Week 9 Posting - Cloud Monitoring

There are a couple of reasons why monitoring systems in the cloud is important. The first, and most obvious, is to ensure systems are still up. Sometimes, building systems in the cloud doesn't get the same attention as physical datacenter systems. It is important, even in the cloud, to make sure the resource allotments are right and systems are up.
The other thing that needs to be monitored is utilization for billing. In the cloud, when services are built to be billed by consumption, those costs should be monitored. This is different from on-premise systems, where the resources are bought in advance and no further unexpected utilization costs are incurred. To make sure the enterprise doesn't incur surprise costs, the services should have a quota or limit. The other thing that this helps with is turning down underutilized systems so that no additional costs are incurred.

Comments

Post a Comment

Popular posts from this blog

Week 5 Posting - VXLAN and Broadcast Security

A newer concept to me is the VXLAN. I have heard of spanning VLANs over layer3 networks, but it is typically an expensive endeavor that has never made sense to me in the past. Using VXLANs where the MAC is inserted at layer 4 instead of layer 2 to create an overlay network seems like it might be a better option where broadcast domains need to be joined. The thing that I don't like doing in my own networks, though, is relying on broadcast or flat network dependent traffic. Usually my experience has been that this dependence is related to poorly developed applications. This might be changing, and it would be interesting to know if companies are using VXLANs more or if security best practices are changing in a way that allows this to be a standard. One of the things I have seen changing a little is better endpoint security, where the network layer isn't the most prominent place to protect systems. EDR has brought a lot of security down to the host. If this trend continues, the mor...
Read more

Week 1 Posting - Introduction

My name is Dustin Pike, and the class I am doing this blog for marks the halfway point of my bachelor's degree! It has been a challenging time balancing life, work, and school - but also rewarding. I am looking forward to this class because it is a topic everyone is talking about.  Cloud computing and doing more in the cloud is a hot topic, and at the same time needs to be evaluated based on the use case. I don't think the cloud is perfect for every use case, but for the cases it makes sense it can provide much-needed flexibility and accessibility to companies. I have a little bit of experience in this area from taking classes and getting my AWS foundations certification a few years ago. The cloud landscape is changing so much that I have no delusions that I have a lot to learn. I'm looking forward to gaining new knowledge, and hopefully being able to apply it to my work life as well.
Read more

Week 7 Posting - Root Account Safety

When talking about root accounts, I think it is important to acknowledge their purpose and how to protect them. Root accounts usually can't be deleted outright, and that isn't a bad thing. Having a root account be a break-glass account is beneficial when a system like directory services or SSO isn't working. They are sometimes critical when an incident happens and immediate access is needed. Knowing that they can't be removed, my goal is to know every time they are used. I like to have security systems tied to these platforms to get an alert when someone has needed to use the root account. This gives the administrators flexibility to do their work, but also holds them accountable for following a process. The key to this is having well-documented root account names and a log aggregator like a SIEM with alerts set up for authentication attempts.
Read more