da Agency

What is zero trust identity security?

A zero trust network is one in which no person, device, or network enjoys inherent trust. All trust, which allows access to information, must be earned, and the first step of that is demonstrating valid identity. A system needs to know who you are, confidently, before it can determine what you should have access to. Add to that the understanding of what you can access–authorization–and you’ve got the core foundation of zero trust security.At Google we rely on a zero trust system known as BeyondCorp, to move beyond the idea of a privileged corporate network.In this issue of GCP Comics we discuss ways of acquiring trust, as our friend attempts to visit some distant relatives.Why set up a zero trust model?Here are a few compelling reasons for setting up a zero trust system:Preserve the productivity of your employees working from home, from the office, from a coffee shop, or from anywhere elseDeploy quickly, faster than a traditional VPN system, for rapid onboardingSpin up new device access quickly in case of unexpected latté-applied-to-laptop and similar incidentsGive each web application its own access control, for precise security and lower riskDecide access based on identity, device health, location, time of day, or other factorsGoogle zero trust tools can protect your workloads on any public cloud, or on-premises, so you don’t need to move your applications to improve their securityBenefits of zero trustLower friction Zero trust systems can be invisible to the employees at your company. They sign in, they use a strong second factor, and they are ready to go. PortabilityThe authentication and authorization aren’t tied to your location. Previous methods of access control relied on trusted networks, giving privileged access to anyone inside the established corporate network. With a zero trust model it’s easy to work from home and access all the same systems and tools.SafetySwitching to a zero trust system has helped Google, and many other enterprises, reduce their exposure and minimize security incidents, proactively stopping phishing-based attacks and lateral movement after a compromise.ResourcesBeyondCorp Remote Access, our enterprise grade security offering for protecting workloads on Google Cloud, other clouds, or on-premisesBeyondCorp at Google, our own zero trust implementationPublished research papers on how Google created, deployed, and evolved the BeyondCorp model.Identity-Aware Proxy, The Google Cloud protective layer used to create context-based access to apps, VMs, and services.Want more GCP Comics? Visit gcpcomics.com & follow us on Twitter at @pvergadia and @maxsaltonstall  for updates on the next issue!Related ArticleKeep your teams working safely with BeyondCorp Remote AccessEnabling remote access to internal apps with a simpler and more secure approach without a remote-access VPNRead Article
Quelle: Google Cloud Platform

da Agency

Mirantis Brings OpenStack to Kubernetes, Adding Private Cloud Capabilities to Mirantis Cloud Native Platform

The post Mirantis Brings OpenStack to Kubernetes, Adding Private Cloud Capabilities to Mirantis Cloud Native Platform appeared first on Mirantis | Ship Code Faster.
To help customers ship code faster, the new Mirantis OpenStack for Kubernetes combines Mirantis’ track record of enterprise success with both Kubernetes and OpenStack.
Campbell, CA, December 10, 2020 — Mirantis, the open cloud company, today announced the first in a planned series of enhancements to the Mirantis Cloud Native Platform, enabling customers to ship code faster on a Kubernetes foundation that provides simplicity, cloud choice and security. This first release, already available to Mirantis Container Cloud customers via continuous updates, adds the ability to deploy, scale, and update private clouds on Kubernetes substrates.
Building on this foundation, Mirantis today released Mirantis OpenStack for Kubernetes — a containerized edition of the open-source infrastructure-as-a-service (IaaS) platform chosen by Mirantis customers across industries and geographies to build some of the largest and best-performing private clouds in the world.
“Kubernetes and containers are superior technologies for building and releasing applications that run anywhere, scale gracefully, are resilient, and that can be updated without service downtime,” said Shaun O’Meara, global field CTO at Mirantis. “We engineered Mirantis Cloud Native Platform to deliver, monitor, and update Kubernetes clusters, anywhere — on bare metal, private, or public clouds — providing a simple, self-service experience for customers.”
Mirantis OpenStack for Kubernetes provides a feature-rich, mature environment for hosting both legacy apps and modern use cases such as Network Functions Virtualization, mobile network operations, and large-scale scientific computing. And it provides this without operational headaches — under the hood, leveraging Kubernetes to ensure configurability, resilience, robustness and seamless updates for OpenStack running on top of it.
“Organizations still need virtual machines and private cloud infrastructure to make them easy to consume and manage at scale — in many cases, hosting their most valuable applications,” said O’Meara. “At the same time, almost all are now moving forward with containers and Kubernetes, because they know these technologies will help them ship code faster and run applications with unprecedented resilience, scale, and economy. So Mirantis Cloud Native Platform addresses this whole continuum of needs, with maximum choice, simplicity, and security.”
By delivering a batteries-included, secure by default, and certified implementation of Kubernetes everywhere, and using it as a substrate for managing key applications and technologies, Mirantis Cloud Native Platform and Mirantis Container Cloud can deliver a simple cloud-like experience that supports all the development and hosting models organizations need (VMs, containers, orchestrators); managing the entire platform stack on any infrastructure (bare metal, private clouds, public clouds), and providing a unified management experience to smoothly operationalize these complex technologies across a diverse multi-cloud.
To learn more about Mirantis OpenStack for Kubernetes visit: https://www.mirantis.com/software/mirantis-openstack-for-kubernetes/ The post Mirantis Brings OpenStack to Kubernetes, Adding Private Cloud Capabilities to Mirantis Cloud Native Platform appeared first on Mirantis | Ship Code Faster.
Quelle: Mirantis