Cloud Computing - CompTIA Security +
Hola! I have to say that Cloud is an idea that I always liked, at the moment I am on the early ages of blogging BUT I think is cool I start with Cloud Computing, why not? I have several notes I tooked from my studies in CompTIA Security + I think may be helpfull for others.
The aim of this notes is to create a mental map of related concepts and ideas around Cloud Computing for the CompTIA Security + Exam.
I took the general structure from the study notes from a course in coursera by Jason Dion, to guide me, but I found that the info about topics are spread out and, so I made my own ones where I can find all the important ideas in one place.
My aim is that this is living document and continue creating and make changes following my progress and path.
I used AI to stylish the format, and to fact check the info, which is what I mostly do on my day to day.
What is Cloud Computing?
Cloud computing means using computing services over the internet. This includes things like servers, storage, databases, networks, software, analytics, and artificial intelligence.
Main Features and Benefits
- Faster innovation β You can build and test new things quickly.
- Flexible resources β You can easily increase or reduce what you use.
- Cost savings β You only pay for what you use, and the cloud provider handles infrastructure.
- Easy to set up β Itβs often quicker and simpler than using local systems.
- Scalability β Systems can handle more work automatically when needed (like in serverless computing).
- Cost-effective β Since the cloud provider takes care of energy and maintenance, it's cheaper for users.
- Flexible usage β You can access resources as needed.
- Data recovery β Backup and recovery tools are easy to use.
- Automatic updates β Security patches are often installed by the provider.
- Energy and computing management β The provider manages all the backend systems.
Important Considerations
- Availability β The system should be ready when you need it.
- Resilience β The system can recover from problems.
- Cost planning β Think about both short-term and long-term costs.
- Responsiveness β The system should quickly adapt to demand.
- Risk sharing β Some risks are handled by the provider, but customers still have security responsibilities.
- Patching challenges β Sometimes customers can't update systems easily due to limited access or compatibility issues.
- Cloud security β It's a shared responsibility between provider and customer.
Security concerns may include:
- Shared physical servers
- Weak virtual security settings
- Poor access control
- Outdated security measures
- Single points of failure
- Weak authentication and encryption
- Unclear policies or leftover data
Key Concepts
- Shared responsibility model β Defines who manages what between provider and customer.
- Third-party services β External vendors may be used for extra functions.
- Hybrid solutions β Combines local, private, and public cloud systems.
Cloud Architecture Styles
- Serverless computing β Developers write code without managing servers. Itβs cost-efficient and scales automatically, but may cause vendor lock-in.
- Microservices architecture β Breaks apps into small, independent services that can run and scale on their own.
Summary
Cloud architecture delivers IT services over the internet. It offers speed, flexibility, scalability, and cost benefits. However, it also comes with security and management concerns that require a clear understanding of shared responsibilities and good planning.