Domain 1: Cloud Concepts, Architecture, and Design

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
12 hours 57 minutes
Difficulty
Intermediate
CEU/CPE
13
Video Transcription
00:00
>> Module 1.1, Domain 1,
00:00
Cloud Concepts, Architecture and Design.
00:00
Domain 1 of the six domains of
00:00
the Certified Cloud Security Professional exam
00:00
is definitely one of the largest and most important.
00:00
It really sets the stage
00:00
explaining most of the concepts involving cloud
00:00
computing that there we're going to go to in
00:00
greater depth later in this course.
00:00
Our learning objectives for this module are to
00:00
provide you with a high level understanding of
00:00
the topics in Domain 1 of
00:00
the Certified Cloud Security Professional exam.
00:00
You're going to understand the three Cloud service models
00:00
as well as the four cloud development models,
00:00
and begin to think about
00:00
the security concerns and aspects of each of these.
00:00
This image really sums
00:00
up all the aspects that are really touched
00:00
by this course in figuring
00:00
out how to secure things in the Cloud.
00:00
This image comes from this Cloud
00:00
Security Alliance Security Guidance
00:00
for critical areas of focus including
00:00
Cloud computing version 4.0.
00:00
I'll include a link in the course resources.
00:00
It's really a great essential piece of reading,
00:00
because this certification, through ISC squared,
00:00
was created in tandem with the Cloud Security Alliance.
00:00
At the top of our image, which we'll
00:00
see our central characteristics.
00:00
These five characteristics are
00:00
what enables Cloud computing.
00:00
Broad network access,
00:00
you have to have an Internet connection
00:00
to be able to connect
00:00
remotely to someone else's server through the Cloud.
00:00
Rapid elasticity, you can easily scale
00:00
up and scale down architecture as you need it.
00:00
Measured services, you only pay for what you use.
00:00
Although there's a lot of risk in that.
00:00
On-demand self-service, you can always access.
00:00
So long as you have that Internet connection,
00:00
you can access provision resources in the Cloud.
00:00
The big bar, resource pooling.
00:00
Shared resources are really what enable and make
00:00
Cloud computing costs benefit
00:00
work out for many companies.
00:00
The service models.
00:00
Software as a service, SaaS.
00:00
Using applications that are based in the cloud.
00:00
Many of us know these things,
00:00
such as Microsoft Office or G Suite salesforce.com.
00:00
Platform as a service.
00:00
This is really where you're spinning up
00:00
development environments and developing
00:00
new applications and software.
00:00
Infrastructure as a service.
00:00
This is where you may be having
00:00
your own hardware stored in a data center or be able to
00:00
really select your operating system
00:00
of choice and installing
00:00
it on hardware hosted in someone else's data center.
00:00
Now what's your plan model?
00:00
Should you use the public model?
00:00
It's probably the most economical,
00:00
but there isn't much control in
00:00
terms of some of the shared resources
00:00
and data security concepts we'll go through.
00:00
Private Cloud, you have the most control,
00:00
but it also comes with some of the greatest expense.
00:00
Hybrid Cloud is really a mix
00:00
of any of the other three models.
00:00
Community Cloud is usually a cloud that's managed by
00:00
a decentralized organization or potentially
00:00
one organization that's utilizing cloud resources.
00:00
It has its benefits and drawbacks as well,
00:00
but we'll go into many of those later.
00:00
The main thing to recognize from this is that
00:00
the business case for why
00:00
you're using the Cloud either as a service,
00:00
or as a deployment method drives the security and
00:00
the concerns of how you're going to
00:00
secure your Cloud environment.
00:00
Now, I would really like you to reflect
00:00
on some of these things.
00:00
What cloud-based services do you or your company consume?
00:00
It may not often be apparent to us
00:00
because technology is so ubiquitous.
00:00
We're easily able to whip out and
00:00
open up an app on our phone or visit
00:00
a website in our computer and do
00:00
calculations in software that
00:00
we download from the Internet.
00:00
That many of these things are
00:00
in fact cloud-based services.
00:00
If your company has a Cloud,
00:00
what kind of deployment is it?
00:00
Is it a public Cloud?
00:00
Is it a private Cloud? How would you tell?
00:00
Did any of the five characteristics
00:00
that are essential to Cloud computing surprise you?
00:00
In summary, we talked about
00:00
the essential characteristics of Cloud computing,
00:00
the four deployment models,
00:00
the three service models,
00:00
and got into some of
00:00
the security responsibilities that
00:00
come with Cloud computing.
00:00
I'll see you in the next module.
Up Next