Modis : AISA Perth Breakfast March 26 2019: Cloud Migrations Lessons from the Front Line
•Download as PPTX, PDF•
0 likes•103 views
A breakfast presentation on stories and learnings from a decade of Cloud Deployments and Migrations
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Modis : AISA Perth Breakfast March 26 2019: Cloud Migrations Lessons from the Front Line
Similar to Modis : AISA Perth Breakfast March 26 2019: Cloud Migrations Lessons from the Front Line (20)
More from James Bromberger
More from James Bromberger (6)
Recently uploaded
Recently uploaded (20)
Modis : AISA Perth Breakfast March 26 2019: Cloud Migrations Lessons from the Front Line
- 1. Cloud Security: Lessons from the frontline AISA Breakfast, 26 March 2019 PRAGMATIC CUSTOMERS AGILE CARING COURAGEOUS INNOVATIVE
- 2. Today… 26/03/20192 © Modis James is…. • Modis (formerly Ajilon) Consulting Director (Cloud, CyberSecurity) • Landgate Land Titles automation (et al) to AWS Cloud (2014-) • Advara (as above) • WA Education Department (Student Management System) • Dept Transport (Serverless Payment processing, etc) • Presented on Web security at AISA Perth branch conference 2018 Modis wider (AU): • WA Police • DIRD • Qld Health • NSW Jury Management, VIC Jury Management • Roy Hill • BHP
- 3. 26/03/20193 © Modis 1200+ 450 380 150 90 145 75 Business Analysts 15% Architects 8% Project & Program Management 16% BI & Analytics 4% Developers & Integration 29% Testing 16% Support & Operations 12% Rest of World: 7000+
- 4. Previously… 26/03/20194 © Modis [1] [2] [4] • First paid-for web content 1995 (still online!) • UWA Webmaster, 1997 – 2000 [1] • Debian/GNU Linux Developer 2001 – present • Hartley’s/JDV online ShareTrading • Linux.conf.au chair 2003 (w/Linus [2], and in Christchurch in 2019 [3]) • In UK 2003 – 2010: Fotango (Canon Europe NV), Vibrant Media (Advertising) • AWS Security Solution Architect Aus & New Zealand 2012-2014 [4] [3]
- 6. Pop Quiz 26/03/20196 © Modis What was the worlds first Platform as a Service, and in what year?
- 8. 26/03/20198 © Modis Buzz word What Who’s problem is it? SaaS Subscription service Them Serverless Code execution as a service Just your developers PaaS Managed Infrastructure as a Services Partially You IaaS VM as a Service Mostly You On-premise Your tin Totally you
- 9. 1. Catch up. Re-evaluate continuously. 26/03/20199 © Modis CLOUD
- 10. 1. Catch up. Re-evaluate continuously. 26/03/201910 © Modis 0 200 400 600 800 1000 1200 1400 1600 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Cloud Provider “A” Service Updates (example) Updates
- 11. 1. Catch up: ASD Protected Capacities. 26/03/201911 © Modis https://www.acsc.gov.au/infosec/irap/certified_clouds.htm 25 services 42 services
- 12. 2: Use Cloud Native/Managed Services 26/03/201912 © Modis What do we want to get done? Can it be done (completely, partially) with a managed service?
- 13. Install a Message Queue solution on a set of VMs: • Get current install media • Obtain license key(s) • Create standby replica host • Manage encryption keys at rest, in flight • Monitor & Alert on replication • Create backup snapshots • Monitor & Alert on Snapshots • Manage VM OS updates, reboots • Hand-roll & test upgrade patch cycle • Hire sys admin(s), manage on-call, training… • Choose a name for the queue • Start using it Use a Managed Message Queue service (PaaS): • Choose a name for the queue • Start using it 26/03/2019 2: Use Cloud Native/Managed Services: Message Queue (IaaS v PaaS) 13 © Modis
- 14. 2. Use Cloud Native/Managed Services: SLAs. 26/03/201914 © Modis What SLA do you get from your IT team, individually or as a group? Penalties? Cost?
- 15. 2. Use Cloud Native/Managed Services 26/03/201915 © Modis Don’t “roll your own” solution when a managed (PaaS) service exists (Especially with cloud provider security capabilities)
- 16. 26/03/201916 © Modis 10 ft, 5 pack = AU$22
- 17. • Which services face the Internet? • Should/can they? • What are our encryption in- flight standards? • Can these be lifted? • What authentication options are available for my apps? • Do we encrypt in flight when talking to these authentication endpoints? 26/03/2019 3: Adapt/Improve your standards 17 © Modis
- 18. Can you automate certificate issuance and deployment? 0 20 40 60 80 100 120 140 Category 1 US Gov’t Site with expired TLS Certs (count) Normal During 2019 Shutdown 26/03/2019 3: Adapt your standards: automatic certificate replacement 18 © Modis
- 19. 26/03/2019 3: Adapt your standards: pets versus cattle 19 © Modis
- 20. • Repeatability • Rapidity • Reliability => DevOps 26/03/2019 4. Get CONTROLLED speed into your deployment 20 © Modis
- 21. • Cloud provider log analysis • Architecture inspection & compliance • API queries => DevSecOps 26/03/2019 5. Governance via inspection, data & metrics, not via questions 21 © Modis
- 22. • Try new services • Try new CPU families (VMs) • Try creating something of value to your organisaton 26/03/2019 6. Encourage experimentation, within bounds 22 © Modis
- 23. 26/03/2019 7. Spend all your time on the logical config, not the physical 23 © Modis
- 24. 1. Catch up (since you last looked) 2. Use cloud native 3. Adapt/improve standards 4. DevOps 5. DevSecOps 6. Experiment 7. Concentrate on the logical 26/03/2019 Summary 24 © Modis
- 25. Connect Smarter T: @JamesBromberger L: /jamesbromberger Australia 2018 PRAGMATIC CUSTOMERS AGILE CARING COURAGEOUS INNOVATIVE