A cloud provider supplies services that hold an organization’s data and make it accessible through the provider’s tools and APIs. Data may sit in file-like storage or databases. Choosing a provider is not the same as gaining every benefit of the cloud: the way services are designed and used matters. section 8.3.1
Test common concerns against the proposed design:
- Security: monitoring, network isolation, encryption management, container runtimes, and fine-grained access can help, but the necessary safeguards still have to be implemented. section 8.3.1
- Data access: provider tools and APIs make stored data accessible; downloading a large volume can incur network charges. section 8.3.1
- Cost: treating a provider like a data center can be expensive. Compare designs and include the full costs of running your own hardware. section 8.3.1
Before committing, ask whether the team has the skills to design for the cloud, implement its security mechanisms, and check that the proposed use delivers benefits beyond removing local hardware. section 8.3.1
