topic Re: AWS or Azure in Tech Talk

AWS or Azure

isc2clack — Tue, 20 Nov 2018 22:09:58 GMT

Hi,

I was looking for general views on which of the major cloud vendors people feel have the more robust, consistent security model?

Thanks

Re: AWS or Azure

Brendan — Wed, 21 Nov 2018 00:01:28 GMT

AWS has the appeal for size and support and a larger pool of AWS certified architects and developers. However, anecdotally I have seen Azure support more privacy controls and general security controls for the financial services industry. AWS would be a wider canvas that would need an experienced team to implement. Azure seems to work with clients more to support (and understands) the GDPR (privacy) concerns. Hope this helps!

Re: AWS or Azure

Steve-Wilme — Wed, 21 Nov 2018 09:27:35 GMT

It depends on what you're looking for in terms of your use case, rather than just look at technical security or compliance. With both it's important you understand respective responsibilities of the CSP and yourself.

Re: AWS or Azure

CISOScott — Wed, 21 Nov 2018 12:36:47 GMT

I know for a long time the "cloud" was frowned upon by security people, myself included. Then I took a class on Azure and it opened up my eyes to the possibilities. It is doing the same basic things we were doing on premise (virtual devices, server administration, etc.) but on their infrastructure. I realized we could have a lot of the same security vulnerabilities here on site as well (poor or incorrect setup of security parameters, poor administration of resources, etc.). Once I understood how the "cloud" worked, I became more pro-cloud. Plus Azure (I'm sure AWS or others too) could do data replication and redundancy A LOT better than I could. I'm pretty sure they also have a big security staff as well.

Regardless of which way you go, I recommend not only sending your IT staff through the training classes, but your security folks as well. Once they understand how it works they can better secure it.

Re: AWS or Azure

rslade — Wed, 21 Nov 2018 18:07:46 GMT

> CISOScott (Advocate I) posted a new reply in Tech Talk on 11-21-2018 07:36 AM in

> Then I took a class on Azure and it opened up my eyes to the
> possibilities.

Right, he's drunk the Microsoft koolaid. I don't think there's any hope, but he still
might be saved ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
... if they go to church sometimes, and abstain from the
grossest acts of mortal sin, though they are ignorant of the
spirit and power of godliness and have no sense of the love of
God and universal benevolence, yet they rest well satisfied of
their salvation and are pleased to think they may enjoy the world
as much as they can while they live and have heaven in reserve
when they die. - Susanna Wesley
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: AWS or Azure

CISOScott — Wed, 21 Nov 2018 18:41:34 GMT

@rslade wrote:
> CISOScott (Advocate I) posted a new reply in Tech Talk on 11-21-2018 07:36 AM in

> Then I took a class on Azure and it opened up my eyes to the
> possibilities.

Right, he's drunk the Microsoft koolaid. I don't think there's any hope, but he still
might be saved ...

Oh Yeah!

Some of you will get the Kool-Aid reference.

I feel that I would feel the same way had it been an AWS class........

Re: AWS or Azure

rslade — Thu, 22 Nov 2018 17:57:17 GMT

> CISOScott (Advocate I) mentioned you in a post! Join the conversation below:

> I feel that I would feel the same way had it
> been an AWS class........

Different flavour, but ... 🙂

Re: AWS or Azure

Caute_cautim — Tue, 27 Nov 2018 19:06:18 GMT

Lets put a filibuster into the mix here:

So if you sat down, compared the core Cloud Providers by the using the CSA Cloud security matrix, how would they stack up?

Anyone done this assessment?

Plus I think you should also weight up, how many public security breaches against both have occurred as well?

Plus how much is the business decision based on cost?

I have seen some organisations spread the risk, by using a combination of Cloud providers including Private Cloud to ensure they are fully resilient.

Regards

Caute_cautim

Re: AWS or Azure

Caute_cautim — Tue, 27 Nov 2018 20:34:30 GMT

Plus just to add some heat to this conversation:

https://itwire.com/security/85421-microsoft-cloud-services-hit-by-mfa-issues-again.html

Microsoft MFA just went into meltdown literally again.

regards

Caute_cautim

Re: AWS or Azure

Kempy — Fri, 07 Dec 2018 16:12:37 GMT

I made a preference for AWS because they less frequently change stuff in the control plane, they have a bigger footprint and due to less frequent changes have fewer outages.

Having said that I still think the other cloud platforms are very good and enable businesses to attain new synergies. Pick and mix would be a good strategy, or spread your risk.

Re: AWS or Azure

varun123sn — Fri, 16 Sep 2022 08:10:58 GMT

Azure and AWS both have promising career opportunities and lead the market regarding revenue shares. But, AWS is the leader in the market, though Azure is a close second. While Azure can capture 30% of the need for cloud services, Azure finishes with 20%. This is because AWS began to gain acceptance before Azure did. But, Microsoft indeed prefers Azure while other companies lean towards AWS. While the market for Azure is higher at the moment but it's impossible to tell who will be the leader in the market as both companies operate on the same level.
It is recommended to choose your career path based on the kind of business you are planning to enter and the kind of experience in technology you possess. Because of the popularity of AWS, AWS seems like the best option. However, it's not that easy as that because there is no way to predict who will be the leader in the market. If you want to pursue a good career within the Cloud and Cloud-based services, then AWS is your best choice. However, if you are toward Data Analytics and Machine Learning and Machine Learning, then Azure is the best choice. Both offer promising careers as long as you are knowledgeable about the subject. A superficial understanding will not help you much in either of these companies as market leaders. AWS is the safer option at present, as it has maintained the top place on the market for an extended period and is likely to hold this position in the future.

Re: AWS or Azure

JoePete — Fri, 16 Sep 2022 13:42:18 GMT

@isc2clack wrote:
I was looking for general views on which of the major cloud vendors people feel have the more robust, consistent security model?

This is a massively open-ended question and can vary greatly depending on the type of cloud service you need/use. I don't think security lies in the macro details of either one but how well you, as the consumer, understand the fine details of what the service provider will do and what's your responsibility. That will vary within each vendor depending on service level and type. With the cloud, you replace system admins with "service analysts" (or some such thing) who know the SLAs and SOC reports inside and out and address the gaps. You also need to really focus on your users and ensure they understand data classification, permissions, and good authentication practices.

The analogy I use is the cloud is a glass apartment building. Depending on your wants and your service provider's capabilities, it may be completely furnished or empty, it may have a cleaning service or no maintenance at all, maybe there is a doorman or maybe there is none at all. But above everything else, you gotta remind your users not to walk around in their underwear.

Re: AWS or Azure

komalrai — Wed, 12 Oct 2022 10:37:03 GMT

Intresting