Perils of Public Cloud
At the outset, let’s start by defining what is Cloud computing and its various types. Then we shall delve deeper into the topic.
A simple definition of Cloud Computing may be that it is a pay-as-you-go model in which compute, storage resources and a host of other services and applications are available over the internet on-demand, without the direct active management of the user. The term is generally used to describe data centers available to many users over the Internet.
There are several cloud models. At the lowest strata of the cloud model is Infrastructure as a Service (IaaS) in which the core infrastructure components like Compute, Storage and Network are hosted on the internet using a cloud platform. Examples could be hosting of Virtual Machines on a cloud platform.
Platform as a service (PaaS) is a cloud computing model in which a third-party provider delivers the platform and software tools needed for application development to users over the internet. Examples could be hosting an Oracle or SQL database on the cloud.
SaaS as a service (SaaS) is a cloud computing model in which software is licensed on a subscription basis and is centrally hosted. It is sometimes referred to as "on-demand software". It is a software distribution model in which a third-party provider hosts application and makes them available to customers over the Internet.
Cloud computing is here to stay for quite some time now. It has made such an impression on our minds that most of us tend to believe that it has become indispensable. Business decision makers are moved by the inherent cost advantages of migrating their applications to cloud.
However, sometimes, I ponder over the snowballing effect of public cloud and think - while we are going gaga over the advantages of cloud computing, is it a fully rosy picture? If so, why aren’t all organizations joining the cloud bandwagon? After all everyone wants to earn more profits. Isn’t it? The fact of the matter is that like every other thing in this world, even cloud computing has its inherent disadvantages. While there are many knowledgeable articles on the advantages of public cloud and support public cloud migration. This write-up peeks at the flip side of using Public cloud services to host applications.
The first thing that strikes me is the Lack of control and customization when migrating to Public cloud. Since the services provided by Public cloud are generic, these services are almost always one-size-fits-all solutions. They offer predetermined features that cannot be changed or customized to any specific business needs. The subscribers are constrained to use only the features available within the cloud. This creates a bottleneck, particularly, if there is a pressing need to integrate bits that are outside of the subject public cloud offering.
Vendor lock-in
Allied to the above point is the issue of vendor lock-in. Public cloud services usually force a business to use a specific platform with little, if any, choice of software or systems. A business is required to format its information to match the “flavour” of technology that is offered. This might not be a problem when simply viewing documents, but it can become a sizeable headache when it comes to database compatibility, for example.
Security vulnerabilities
It’s absolutely true that the most prominent public cloud providers use high levels of security to protect users’ data. But that doesn’t make them invulnerable. Data protection and compromise is a constant cat and mouse game, where even the most sophisticated systems are not impervious. In addition, the high profile data storage providers are seen as juicier targets because of their profiles and the vast amounts of data that can be accessed. They are thus more likely to be attacked.
Privacy and data ownership
In countries like the US the laws governing data privacy in a public cloud storage facility are different to the ones that apply to data housed in an in-house or dedicated private business data centre. Public cloud providers are more exposed to subpoenas and potentially to backdoor data monitoring. While a law-abiding business may not view this as problematic, it nonetheless creates privacy exposure.
Perhaps more worrying is the issue of data ownership. Some public cloud storage providers have clauses in their terms and conditions that practically amount to data sharing permission, in the sense that the service provider is allowed to parse the data and mine it for commercial intelligence that it can use for other revenue-generating activities.
So while the advantages of cloud storage are abundantly clear, businesses need to be very careful when using public cloud service providers. The best option is always to use a dedicated cloud provider that can offer a bespoke service tailored to the business, with accompanying SLAs.
