Virtualization and Containers

00:03

welcome to domain. Eight. Virtual ization in containers.

00:06

A cornerstone of cloud is about pulling large quantities of physical resource is and allocating portions of those pools two different tenants for different purposes.

00:15

None of this pooling would be possible without abstracting. The physical resource is, and this is all done through virtual ization.

00:23

You'll notice this is a recurring thing, something we discussed in previous modules. But it's a fundamental concept, emphasized not just for the CCS K, not just for Sai Buri, but in all cloud technology circles.

00:37

You may feel some of the points in this module are reiterating concepts we discussed previously, or maybe discussing and future modules. This is a hint from the CCS A that it's important and something you really need to focus on four year exam

00:51

and this module will be examining the different virtual is ations a bit deeper and walking through categories of virtualization.

00:58

Then we'll revisit virtual, compute security and network security, reiterating important points from the last domain and adding a few new items.

01:06

Then we'll delve into virtual storage security and finish up looking at container. Security

01:11

for the remainder of this video will be focused on key principles to securing a virtualized environment and major virtual ization categories.

01:23

In the last module, we took a deep look at software defined networks under the hood. These type of networks are very different than a traditional network.

01:30

As a cloud user, you don't see this perspective. You build virtual networks with sub nets, and I p arranges following designs, much like the traditional networks.

01:40

The same goes for your virtual machines, storage devices and so forth.

01:45

These virtual assets are all created using traditional paradigms, but things are very different beneath the surface.

01:51

This simplifies a lot in terms of cloud adoption, but it adds layers to security controls that you need to consider.

01:57

First, you need to make sure the virtualization technology itself is secure. The cloud providers primarily responsible for this. But if we're talking private clouds or community clouds, it may fall more into your purview.

02:08

Secondly, you need to secure the virtual assets themselves, and this is often done using different methods. Case in Point Cloud customers don't use physical firewall devices, but they can take some very powerful measures using virtual firewalls and implementing these micro segmentation

02:25

for the exam. Remember that compute virtualization abstracts, the running of code, application code or even operating systems from the underlying hardware that is executing on

02:37

virtual networks. Route traffic amongst your cloud resource is such as compute and storage, storage and storage. Virtualization is key to managing. Large amounts of data containers are another form of compute, but the C S A outlines. This is a separate category of virtual ization.