1.6 Cloud Actors and Functions

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with

Already have an account? Sign In »

12 hours 48 minutes
Video Transcription
all right now, just to sum up the cloud functions. The cloud actors on even a little bit on service is this is just a nice visual. That sort of shows you how these elements come together,
and it addresses just a little bit of the roles and responsibilities now. Nothing in depth enough to really make a good business decision here, of course,
but you'll see, for instance, the cloud consumer where we start off on the left and they'll look to that cloud auditor to look at their security audits, privacy audits, performance, whatever we're looking toe audit that comes from the cloud auditor.
And it could be an auditor from 1/3 party. Might be,
uh, cloud service providers, internal audit reports, right talk about socks, service, organizational control documents and some of those things. But ultimately, of course, when we wanna understand the assurance associated with the vendor, we looked on
all right. Now the cloud service provider will. Their job, first of all, is to orchestrate. Service is so whether it's software as a service platform is the service infrastructures of service, that's what they're providing. Tow us now. I will tell you there are a zillion different as a service is,
it's a matter of fact. Right now you're getting Kelly is a service.
I'm not coming into your home or work. I'm sitting here in my desktop, so you're accessing me through the Internet. By golly, Kelly is a service, right. There are a 1,000,000 different as a service. If you can use a letter, you could make it as a service.
Heard the exam. There are only three right software's service platform is a service infrastructures of service and everything else that's kind of falls in one of those main buckets. If you'll think of one of those main categories, so you'll hear a 1,000,000 different things.
Ultimately, everybody wants to specialize and kind of fulfilling niche.
it's a service guy software platform infrastructure.
All right. Now, of course,
the cloud service provider has to provide the hardware, the equipment that we're running in the facility that will always be the responsibility of the Cloud service provider,
the data center where they have their systems in the hardware
now who's responsible for data or access all these other things that can be determined based on different surfaces and service a little agreements, but always gonna be the hardware in the facility. And then this idea. You see the little white block between service orchestration and physical resource layer.
This idea of abstraction, this is really important.
I don't want my users to know that they're storing data on Server three and a 12 node cluster. You know, I don't want them to have to get down to the details, right. I want it to be easy. I want all the complicated stuff toe look like it's being managed by elves and fairies.
That's the best way tohave your users feel like computing works it. Just close your eyes and it magically happens. The times that users were talking to me about hardware is when there's a problem, right. I have to make it seem less my jobs to make it easy for user's. I'm not saying that's the only job
breathing, most important job,
but my job is to make things seamless for user's, so to create this abstraction, where users are able to access the resource is that they want
use a shared server on on open, you know, on a private network that connects to another sub net where another resource is they don't need to know all of that. So we need. That means toe orchestrate what's really going on underneath the surface from what the user sees right?
All right, and then cloud service management from the governance of Cloud Service provider.
You know what their policies and procedures are. But then management's more the nitty gritty, the business, a court, How that's how the resource is our provisioned. You know how we have new new customers, how that configuration works, depending on which service.
And then this idea of portability and interoperability is important, too,
because in this element, um,
we want to make sure we're not locked into a particular provider,
all right, and then over on the right, you see the cloud Service broker whose job is to help us determine as customers what service is we need
help us find the way to ensure that all the service's we need are provided to us. To aggravate service is sometimes across multiple providers, and then any sort of arbitration
that would need to go on where service level contracts were not being met. A broker can help us with battles,
and then underneath it all.
It's the network wires, the path there was ones and zeros travel across in the big picture. So this is just cloud actors and functions and how they all relate together.
Up Next
Certified Cloud Security Professional (CCSP)

This Certified Cloud Security Professional (CCSP) certification course covers topics across six domains, to ensure the candidate has a wide range of competencies and is capable in the assessment and implementation of cloud service solutions.

Instructed By