Managing the Dynamic Datacenter

Datacenter Automation

Subscribe to Datacenter Automation: eMailAlertsEmail Alerts newslettersWeekly Newsletters
Get Datacenter Automation: homepageHomepage mobileMobile rssRSS facebookFacebook twitterTwitter linkedinLinkedIn


Datacenter Automation Authors: Elizabeth White, Pat Romanski, Liz McMillan, Glenn Rossman, Moshe Kranc

Related Topics: Cloud Computing, Cloudonomics Journal, Datacenter Automation, CIO/CTO Update, Sarbanes Oxley on Ulitzer, Java in the Cloud

Blog Feed Post

Automating Security in Cloud Computing: August’s Cloud Security Tip of the Month

tip of the month Security in cloud computing data security in the cloud  security in cloud computing Automating Security in Cloud Computing: August’s Cloud Security Tip of the MonthAchieving the best data security in the cloud has multiple steps. In our tip of the month series, we have been addressing many of them and have received extensive feedback from you that these tips are helping you secure your data, achieve compliance, and attain peace of mind knowing that there is a way to benefit from cloud computing without sacrificing data security in the cloud.

We have covered basics like cloud encryption and cloud key management and we have delved deep into technical topics like key rotation and spanning security from public to private infrastructures. We have addressed complementary needs like training employees and preparing for disaster. This August, we are exploring the importance of automating your security in the cloud.

Automating Security in Cloud Computing

Of the cloud’s many benefits is its ability to automate deployments. In the security context this can be extremely useful for ensuring that processes are secured as designed. An automated deployment will follow the recipe baked into its automation approach.

Automating secure processes removes some of the human error out of systems, which can strongly enhance security.

Automation can be done through proper configuration and also through automation scripts. The list of security processes that can be automated in the cloud should be familiar. The leading cloud infrastructure vendors will enable monitoring, logging, issuing alerts, allocating access rights, defining roles, and more.

Another aspect is what you choose to bake into your cloud images. Deployment of updated, properly patched images can and should be automated and this allows regular security updates of your environment.

Of course, you will also wish to use appropriate security products to safeguard your cloud environment. Products exist for a variety of areas, from IPS/IDS systems to encryption and key management.

Data Security in the Cloud: The importance of APIs

Whatever you are trying to automate in your secure cloud environment, the importance of APIs cannot be stressed too much. For many, a cloud is not really a cloud without proper ability to control all its aspects through an API. RESTful APIs have become a de facto standard for automating cloud functionality.

Interestingly, this point has not been taken up by all vendors of security products. Perhaps it is due to carrying over products from the old data center days, but security products that properly offer a RESTful API for all of their functionality are actually not yet the norm. This is a place where the leading offerings differentiate.

When an API is available, all the capabilities can be triggered and set up through automated calls, which gives you the ability to combine configuration and scripting to achieve a properly automated, secure environment.

 

The post Automating Security in Cloud Computing: August’s Cloud Security Tip of the Month appeared first on Porticor Cloud Security.

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.