Security Basics mailing list archives

Re: RE: AWS and security


From: savvy95 () gmail com
Date: Tue, 10 Jul 2012 20:36:30 GMT

Hi Guys,

There are 3 models - Software, Platform and Infrastructure (as a service). You can mix and match depending on your 
comfort level, whether technical, risk or regulatory.

Though the service providers are in a Multi-Tenent environment, the trade off is scalability, broad network access, 
Rapid Elasticity, Measured Service and On-Demand Self Service.

A good starting point to answer your underlying questions of it's viability in your situation try this: Hi Guys,

There are 3 models - Software, Platform and Infrastructure (as a service). You can mix and match depending on your 
comfort level, whether technical, risk or regulatory.

Though the service providers are in a Multi-Tenent environment, the trade off is scalability, broad network access, 
Rapid Elasticity, Measured Service and On-Demand Self Service.

A good starting point to answer your underlying questions of it's viability in your situation try this: 
https://cloudsecurityalliance.org/csaguide.pdf

The attacks you mention are against customers and not AWS themselves. So it's no less secure than your current scenario.

When companies move into The Cloud, they are forced to put Security as a high priority; but when the data is "closer to 
home" the feeling is erroneously that it's more secure. New technology is a learning curve.

Good luck. Keep us posted as to your decision and why?


Glen Victor
CISSP, ITIL, C|EH, MCT

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: