Domain 3: Security Architecture and Engineering
Video transcripts
Every course video in Domain 3, written out with timestamps so you can search the wording instead of scrubbing through playback.
Transcript
- 0:04Mist identifies three service models and
- 0:08ISO IEC 17 7 89 identifies four service categories
- 0:13that represent different types of cloud services available.
- 0:16The first three are the same with both standards
- 0:19software as a service sass the capability provided to the consumer
- 0:23is to use the providers applications running on a cloud infrastructure.
- 0:27The applications are accessible from various client devices through either
- 0:31a thin client interface such as a web browser,
- 0:33for example, web based email or a program interface.
- 0:37The consumer does not manage or control
- 0:39the underlying cloud infrastructure including network servers,
- 0:43operating systems, storage or even individual application capabilities.
- 0:47With the possible exception of
- 0:49limited user specific application configuration settings
- 0:53platform as a service or pass
- 0:56the capability provided to the consumer is
- 0:58to deploy onto the cloud infrastructure,
- 1:01consumer created or acquired applications created using programming languages,
- 1:06libraries, services and tools supported by the provider.
- 1:10The consumer does not manage or control
- 1:12the underlying cloud infrastructure including network servers,
- 1:16operating systems or storage
- 1:18but has control over the deployed applications and
- 1:21possibly configuration settings for the application hosting environment
- 1:25infrastructure as a service or I
- 1:28A.
- 1:28The capability provided to the consumer is to provision,
- 1:31processing storage networks and other fundamental
- 1:34computing resources where the consumer is able
- 1:37to deploy and run arbitrary software which
- 1:40can include operating systems and applications.
- 1:43The consumer doesn't manage or control the underlying cloud infrastructure
- 1:47but does have control over operating systems, storage and deployed applications
- 1:52and possibly limited control of select networking components.
- 1:55For example, host firewalls.
- 1:58The slide here shows a typical pizza as a service as
- 2:02an example to describe the three types of cloud deployment.
- 2:05The make at home pizza represents the on prem system.
- 2:09When you make a pizza at home,
- 2:10all ingredients in the oven are required to be from your home
- 2:14just as everything is on prem for an on premise system, including network switches,
- 2:18routers system, et cetera
- 2:20for a take and bake pizza.
- 2:22The vendor provides the pizza dough toppings, cheese and sauce.
- 2:26You manage the oven drinks, fire electric gas and dining table.
- 2:31Now, in the case of a
- 2:32a
- 2:32the vendor manages the physical environment and
- 2:35you control the OS and the applications
- 2:38for the pizza delivery vendor provides pizza dough toppings, cheese sauce,
- 2:42fire and electric gas.
- 2:44You manage the dining table and the drinks
- 2:47just as pass, the vendor manages the physical environment N OS.
- 2:51You control the applications
- 2:54for the dining out model. The vendor manages everything and you manage nothing.
- 2:58And this of course is the same as the Sass model.
- 3:01You're responsible for certain controls such as access control, auditing,
- 3:05et cetera.
- 3:06IOIEC 17 7 89 adds an additional service category as
- 3:11network as a service or NAS
- 3:14a cloud service category in which the capability provided to the
- 3:17cloud service customer is to transport
- 3:20connectivity and related network capabilities.
- 3:23Ioiec 17 7 88 defines the four categories
- 3:28above and adds some additional service categories.
- 3:31Communication as a service or CAA S compute as a service or compass
- 3:36and data storage as a service or DS A.
Open in the ISC2 portaldefines the four categories above and adds some additional service categories. Communication as a service or CAA S compute as a service or compass and data storage as a service or DS A.
