Cloud Computing for Architects v. 2.0

Day 1

Module 1: Introduction & Definitions

• Cloud Philosophy
• Cloud Computing: Old Wine in New Bottles
• Formal Definition of Cloud Computing
  • NIST Cloud Computing Definition Framework
  • Essential Cloud Characteristics
  • Cloud Service Models
  • Cloud Deployment Models
• Managed Hosting vs. Cloud Computing
• Conceptual Reference Model
• Cloud Actors
• Cloud Deployment Scenarios
• The Enterprise Context
  • Relationship between Cloud & SOA
• Pioneers of the Cloud
  • The Birth of IaaS: Amazon Web Services
  • Amazon’s Retail Mentality
  • Growth of S3
  • Evolution of Amazon Elastic Block Storage
  • Amazon Data Center Investments
  • AWS Services Today

Module 2: Virtualization, Workloads, & Pods

• Virtualization doesn’t equal Cloud
• Traditional Infrastructure
• Virtualization Basics
  • Types of Hypervisors
  • Type 1 (Bare Metal) Hypervisors
  • Type 2 (Hosted) Hypervisors
  • Protection Rings
  • Traditional Operating Systems
  • Server Virtualization Landscape
  • Desktop Virtualization Landscape
  • Paravirtualization
  • Full Virtualization (without Hardware Assist)
  • Full Virtualization (with Hardware Assist)
  • OS Virtualization
  • Hosted Virtualization
  • VMWare Virtual Infrastructure Management
• Cloud Workloads
• Pods & Cloud Control Systems
  • VMWare 5000-User Pod Example
  • Aggregating Workloads & Pods
  • Availability Zones
  • Pod Architectures at Cloud Providers
• Cloud Storage Technologies
  • Direct Attached Storage (DAS)
  • DAS Management Challenges
  • Storage Area Networks (SAN)
  • Sizing SANs
  • NAS in the Cloud?
• Data Center & Resource Optimization
• Using a Cloud Control System (CCS)

Module 3: Cloud Deployment Options: Strategies & Caveats

• The Cloud Service Models
• The Cloud Deployment Models
• Different Multitenancy Models
• Services available to Cloud Consumers
• Common IaaS Examples
  • IaaS Providers
  • IaaS Consumers
  • IaaS Caveats
• PaaS Examples
  • PaaS Providers
  • PaaS Consumers
  • PaaS Caveats
• Common SaaS Apps
  • SaaS Providers
  • SaaS Consumers
  • SaaS Caveats
• Cloud Service Orchestration
  • Open Source Cloud Orchestration Platforms
  • OpenStack Ecosystem
  • OpenStack Projects
  • Rackspace Private Cloud (Alamo)
  • Eucalyptus Ecosystem
  • CloudStack Ecosystem

Case Study: M-Dot / Inmar

Module 4: Enterprise Architecture and the Cloud

• Cloud is an Emerging Market
• Vendor Spin
  • Oracle Cloud: It’s all about Oracle
  • Oracle Fusion Apps
  • IBM’s Shopping List
  • Microsoft’s Shopping List
  • Microsoft SaaS is “Live”
  • Google Cloud Platform
• Cutting Through the Hype
• EA Cloud Strategy
  • Cloud Computing Roadmap
  • Phased Strategy for Cloud Migration
  • Cloud Deployment Choices
• Architect for the Cloud
  • Elasticity Makes Clouds Cloudy!
  • The Challenge of Elasticity
  • The Dark Side: Enterprise IT
  • The Challenge of Scalability
  • The Challenge of Fault Tolerance
  • Elastic Thinking
• Transactions in the Cloud
  • Basic Availability
  • Partition Tolerance
  • High Availability Consistency
  • Enforced Consistency
  • Eventual Consistency
  • Eventual Consistency Throughout History
  • BASE instead of ACID
  • Is Synching All That Bad?
  • Soft State
  • Are you Ready for Inconsistent Data?
• The Light Side: The World of Web Scale

Module 5: Cloud Configuration

• The Context for Automated Cloud Configuration
• Fully Automated Provisioning
  • VM Images
  • Automated Provisioning of Environment from Spec
  • No Direct Management of Individual Boxes
  • Revert to “Previously Good State” at Any Time
  • Easier to Reprovision Than Repair
  • Anyone can Deploy or Update an Environment
• The Toss Test (Hypothetical!)
• NetFlix Chaos Monkey (Real!)
• Cloud Configuration Toolchain
  • Toolchain: Provisioning
  • Toolchain: Release Management
  • Toolchain: Monitoring & Control
  • AWS CloudFormation
• Cloud Configuration Maturity Levels

