Table Of ContentContents
Foreword
Preface
Acknowledgments
About the Author
Chapter 1: Why Cloud, Why Now?
Evolution of Cloud Computing
Enter the Cloud
Start-Up Case Study: Instagram, from Zero to a Billion
Overnight
Established Company Case Study: Netflix, Shifting from
On-Premises to the Cloud
Government Case Study: NOAA, E-mail, and Collaboration
in the Cloud
Not-for-Profit Case Study: Obama Campaign, Six-Month
Shelf-Life with One Big Peak
Summary
Chapter 2: Cloud Service Models
Infrastructure as a Service
2
Platform as a Service
Software as a Service
Deployment Models
Summary
Chapter 3: Cloud Computing Worst Practices
Avoiding Failure When Moving to the Cloud
Migrating Applications to the Cloud
Misguided Expectations
Misinformed about Cloud Security
Selecting a Favorite Vendor, Not an Appropriate Vendor
Outages and Out-of-Business Scenarios
Underestimating the Impacts of Organizational Change
Skills Shortage
Misunderstanding Customer Requirements
Unexpected Costs
Summary
Chapter 4: It Starts with Architecture
3
The Importance of Why, Who, What, Where, When, and How
Start with the Business Architecture
Identify the Problem Statement (Why)
Evaluate User Characteristics (Who)
Identify Business and Technical Requirements (What)
Visualize the Service Consumer Experience (Where)
Identify the Project Constraints (When and with What)
Understand Current State Constraints (How)
Summary
Chapter 5: Choosing the Right Cloud Service Model
Considerations When Choosing a Cloud Service Model
When to Use SaaS
When to Use PaaS
When to Use IaaS
Common Cloud Use Cases
Summary
Chapter 6: The Key to the Cloud
4
Why REST?
The Challenges of Migrating Legacy Systems to the Cloud
Summary
Chapter 7: Auditing in the Cloud
Data and Cloud Security
Auditing Cloud Applications
Regulations in the Cloud
Audit Design Strategies
Summary
Chapter 8: Data Considerations in the Cloud
Data Characteristics
Multitenant or Single Tenant
Choosing Data Store Types
Summary
Chapter 9: Security Design in the Cloud
The Truth about Data in the Cloud
How Much Security Is Required
5
Responsibilities for Each Cloud Service Model
Security Strategies
Areas of Focus
Summary
Chapter 10: Creating a Centralized Logging Strategy
Log File Uses
Logging Requirements
Summary
Chapter 11: SLA Management
Factors That Impact SLAs
Defining SLAs
Managing Vendor SLAs
Summary
Chapter 12: Monitoring Strategies
Proactive vs. Reactive Monitoring
What Needs to Be Monitored?
Monitoring Strategies by Category
6
Monitoring by Cloud Service Level
Summary
Chapter 13: Disaster Recovery Planning
What Is the Cost of Downtime?
Disaster Recovery Strategies for IaaS
Recovering from a Disaster in the Primary Data Center
Disaster Recovery Strategies for PaaS
Disaster Recovery Strategies for SaaS
Disaster Recovery Hybrid Clouds
Summary
Chapter 14: Leveraging a DevOps Culture to Deliver
Software Faster and More Reliably
Developing the DevOps Mind-Set
Automate Infrastructure
Automate Deployments
Design Feature Flags
Measure, Monitor, and Experiment
Continuous Integration and Continuous Delivery
7
Summary
Chapter 15: Assessing the Organizational Impact of the Cloud
Model
Enterprise Model vs. Elastic Cloud Model
IT Impact
Business Impacts
Organization Change Planning
Change in the Real World
Summary
Chapter 16: Final Thoughts
The Cloud Is Evolving Rapidly
Cloud Culture
New Business Models
PaaS Is the Game Changer
Summary
Index
8
Founded in 1807, John Wiley & Sons is the oldest
independent publishing company in the United States. With
offices in North America, Europe, Asia, and Australia, Wiley
is globally committed to developing and marketing print and
electronic
products
and
services
for
our
customers’
professional and personal knowledge and understanding.
The Wiley CIO series provides information, tools, and
insights to IT executives and managers. The products in this
series cover a wide range of topics that supply strategic and
implementation guidance on the latest technology trends,
leadership, and emerging best practices.
