Cloud:Think!BeforeUsage

From queowiki
Revision as of 07:58, 3 September 2021 by Queo (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

No mattter whether you use Amazon(AWS), Google(GCP), Microsoft(Azure/Office365), or any other Cloud service, there's one rule for all of them:

T H I N K ! BEFORE YOU USE THEM

  • Privacy shield
- Since 2020-07-16 there's no more data agreement between the U.S.A. and the European Union at all.
de.wikipedia - privacy shield is void
  • US cloud usage risk:
NO legal basis for US cloud usage for companies in the EU anymore
EU companies have to investigate their US cloud usage NOW!
  • US Cloud act
US law enforcement has the permissions to get acces to all your cloud data

PROVIDER "fails"

=> unsorted links below, (german/english URLs mixed) - work in progress...
* Apple
iCloud
2020-10-09 - 55 security fails on iCloud
* Google(GCP)
2020-10-10 - Google IP-addresses/search requests/US law enforcment/GDPR incompatible?
* Microsoft
Office365
2020-10-05 => office365 is GDPR/(DSGVO) INCOMPATIBLE #1
2020-10-06 => office365 is GDPR/(DSGVO) INCOMPATIBLE #2
Azure
Azure Monitoring Agent for Linux
- no automatic update/no repository available
- a lot of files have wrong DAC settings (up to completely wrong octal notations of 777)
- minimal RAM requirements for one host 10GB of RAM (!)
- potential memory leak ahead
- monitoring processes with syslog - sorry I've never seen that before
- no predictive monitoring like the partition /opt will be full in 3 days
Prometheus and a lot of other tools are capable out of the box to accomplish that
...many more to come...


SOLUTIONS: There are solutions for this dilemma, use on-premise installations/servers (although it's old fashioned), create your own private cloud (e.g. with OKD (Origin Community Distribution)), use Nextcloud instead of sharepoint/onedrive, and so on.