Case Study: reddit Condé Nast

Day Two

Module 6: Building RESTful Clouds

• Diverse Application Challenges
  • The Challenge of Architecture
  • Hypermedia, SOA & the Cloud
  • The Challenge of State
  • Scalability & State, The Old Way
  • The Secret to Transferring App State to the Client
• Representational State Transfer (REST)
  • Essential REST Terminology
  • Uniform Interface
• Four Architectural Constraints
  • Separation of Resource from Representation
  • Manipulation of Resources by Representations
  • Self-Descriptive Messages
  • Hypermedia as the Engine of Application State
• Is REST about APIs?
  • Deltacloud: RESTful APIs to the Cloud
  • Deltacloud Example
• HATEOAS in Action
• Cloud Coding Best Practices

Module 7: Cloud Standards

• The Problem with Standards
• Context for Cloud Standards
  • Scope of Cloud Standardization
  • Who’s Talking to Whom?
  • Cloud Standards Taxonomy
  • Cloud Standards Landscape
  • Prevailing Standardization Approaches
• Are We Talking About APIs?
  • Compute API Support
  • Amazon AWS APIs
  • Eucalyptus & Amazon AWS APIs
  • OpenStack APIs
  • Cloud APIs: Future Trends
• Core Cloud Standards
  • OVF
  • CIMI
  • OCCI
  • CDMI
  • Essential Security Standards
• Cloud Standards Bodies – PaaS
  • PaaS: Cloud4SOA Consortium
• Cloud Semantic Standards
  • Semantics Depend Upon Context
  • Semantic Interop Largely Manual
  • Types of Application Semantics
  • Semantic Description of a Cloud Application
  • Semantic Conflicts

Module 8: Cloud Security

• Four Disciplines of Cloud Security
• Applying the Security Control Model
• Cloud Security Maturity
• The Three Core Cloud Access Control Concerns
  • Cloud Security: Authorization
  • Cloud Security: Policy
  • Cloud Security: Provisioning
• Federated Security
  • Security Assertion Markup Language (SAML)
  • OAuth as Federated Authentication Mechanism
  • Cloud Authentication: Federated Identity Management
  • The Big Picture: Retaining Control
• Cloud Security: Data Confidentiality
  • Key Management is “Key”
  • Data Lineage & Provenance
  • Data Remanence
• Cloud Security: Data Availability
• Virtual Security (VirtSec)
  • VirtSec Gotchas
  • Typical DMZ (No Virtualization)
  • Partially Virtualized DMZ
  • Completely Screened DMZ
• Public vs. Private Clouds: Which Are More Secure?
  • What about a Virtual Private Cloud (VPC)?
  • Public, Private, or VPC?

Case Study: Amazon.com

Module 9: Cloud Governance

• What is Governance?
• Governance Domains
• Governance & Enterprise Risk Management
• Cloud Governance Challenges
  • Cloud Availability & Failover
  • Dealing with Cloud Reliability
  • Cloud Governance as VM Governance
  • Sample Amazon Simple Queue Service Policy
  • Rogue Clouds
  • Cloud Governance: Run Time Considerations
  • Example: Vordel Cloud Gateway
  • Vordel’s Drag & Drop Policy Development
• Extending SOA Governance to the Cloud
• Dealing with Cloud Reliability
• Cloud Governance as VM Governance
  • Sample Amazon Simple Queue Service Policy
• Cloud Governance: Auditing
  • Strategies for Dealing with Cloud Audit
• Example: Vordel Cloud Gateway
  • Vordel’s Drag & Drop Policy Development
• Cloud Governance Checklist
• Cloud Assurance
  • Cloud Governance: Auditing
  • Audit Requirements
• Incident Response
• eDiscovery
  • eDiscovery and the Cloud
  • eDiscovery Issues
• Cloud Compliance Directions
  • Cloud Compliance Model
  • PCI
  • EU DPD
• The Cloud Mandate in the US Government
  • The 25 Point Plan
  • “Cloud First” Policy
  • FedRAMP
  • FedRAMP Concept of Operations
  • Third Party Assessment Organizations (3PAOs)
  • FedRAMP Hurdles

Module 10: Big Data & the Cloud

• Big Data are Everywhere!
• What are “Big Data”?
  • The Three V’s
  • Big Data Technology Landscape
  • What are Big Data for?
  • Real Time?
  • Big Data Motivations
  • Cloud Features & Big Data
  • Big Data & The Cloud
• NoSQL Landscape
  • Apache Cassandra
  • Other Leading Open Source NoSQL Choices
  • Amazon DynamoDB
• Enter Hadoop
  • Hadoop Value Proposition
  • Hadoop Architecture
  • Hadoop Distributed File System
  • HDFS Nodes
  • Big Data at Apache: Pig, Hive & Zookeeper
• MapReduce
  • Exhaustive Processing
  • MapReduce Illustration
  • Amazon Elastic MapReduce
• Setting the Bar for Private Clouds
• Hadoop Architecture @ Orbitz
  • Orbitz: Single Input Record
  • Orbitz: Results
• The Hadoop Challenge