Cloud Models

Based on ownership, size and access a cloud deployment model represents a specific type of cloud environment – Public, Private and Hybrid model

Private cloud

• Private cloud is cloud infrastructure operated solely for a single organization, whether managed internally or by a third-party, and hosted either internally or externally.
• Undertaking a private cloud project requires significant engagement to virtualize the business environment, and requires the organization to reevaluate decisions about existing resources.
• It can improve business, but every step in the project raises security issues that must be addressed to prevent serious vulnerabilities.
• Self-run data centers are generally capital intensive.
• They have a significant physical footprint, requiring allocations of space, hardware, and environmental controls.
• These assets have to be refreshed periodically, resulting in additional capital expenditures

Public cloud

• A cloud is called a “public cloud” when the services are rendered over a network that is open for public use.
• Public cloud services may be free.
• Technically there may be little or no difference between public and private cloud architecture, however, security consideration may be substantially different for services (applications, storage, and other resources) that are made available by a service provider for a public audience and when communication is effected over a non-trusted network.
• Public cloud service providers like Amazon Web Services (AWS), Oracle, Microsoft and Google own and operate the infrastructure at their data center and access is generally via the Internet.
• AWS, Oracle, Microsoft, and Google also offer direct connect services called “AWS Direct Connect”, “Oracle FastConnect”, “Azure ExpressRoute”, and “Cloud Interconnect” respectively, such connections require customers to purchase or lease a private connection to a peering point offered by the cloud provider.

Hybrid cloud

• Hybrid cloud is a composition of two or more clouds (private, community or public) that remain distinct entities but are bound together, offering the benefits of multiple deployment models.
• Hybrid cloud can also mean the ability to connect collocation, managed and/or dedicated services with cloud resources.
• Gartner defines a hybrid cloud service as a cloud computing service that is composed of some combination of private, public and community cloud services, from different service providers.
• A hybrid cloud service crosses isolation and provider boundaries so that it can’t be simply put in one category of private, public, or community cloud service.
• It allows one to extend either the capacity or the capability of a cloud service, by aggregation, integration or customization with another cloud service.

How to Implement TDE

Now that we have got the documentation to implement TDE. At high level we can follow below steps and mark these as check list during deployment or cut-over to production. Below steps are performed on EBS R12.2 on Solaris operating system.

Folks make sure you take full backup before importing the database including the binaries. A snapshot of entire stack is best option.

1. Perform Pre TDE steps as per the Doc ID: 1926686.1
2. Export complete database using data pump
3. Create new empty database
4. ENCRYPT the application tablespace
5. Create and open the wallet
6. Import the complete database using data pump to the encrypted tablespace
7. Perform post TDE steps

TDE- Transparent Data Encryption

TDE is designed to provide customers the ability to transparently apply encryption within the database without impacting existing applications. Transparent data encryption helps protect data stored on media in the event that the storage media or data file gets stolen, because it stores the encryption keys in a security module (that is, a keystore) external to the database. Protecting data from this type of theft is required for most compliance regulations. The benefit to using transparent data encryption is that it requires little coding and is quick and easy to implement.

More Details

• http://www.oracle.com/technetwork/database/security/tde-faq-093689.html
• Using TDE Tablespace Encryption with Oracle E-Business Suite Release 12.2 on Database 12c Release 1 (12.1.0) (Doc ID 1926686.1)

What is Cloud

What is Cloud ?

Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction. Some of the potential cloud vendors in the market

1. Microsoft
2. Amazon web services
3. IBM
4. Oracle
5. Google Cloud Platform/G Suite
6. Alibaba

https://en.wikipedia.org/wiki/Cloud_computing

How to Develop a Team

Develop Team

For a team to be effective, you need the right team members. It’s not how many people are on a team that makes it successful; you need people who work well together. They must share common goals, vision, agendas and timelines.