Titles in the Wiley CIO series include:
The Agile Architecture Revolution: How Cloud Computing,
REST-Based SOA, and Mobile Computing Are Changing
Enterprise IT by Jason Bloomberg
Big Data, Big Analytics: Emerging Business Intelligence and
Analytic Trends for Today’s Businesses by Michael Minelli,
Michele Chambers, and Ambiga Dhiraj
The Chief Information Officer’s Body of Knowledge: People,
Process, and Technology by Dean Lane
CIO
Best
Practices:
Enabling
Strategic
Value
with
Information Technology (Second Edition) by Joe Stenzel,
Randy
Betancourt,
Gary
Cokins,
Alyssa
Farrell,
Bill
Flemming, Michael H. Hugos, Jonathan Hujsak, and Karl
Schubert
The CIO Playbook: Strategies and Best Practices for IT
Leaders to Deliver Value by Nicholas R. Colisto
Enterprise
Performance
Management
Done
Right:
An
Operating System for Your Organization by Ron Dimon
9
Executive’s Guide to Virtual Worlds: How Avatars Are
Transforming Your Business and Your Brand by Lonnie
Benson
IT Leadership Manual: Roadmap to Becoming a Trusted
Business Partner by Alan R. Guibord
Managing Electronic Records: Methods, Best Practices, and
Technologies by Robert F. Smallwood
On Top of the Cloud: How CIOs Leverage New Technologies
to Drive Change and Build Value Across the Enterprise by
Hunter Muller
Straight to the Top: CIO Leadership in a Mobile, Social, and
Cloud-based World (Second Edition) by Gregory S. Smith
Strategic IT: Best Practices for Managers and Executives by
Arthur M. Langer and Lyle Yorks
Transforming IT Culture: How to Use Social Intelligence,
Human
Factors,
and
Collaboration
to
Create
an
IT
Department That Outperforms by Frank Wander
Unleashing the Power of IT: Bringing People, Business, and
Technology Together by Dan Roberts
The U.S. Technology Skills Gap: What Every Technology
Executive Must Know to Save America’s Future by Gary J.
Beach
Architecting
the
Cloud:
Design
Decisions
for
Cloud
Computing Service Models (SaaS, PaaS, and IaaS) by
Michael Kavis
10
11
Cover Image: © iStockphoto/Kalawin
Cover Design: Wiley
Copyright © 2014 by Michael Kavis. All rights reserved.
Published by John Wiley & Sons, Inc., Hoboken, New Jersey.
Published simultaneously in Canada.
No part of this publication may be reproduced, stored in a
retrieval system, or transmitted in any form or by any means,
electronic, mechanical, photocopying, recording, scanning, or
otherwise, except as permitted under Section 107 or 108 of
the 1976 United States Copyright Act, without either the prior
written permission of the Publisher, or authorization through
payment of the appropriate per-copy fee to the Copyright
Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA
01923, (978) 750-8400, fax (978) 646-8600, or on the Web at
www.copyright.com. Requests to the Publisher for permission
should be addressed to the Permissions Department, John
Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030,
(201)
748-6011,
fax
(201)
748-6008,
or
online
at
http://www.wiley.com/go/permissions.
Limit
of
Liability/Disclaimer
of
Warranty:
While
the
publisher and author have used their best efforts in preparing
this book, they make no representations or warranties with
respect to the accuracy or completeness of the contents of this
book and specifically disclaim any implied warranties of
merchantability or fitness for a particular purpose. No
warranty may be created or extended by sales representatives
12
or written sales materials. The advice and strategies contained
herein may not be suitable for your situation. You should
consult with a professional where appropriate. Neither the
publisher nor author shall be liable for any loss of profit or
any other commercial damages, including but not limited to
special, incidental, consequential, or other damages.
For general information on our other products and services or
for technical support, please contact our Customer Care
Department within the United States at (800) 762-2974,
outside the United States at (317) 572-3993 or fax (317)
572-4002.
Wiley publishes in a variety of print and electronic formats
and by print-on-demand. Some material
included with
standard print versions of this book may not be included in
e-books or in print-on-demand. If this book refers to media
such as a CD or DVD that is not included in the version you
purchased,
you
may
download
this
material
at
http://booksupport.wiley.com. For more information about
Wiley products, visit www.wiley.com.
ISBN 978-1-118-61761-8 (cloth)
ISBN 978-1-118-82627-0 (epdf)
ISBN 978-1-118-82646-1 (epub)
ISBN 978-1-118-69177-9 (o-book)
13
I dedicate this book to my parents, John and Deme, and
my brother, Bill, whose work ethic and drive to be the best
in their fields serve as inspiration for me to excel and fully
embrace my field of computer science.
14
FOREWORD
I first met Mike Kavis when he brought our Licensed
ZapThink Architect SOA course to his company in Florida
several years ago. As the vice president of architecture for
this firm, Mike hoped to wrangle his group of developers to
help them think like architects. And while I couldn’t
transform developers into architects in four days, the thrust of
the course was to help people think like architects.
The book you have in your hands now has the same mission.
Cloud computing as an approach to IT infrastructure is still
emerging, and thus the technical details are still in flux—but
the architectural principles of the cloud are now falling into
place. But only by thinking like an architect will you be able
to take advantage of the full power of the cloud.
Architects are in a unique position in the IT shop, because
they have one foot in the business and the other squarely
ensconced in the technology. They must understand the nuts
and bolts of what works and what doesn’t without falling
victim to the techie tunnel vision that inflicts so many IT
people. But they must also live and breathe the business: its
strategy, its goals, and most importantly, its problems.
Architecting the Cloud connects these dots. Mike Kavis has
intentionally avoided product- or vendor-specific details,
focusing instead on the challenges that architects, as well as
stakeholders in the architecture, should address—in other
words, connecting the business problem with the appropriate
solution. A truism to be sure, but easier said than done in the
cloud.
15