Something funny is happening these days.
Service providers are bold enough to offer public cloud to public services, but not so long ago they were almost certain to receive a rejection stating that public cloud was not secure enough to host services for governmental or other public organizations.
Where would the data reside?
Where would the systems be?
Who would have access to these systems? Staff from American companies like Azure and Amazon Web Services (AWS)? Absolutely no-can-do.
Public clouds can be as secure as anything
Now, as we’ve seen in recent tenders, these same governmental and other public organizations have developed strategies for their cloud ambitions. Now, they all seek ways to land into public cloud in a secure way.
The benefits of Azure, AWS and Google have grown beyond doubt. Not to mention that these public clouds have done incredible work to deliver services as secure as anything.
My take on this: Azure, AWS and Google Cloud Platform (GCP) are probably the most secure platforms existing today.
Just look at the tools, services and developments within Azure for example.
The capabilities of its Security Center, the ways to segregate instances, networks and workloads from each other, methods to ingress and outgress traffic and, also certainly worth mentioning, the development of a very powerful native SIEM with Sentinel. All on demand.
Of course, this doesn’t come for free, but then again: nothing does.
The right mix
Yet not everything will end up in the public cloud. Hence, at Fujitsu, we focus on hybrid and multi-cloud.
First of all: most of our customers don’t want to risk a vendor lock-in situation. So, why would they go for a full cloud vendor lock-in by transferring all workloads to only one cloud?
Secondly: some workloads might perform better in cloud A than in cloud B, whether that is IaaS, PaaS or SaaS. A cloud architecture should include the possibilities to get the best cloud solution for a specific function or workload.
And finally, especially in public services where compliance, data security, GDPR, and other specific public regulations count heavily, there will always be environments that have to remain on a private stack.
A cloud strategy should start with defining what environments should remain ‘on premises’, but there’s no reason anymore not to transfer all other services to a public cloud. However, it is best to do it slowly and think through every step carefully.
Think of the cloud journey as a pizza, like the title of our most recent cloud survey.
To quote the report:
When it comes to cloud, from our experience the whole is greater than the parts. For example, when you’re eating a pizza and you take out the first slice, it doesn’t matter how well it’s been cut, there are bits of pizza still connected to what remains. Stringy bits of mozzarella cling on to adjacent segments.
In other words: integration between different clouds is crucial since workloads in any cloud will always connect to something outside that cloud.
Let’s add one more note to the pizza metaphor. If you take a large bite from a pizza that just freshly arrived out of the oven, you are bound to burn your mouth with the hot, melting mozzarella.
Our advice: take small bites when you start eating.
Wish to read more about how to succeed with a multi-cloud enabled Hybrid IT strategy? Visit our website: https://www.fujitsu.com/global/services/multi-cloud.