This article is about the shared responsibility model. When you create a server at the cloud, who’s responsible for it? It is the cloud provider or you? If I’m using Gmail and if I lose my emails, who is responsible? I uploaded a lot of data in Platform as a Service in my database. Who is responsible for it? What if my data get compromised? What if my data gets hacked? Who’s responsible for it?
In this article, we will understand the responsibility and ownership of cloud providers, and what’s your responsibility for it? We will use the analogy of consuming pizza. We will learn shared responsobility model by shared responsibility examples.
Made-In-House – Shared Responsiblity
Now there are several ways in which you can consume a pizza or get a pizza for yourself when you are hungry. The first box will be making your own pizza that is in-house made pizza. Here you have a lot of responsibilities out there if you want to make a pizza. It’s a heavy-duty task. You are responsible for the toppings, the pizza dough, and the oven making sure the electricity is there, gas is there. The kitchens utensils are there so you gotta have all the ingredients in place is quite a lot of responsibility in cocking something at home. This is an example of shared responsibility.
Kitchen as a Service
As supposed to you go to the market, pick up things that are required, you’ll go and pick up the pizza dough, and then you pick up the toppings, etc. You pick up all of those things and once you reach home, you assemble them together and put them in the oven. Well, your pizza is ready sometime.
We have less responsibility there because you have given all the responsibility to the ingredient provider cloud is Wal-Mart or target where you may want to pick up the things. You don’t have to cook whole a whole lot of things. Kitchen as a service is an exmple of shared responsibility.
In the second case where we refer to as kitchen as a service. In the third box, where you say that, hey you know I don’t want to cook. You can just order your pizza. Just call your favorite pizza provider and then they get pizza for you. You are not responsible for ones in Green which is kitchen, gas, oven, pizza dough. It’s not your responsibility at all because the favorite pizza guy, they’re the once who will be creating pizza for you or once it arrives at your home. You will be responsible for a few things right. You gotta decorate it, you cloud have a dining table, a place to sit and eat and all that. This is also an example of shared responsibility.
Pizza as a Service
In this, last section which is pizza as a service or does nothing when you arrive at the place orders your pizza from Giordano’s and then your pizza delivered to your desk and then you consume it and pay the bill. You are not responsible for cooking the pizza or toppings or oven and dough.
The different ways and will use this analogy to understand what’s your responsibility in the kitchen as a service as supposed to walk in and bake as supposed to pizza as a service.
Now let’s see how we can compare it with each of these like Prem and infrastructure and platform and software as a service. You can learn more about shared responsibility model by Googling it.
On your Premise
On you, the premise is as good as cooking the pizza or making the pizza at home. That’s a lot of responsibility, right?
Similarly you have lot of responsibility when you think about provisioning something in your office. So you want to make everything in your office. You want to host your application in your premise, the new responsible in each of those layers, right from the networking layer all the way to the top application layer. You ca understand shared responsibility by this.
What kind of network connectivity do you want to have? Is it straight cable or fiber optics or across cable? What kind of storage well is it’s San Nas or dash? Do you want to contact IBM or Dell or HP for the servers? What kind of virtualization model do you want to go for? Type one or type 2? Should you go for HyperV or VMware? What kind of operating system is your application supporting Linux or windows? If windows? What flavor? And then if it’s Linux CentOS Ubuntu, the Red Hat, which one? Well, there’s a lot of thinking that goes behind provisioning the infrastructure on your premise, and that also is directly proportional to the amount o time that you will invest. So remember the three key things that I told. Still, why we go to the cloud?
CAPEX cutting down on the CAPEX. Cutting down on the operational expenditure and time to market. The on-premise infrastructure just takes down a lot of time and a lot of investments, hence the need to move to the cloud. So, in your premise, your 100% responsible for every layer in every entity. This is all about shared responsibility.
Infrastructure as a Service
Let’s talk about Infrastructure as a Service. What’s your responsibility? And you know that in Infrastructure as a Service you create servers, let’s say and your responsibility starts right from the moment you created a server. What’s the hardware on which my virtual machine is hosted less? That’s something we don’t care. It’s not my responsibility. What’s the virtualization layer out, the underlying virtualization layer? Are they using KVMs or Paravirtualization?
Are they using HyperV or VMware is something that I am not at all concerned about as a cloud user? When I create a server in the cloud, it will also create a hard disk for me. What kind of storage is the back end using? Is it sand? Is it I SCSI or Das or Nas? Well, let’s not worry about it networking. How about cross cables or straight cables or fiber optics? Well, it’s not our concern at all, but your responsibility starts with the operating system layer. The ones in the blue which is an operating system but once the operating system is installed, you install the patches. You do this server hardening and US cloud users will be installing the antivirus. You will be updating the definitions of the antivirus. You will be opening the right set of firewall rules so that the right sort of people can connect to it. So those are the responsibilities that you have. What kind of applications will be downloaded on the machine and installed? Server handling procedures, security protocols. That’s your responsibility. So the ones in the blue in Infrastructure as a Service segment is your responsibility Ones in the green is the cloud provider’s responsibility.