…without web servers. I wonder about the data security of being so deeply embedded in the cloud.
9 thoughts on “Web Sites”
Comments are closed.
…without web servers. I wonder about the data security of being so deeply embedded in the cloud.
Comments are closed.
I also would be concerned what happens when the particular cloud faces higher than normal usage, such as say a Prime Day? Ugh, that really didn’t go so well for Amazon.
I currently run all my businesses and web sites through Lambda. It is very impressive, zero maintenance required.
As for security, you have to understand that security is one of those things that scales really well. The cost of securing 10 servers to a certain level of security is approximately the same as the cost of securing 10,000,000 servers to that same level. Amazon can spend a billion dollars on security, I can’t. So almost everyone that moves to Amazon will experience an increase in security, not a decrease.
You’re assuming competence on the part of the web services provider. If they aren’t good at security, or are behind the curve, then it leaves 10,000,000 servers exposed and not just 10.
Amazon obviously has decent security, infrastructure, etc. but, as Leland states, it still has issues.
Some web service providers operate much closer to the bone in terms of their costs/ability.
As always, buyer beware!
Sort of; you shouldn’t be comparing an actual web service provider with a mythical other company that “gets it right”. If you compare the actual other companies on the web, the typical web service provider has far better security than the typical in house server provider. The web services guy can specialize on it, that’s what they do. Security is always a lower priority when you are focusing on product features…
That said, there is a reason why Amazon is winning this fight.
I stay as completely clear of the cloud as I can. I have nothing on the cloud.
Not only are you relying on them to be *constantly* aware of hacking, and constantly upgrading and constant vigilance you are not protected from some cloud employee looking at and/or stealing your data.
For you as an individual, that may make sense. If you are a company, you already have that issue with your own employees. The hacking question is a problem either way. (Unless you leave your computer off most of the time.)
If you have a “server” of some sort, someone has to be doing everything in the second paragraph re. upgrades and threat analyis and the like.
Are you better at that than a giant company whose entire job is doing that in order to keep their virtualized server farm business afloat?
I’m not, and I’ve got experience [personal, not pro, but still] in the Unix admin field!
(As for “some cloud employee stealing your data”, well … that’s pretty low on the threat index, in any sane world.
Joe Cloud Employee Guy doesn’t care about any of your stupid data.
Why would he? It’s not even interesting to anyone but you or maybe your immediate competition [and even then, only some of it, maybe].
Combine that with encryption, and the threat model just isn’t there, for any of the stuff normal use-cases use cloud services for.)
I built my own server. It’s not on the internet.
A server not on the ‘Net is great for some stuff. If you want to interface with the larger world, not so much. Still, I wouldn’t keep the only copy of important files in the cloud either way.