In an increasingly interconnected digital landscape, safeguarding data privacy and ensuring robust security measures are paramount. CloudStack offers a dynamic ecosystem for deploying and managing cloud resources. However, to fully harness its potential, it is crucial to address privacy and security concerns effectively. This presentation explores the realm of possibilities and demonstrates how CloudStack can enhance the privacy and security of your cloud deployments. Boris examines practical approaches to protect sensitive data, fortify communications, and secure your infra against emerging threats. Join us on a journey to discover how CloudStack can be your trusted ally in the quest for a more secure and private cloud environment. ----------------------------------------- The CloudStack Collaboration Conference 2023 took place on 23-24th November. The conference, arranged by a group of volunteers from the Apache CloudStack Community, took place in the voco hotel, in Porte de Clichy, Paris. It hosted over 350 attendees, with 47 speakers holding technical talks, user stories, new features and integrations presentations and more.

1. Elevating Privacy and Security
with Apache CloudStack
by Boris Stoyanov
Cloudstack Collaboration Conference – Paris 2023

2. About
me
• Been braking software since I was 18
• With CloudStack since 2016
• Father, husband

3. Agenda
• Cloud security overview
• CloudStack
• QA

4. Disclaimer / Tech in
focus
• CloudStack native components
• NFS shared/local
• SDS storage (PowerFlex)

5. Platform
Cloud
operator
Users
Identity & RBAC,
Public traffic and
Resource limits
Physical security
Compliance
Moderation
Internal traffic
Data protection
Insights/monitoring
Security is shared responsibility

6. Secure Direct Download
and checksum verification
Data Encryption
Secure Agent
Communication
Identity
SAML
LDAP
2FA
AEAD DB
Encryption
Role-based
Access
Control
Secure VM
and Volume
migration
Data retention
policy
Logical
Isolation of
customer data
CA Framework SSVM
over
HTTPS/TLS
CPVM
over
HTTPS/TLS
Monitoring
Zabbix/
Prometheus