of AT&T Global Services has concisely stated the advantages that cloud computing offers
over a private or captured system. A summary of Weinman’s “10 Laws of Cloudonomics” and his
interpretation is:
1. Utility services cost less even though they cost more.
Utilities charge a premium for their services, but customers save money by not paying for services
that they aren't using.
2. On-demand trumps forecasting.
The ability to provision and tear down resources (de-provision) captures revenue and lowers costs.
3. The peak of the sum is never greater than the sum of the peaks.
Enterprises deploy capacity to handle their peak demands. Under this strategy, the total capacity
deployed is the sum of these individual peaks. However, since clouds can reallocate resources across
many enterprises with different peak periods, a cloud needs to deploy less capacity.
4. Aggregate demand is smoother than the individual.
Aggregating demand from multiple customers tends to smooth out variation. Therefore, Clouds get
higher utilization, enabling better economics.
@Mr. Ajay Kumar Badhan
15 PART -II: CLOUD ECONOMICS
LAWS OF CLOUDONOMICS
5. Average Unit Costs are Reduced by Distributing Fixed Costs over more units of Output
The average unit cost is reduced by distributing fixed costs over more units of output. The more
number of cloud providers can therefore achieve economics of scale
6. Superiority in Numbers is the most important factor in the result of a combat
Weinman argues that a large cloud’s size has the ability to repel botnets and DDoS attacks better
than smaller systems do.
7. Space-Time is a Continuum
The ability of a task to be accomplished in the cloud using parallel processing allows real-time
businesses to respond quickly to business conditions and accelerates decision making providing a
measurable advantage.
8. Dispersion is the inverse square of Latency
Latency, or the delay in getting a response to a request, requires both large-scale and multi-site
deployments that are a characteristic of cloud providers. Cutting latency in half requires four times
the number of nodes in a system.
LAWS OF CLOUDONOMICS
9. Don’t Pull all your Eggs in One Basket
The reliability of a system with “n” redundant components and reliability of “r” is 1-(1-r)n.
Therefore, when a data center achieves the reliability of 99 percent, two redundant data centers have
the reliability of 99.99 percent (four nines) and three redundant data centers can achieve reliability of
99.9999 percent (six nines). Large cloud providers with geographically dispersed sites worldwide,
therefore, achieve reliability rates that are hard for private systems to achieve.
10. An Object at Rest tends to stay at Rest
A data center is a very large object. Private data centers tend to be located in places where the
company or unit was founded or acquired. Cloud providers can site their datacenters in what are
called “greenfield sites.”
A greenfield site is one that is environmentally friendly: locations that are on a network
backbone, have cheap access to power and cooling, where land is inexpensive, and the environmental
impact is low. A network backbone is a very high-capacity network connection.
COST ESTIMATION
Introduction
1. Usually a commodity is cheaper than a specialized item, but not always.
2. Depending upon the situation, the user can pay more for public cloud computing than for owning and
managing the private cloud, or for owning and using the software as well.
3. That's why it's important to analyze the costs and benefits of your own cloud computing scenario
carefully and quantitatively.
4. The cost of a cloud computing deployment is roughly estimated to be:
Where:
a. UnitCost It is usually defined as the cost of a machine instance per hour or another resource
5. Depending upon the deployment type, other resources add additional unit costs: storage quantity
consumed, number of transactions, incoming or outgoing amounts of data, and so forth.
6. Different cloud providers charge different amounts for these resources, some resources are free for
one provider and charged for another, and there are almost always variable charges based on resource
sizing.
@Mr. Ajay Kumar Badhan
18 PART -II: CLOUD ECONOMICS
COST ESTIMATION
Introduction
7. To compare your cost-benefit with a private cloud, you will want to compare the value you determine
in the equation above with the same calculation:
8. Notice the additional term for Utilization added as a divisor to the term for CostDATACENTER. This
term appears because it is assumed that a private cloud has the capacity that can't be captured, and it
is further assumed that a private cloud doesn't employ the same level of virtualization or pooling of
resources that a cloud computing provider can achieve.