Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"
•
0 j'aime•556 vues
"A Hypothetical Public Cloud Do Over" - John Downey, Product Developer and Security Lead at Braintree @jtdwney
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
En vedette
En vedette (11)
Similaire à Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"
Similaire à Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over" (20)
Plus de CloudCamp Chicago
Plus de CloudCamp Chicago (20)
Dernier
Dernier (20)
Cloudcamp Chicago Nov 2104 Fintech - John Downey's "A Hypothetical Public Cloud Do Over"
- 1. "A Hypothetical Public Cloud Do Over" ! John Downey, Product Developer and Security Lead at Braintree ! ! Tweet: @jtdwney #cloudcamp Sponsored by Hosted by #cloudcamp @CloudCamp_CHI
- 2. A Hypothetical Public Cloud Do Over 1
- 3. 2
- 4. Gateway 3
- 5. Why • Hypothetical exercise • Fun to think about • Most of this didn't exist when we started 4
- 6. Amazon Web Services • PCI Level 1 Service Provider • Where our experience is • A lot of movement happening • Newer offerings • Virtual Private Cloud (VPC) • CloudHSM 5
- 7. Virtual Private Cloud (VPC) 6
- 8. 7
- 9. 8
- 10. Bank Connectivity • VPN hardware • MPLS link • Can't do with regular EC2 ! 9
- 11. VPC • Replaces the network backing of AWS • EC2 • RDS • many others • Allows greater control over IP addressing 10
- 12. Bridge AWS to real hardware! 11
- 13. Hardware Security Module (HSM) 12
- 14. 13
- 15. Security • Store keys in taper resistant way • Acceleration for cryptographic operations • Makes certain audits much easier 14
- 16. CloudHSM • Pricey • $5,000 upfront for one • $1,373 average per month • You'll probably want at least two 15
- 18. Disaster Recovery • Capacity planning can be hard • Physical hardware has lead times • Run Multi-region 17
- 19. Photos • https://flic.kr/p/8avArb • https://flic.kr/p/8eRC2 18