Archives for Cloud Computing - Page 9
Azure High Availability Architecture (IaaS based)
Azure high availability VMs architecture – including Taffic Manager, AD instances (on VMs). Self Explanatory – except possibly for the VPN Gateways in each region. Azure High Availability Architecture…
Failover Patterns in the Public Cloud
Let us define some terms before we get started. STANDBY environment – means an active, functioning environment, ready to take over instantly and automatically BACKUP environment – means a passive,…
Governance in AWS, Azure, GCP
What does governance mean in the context of a public cloud? Governance , while often used in the context of 'cost governance' , can actually apply to either of the…
Public IP Address vs Elastic IP ( EIP ) on AWS
Why not just attach a Public IP to your ELBs and your NAT instances? Public IP addresses are not persistent - if you stop/start your instance, the instance will get…
Roles and Policies in Google Cloud, and comparisons to AWS Roles and Policies
2 main differences beetween aws and gcp role / policy A GCP role gives a SINGLE permission to an IAM user. The permission is on a GCP resource. A GCP…
Google Cloud IAM and Identity
In GCP, the IAM menu is not the same as the Identity menu (Identity and Org menu item). IAM is around who accesses what. Roles are a key part of…
Service Accounts in GCP – Kinda like an AWS Role, but still different
For advanced technology seminars on AWS and other technologies, please visit Also see Roles and Policies in GCP IAM identities can be divided into two broad categories - user identities…
Security Audits of AWS Accounts – Roles, Policies and equivalents on GCP and Azure
What should be audited? And why FullAdmin is a terrible idea. (Also read, KMS based data encryption on AWS and Google Cloud) CloudTrail logs, CloudWatch log groups, GuardDuty logs, Inspector logs,…
Cloud KMS and AWS KMS – Encrypting data using native cloud services on Google cloud and AWS
A note on terminology - Cloud KMS refers to Google's KMS offering. It will never be used for AWS. AWS KMS is known as AWS KMS. CMK (Customer managed key)…
GCP backups – Some ways to transfer on premises data to Google Cloud
Three common ways to get data up onto a storage bucket in Google Cloud include: Using the Console (Storage Browser) Using gsUtil Using storage transfer service (needs agent installed locally)…