1 / 7

The Microsoft Cloud Azure Platform

The Microsoft Cloud Azure Platform. This presentation incorporates some content from Microsoft. Types of Clouds. Private (On-Premise). Infrastructure (as a Service). Platform (as a Service). You manage. Applications. Applications. Applications. You manage. Runtimes. Runtimes.

tuari
Download Presentation

The Microsoft Cloud Azure Platform

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. The Microsoft CloudAzure Platform • This presentation incorporates some content from Microsoft

  2. Types of Clouds Private (On-Premise) Infrastructure (as a Service) Platform (as a Service) You manage Applications Applications Applications You manage Runtimes Runtimes Runtimes Security & Integration Security & Integration Security & Integration Managed by vendor Databases Databases Databases You manage Servers Servers Servers Managed by vendor Virtualization Virtualization Virtualization Server HW Server HW Server HW Storage Storage Storage Networking Networking Networking

  3. Cloud Services Continuum (based on Robert Anderson) Software (SaaS) Salesforce.com e-Science Central Google Docs Google AppEngine • Amazon • Elastic Map Reduce • Simple DB • Simple Queue Service Platform (PaaS) Complexity & Flexibility Windows Azure - Sharepoint - SQL Services Infrastructure (IaaS) Windows Azure .net services Amazon EC2 & S3 http://et.cairene.net/2008/07/03/cloud-services-continuum/

  4. The Microsoft Cloud Categories of Services Application Services Software Services Platform Services Infrastructure Services

  5. Windows Azure Platform • Internet-scale, highly available cloud fabric • Globally distributed Microsoft data centers (ISO/IEC 27001:2005 and SAS 70 Type I and Type II certified) • Consumption and usage-based pricing; enterprise-class SLA commitment • Compute– auto-provisioning 64-bit application containers in Windows Server VMs; supports a wide range of application models • Storage– highly available distributed table, blob, queue, & cache storage services • Languages– .NET 3.5 (C#, VB.NET, etc.), IronRuby, IronPython, PHP, Java, native Win32 code • Data – massively scalable & highly consistent distributed relational database; geo-replication and geo-location of data • Processing – relational queries, search, reporting, analytics on structured, semi-structured, and unstructured data • Integration – synchronization and replication with on-premise databases, other data sources • Service Bus – connectivity to on-premises applications; secure, federated fire-wall friendly Web services messaging intermediary; durable & discoverable queues • Access Control – rules-driven federated identity; AD federation; claims-based authorization • Workflows – declarative service orchestrations via REST-based activities

  6. Encrypts data before it goes to database • Encrypts connection to azure via SSMS (SQL Server Management Studio) • Service • Secure channel required (SSL) • Denial Of Service trend tracking • Packet Inspection • Server • IP allow list (Firewall) • Idle connection culling • Generated server names • Database • Disallow the most commonly attacked user id’s (SA, Admin, root, guest, etc) • Standard SQL Authn/Authz mode Security and Privacy

  7. Approach • Automate federation for a wide-range of identity providers and technologies • Factor the access control logic from the application into manageable collection of rules • Easy-to-use framework that ensures correct token processing • Enable security scheme external to application • Multiple security schemes can be enabled • Rules used to map claims to what app expects • Integrate with standards-based identity providers, including enterprise directories and web identity systems such as Windows Live ID • .NET Developers use the Geneva Framework Access Control

More Related