Cloud Lift & Shift Security Pitfalls
Transcript
[Music] hey guys going to Keith counter from the CTO of Viacom today CTO dose lift and shift to the cloud I've talked about this topic a bit because it's a question that continues to come up in enterprise I'm not a fan of the concept not because from a technical perspective that is a tough thing to do VM is a VM whether that VM runs in your data center or that VM runs in the cloud x86 is common enough that the actual application workload will run and
x86 workload in the cloud however that doesn't mean that the processes you've developed on Prem to manage those x86 workloads will translate into the public cloud I think the number one area that I'd like to pick upon in this is security we have what seems like a blanket of firewalls Network ACLs intrusion protection systems and the like to protect us in the traditional data center there for security teams and administrative teams can get a little bit Lexx when it comes to security on faul shares application
access control etc depending that you know what if it's inside the data center it probably should be trusted or if it's inside the corporate four walls it could be trusted kind of like a cul-de-sac in the subdivision you leave your doors open because everybody in the subdivision you trust you don't you don't really count on someone coming from out of your neighborhood to intrude your home this is the case in the cloud we transfer that same mentality to the cloud so you see s3 buckets in
AWS wide open because that's how we treated security in the enterprise data center network shares were left why because we counted on firewalls networking ACLs physical access to the data to protect us we don't have those protections in the cloud this is just one area that processes that we depend on the data center don't translate in the public cloud and it takes a take a determined attitude to adjust for those things now as a temporary solution to lift and shift to go from one application hosting
provider to another ie your data your private data center to the public cloud and to transform that application basically use it as a transport method I'm a hundred percent believer in that however I'm not a hundred percent believer in enterprise discipline to make that transition from the data center to the public cloud that's it for this CTO daily dose if you don't agree with me follow me on Twitter engage in the conversation or on LinkedIn I'd love to hear feedback I'll post this on the website
the CTO visor com look under CTO daily dose to leave your comment talk to you next CTO dose
