NIST Cloud Computing Reference Architecture.pptx

NIST

1. NIST Cloud Computing Reference Architecture

2. NIST Cloud Computing Reference Architecture In September 2011, NIST released Special Publication (SP) 500-292, titled "NIST Cloud Computing Reference Architecture." NIST SP 500-292 provides a structured framework that defines the basic building blocks of cloud computing, offering clarity and consistency in understanding and implementing cloud solutions. It serves as a reference point for designing, deploying, and managing cloud-based systems.

3. NIST cloud computing reference architecture defines five major actors: Cloud consumer, Cloud provider, Cloud carrier, Cloud auditor and Cloud broker. Each actor is an entity (a person or an organization) that participates in a transaction or process and/or performs tasks in cloud computing.

4. Cloud Consumer - A person or organization that maintains a business relationship with, and uses service from, Cloud Providers. Cloud Provider - A person, organization, or entity responsible for making a service available to interested parties. Cloud Auditor - A party that can conduct independent assessment of cloud services, information system operations, performance and security of the cloud implementation. Cloud Broker - An entity that manages the use, performance and delivery of cloud services, and negotiates relationships between Cloud Providers and Cloud Consumers. Cloud Carrier - An intermediary that provides connectivity and transport of cloud services from Cloud Providers to Cloud Consumers.

5. Cloud Consumer: Definition: A cloud consumer is an individual or organization that uses services provided by cloud providers. This role maintains a business relationship with the provider and utilizes their cloud services. Example: A company using cloud-based storage for its data or a software application hosted on a cloud platform. Cloud Provider: Definition: A cloud provider is an entity responsible for offering cloud services to users. Providers manage the infrastructure, platforms, or software that consumers use. Example: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP). Cloud Auditor: Definition: A cloud auditor is an independent entity that assesses cloud services to ensure they meet certain standards for performance, security, and compliance. Example: A third-party security firm that performs security audits of cloud service implementations.

6. Cloud Broker: Definition: A cloud broker manages the delivery and performance of cloud services, often negotiating between cloud consumers and providers. They might aggregate, integrate, or customize services. Example: A company that provides a marketplace where businesses can compare and purchase cloud services from different providers. Cloud Carrier: Definition: A cloud carrier provides the connectivity and transport necessary for delivering cloud services from providers to consumers. They manage the network infrastructure and ens ure reliable communication. Example: An Internet Service Provider (ISP) that offers the network connection through which cloud services are accessed.

7. Cloud Consumer A cloud consumer represents a person or organization that maintains a business relationship with, and uses the service from a cloud provider. A cloud consumer browses the service catalog from a cloud provider, requests the appropriate service, sets up service contracts with the cloud provider, and uses the service. The cloud consumer may be billed for the service provisioned, and needs to arrange payments accordingly. Cloud consumers need SLAs to specify the technical performance requirements fulfilled by a cloud provider. SLAs(Service Level Agreement) can cover terms regarding the quality of service, security, remedies for performance failures.

8. Cloud Provider A cloud provider is a person, an organization; it is the entity responsible for making a service available to interested parties. A Cloud Provider acquires and manages the computing infrastructure required for providing the services, runs the cloud software that provides the services, and makes arrangement to deliver the cloud services to the Cloud Consumers through network access

9. Cloud Provider - Major Activities

10. Service Deployment Private Cloud- On-Site Private Cloud-he cloud infrastructure is located within the organization’s premises. The organization manages and maintains the hardware and software. Outsourced Private Cloud-the infrastructure is hosted at a third-party data center, but the cloud environment remains dedicated to the organization. Public Cloud - In a public cloud model, the cloud infrastructure and computing resources are made available to the general public over a public network. Hybrid Cloud- A hybrid cloud is a cloud deployment model that combines two or more distinct cloud environments—such as public clouds, private clouds, and community clouds—into a single, unified system. Community Cloud- A community cloud serves a group of Cloud Consumers which have shared

11. Service Orchestration Service Orchestration refers to the composition of system components to support the Cloud Providers activities in arrangement, coordination and management of computing resources in order to provide cloud services to Cloud Consumers. Three Layer:Service , resource abstraction and control layer, physical resource layer Service Layer SaaS PaaS IaaS

12. Resource abstraction and Control involves creating virtual representations of physical computing resources. This enables cloud consumers to manage the recourses and interact with virtualized resources rather than directly managing physical hardware. Physical resource layer , which includes all the physical computing resources Hardware resource- CPU,Memory , Network (routers, firewalls, switches, network links and interfaces), storage components (hard disks)etc Facility Resource- heating, ventilation and air conditioning (HVAC), power, communications,

13. Cloud Service Management Cloud Service Management includes all of the service-related functions that are necessary for the management and operation of those services required by or proposed to cloud consumers Eg Configuring and deploying cloud services according to the requirements of the cloud consumers. Assigning and configuring physical or virtual resources needed to deliver the service.

14. Security - To protect data and systems from unauthorized access, attacks, and other threats, ensuring that data is safe from breaches and loss. Privacy - To ensure that individuals' personal information is handled according to their preferences and legal requirements, safeguarding against misuse or unauthorized access.

15. Cloud Auditor Security audit-Assessing whether security controls (management, operational, and technical) are properly implemented according to the defined policies and standards. Privacy impact audit-To ensure that personal information is protected according to privacy laws and regulations, and that privacy risks are managed appropriately. Performance audit-

16. Cloud Broker A cloud broker acts as an intermediary between cloud service providers and cloud consumers. They manage and optimize the use, performance, and delivery of cloud services, facilitating relationships and transactions between the two parties. Categories of Cloud Broker Services Service Intermediation -Enhancing existing cloud services by adding value through various capabilities. Service Aggregation -Combining and integrating multiple cloud services into unified offerings. Service Arbitrage -Flexibly choosing and managing services from various providers to meet specific needs.