Shared Services Canada and Cloud Computing

Transcription

1 Shared Services Canada and Cloud Computing Architecture Framework Advisory Committee Transformation, Service Strategy and Design February 21, 2013

2 Agenda TIME TOPICS PRESENTER(S) 9:30 9:40 Opening Remarks B. Long, Chair 9:40 9:55 Recap: From Cloud Framework to Cloud Service 9:55 10:30 Cloud Deployment Models 10:30 10:40 Health Break 10:40 11:30 SSC s Cloud Platforms: Discussion 11:30 12:20 Challenges In-depth B. Long P. Littlefield All P. Littlefield All B. Long All 12:20 12:30 Closing Remarks B. Long

3 Recap on Cloud-Computing Discussions December 17, 2012 January 28, 2013 February 21, 2013 March 2013 GCCC architectures and cloudcomputing models examined and discussed with AFAC members Revised GCCC architectures feedback incorporated Discussion of three use cases Platform strategy discussed Focus on platforms Discussion on decision criteria for private versus hybrid versus public cloud services Revised GCCC platform endorsed by AFAC 3

4 Cloud Computing: Defining Shared Services Canada s Role Internal private cloud and external cloud services should be defined by the same service architecture? Cloud Consumer Cloud Auditor Security Audit Privacy Impact Audit Performance Audit Cloud Orchestration Service Layer IaaS IaaS PaaS SaaS PaaS SaaS Resource Abstraction and Control Layer Physical Resource Layer Hardware Facility Cloud Provider Cloud Carrier Cloud Service Management Business Support Provisioning / Configuration Portability /Interoperability Cross Cutting Concerns: Security, Privacy, etc. Cloud Broker Service Intermediation Service Aggregation Service Arbitrage SSC could be the Cloud Broker and could also be a Cloud Provider. Some private cloud services could be provided by SSC. This would be the Community Cloud. The Cloud Broker would ensure multivendor management. 4

5 Cloud Deployment Models Directions Use Cases (samples) Private Cloud On-prem Private Cloud Off-prem Virtual Private Cloud Public Cloud Collaboration tools and applications Sensitive data and applications Public-facing websites GC internal websites and applications Public-facing transactional websites and applications Databases GC internal Dev/Test websites and applications 5

6 Platform Technologies Potential Directions Technologies whose disposition will be determined over the coming months TBD Linux on Z/OS Grow Linux on X/86 Windows Technologies where investments will be made, transformation will focus, and new business and workloads will be directed Technologies which will be phased out over the course of the transformation; workloads will be migrated to Grow platforms Sunset HP/UX MCP AIX Solaris Sustain Z/OS Technologies that will be maintained at current business volumes, with organic current business growth; no new business or workloads will be directed here 6

7 Platform Technologies Use Cases GROW Use Cases Windows Linux/x86 Z/OS Web Hosting Application Hosting Enterprise Resource Planning Document Management Collaboration Virtual Desktop / Thin Client File Services Database / Data Warehouse 7

8 Challenges In-depth: Cloud Interconnectivity Challenge: Connecting resources across clouds and customer premises Description: People, process and technology required for multi-csp, internal IT service management (ITSM) orchestration Forward Agenda items: CSB architecture and standards Internal ITSM architecture and standards Mitigations Cloud service broker architecture / standards Internal ITIL / ITSM architecture / standards GC Identity, Credential, Access Management (ICAM) Security and privacy controls 8

9 Challenges In-depth: Identity / Access Control Challenge 2: Managing identity, federation and access control Description: Transformation, migration to Role-Based Access Control (RBAC) and the ICAM strategy Forward Agenda items: ICAM architecture and standards GC directory architecture and standards Mitigations ICAM implementation schedule GC-wide directory strategy and architecture Migration from departmentalbased security to role-based access control 9

10 Challenges In-depth: Multi-tenant Client Isolation Challenge 3: Isolating tenants in a multi-tenant environment Description: Security considerations for multitenancy implementations versus the scale economics of sharing Forward Agenda items: ICAM architecture and standards GC directory architecture and standards Mitigations Clear definition / documentation of the various multi-tenant deployment architectures Cross reference / certification against GC security controls Document application compatibility considerations and standards 10

11 Challenges In-depth: Network Readiness Challenge 4: Network latency and capacity considerations Description: Cloud introduces new challenges for the network both the internal GCNet and the Internet Access strategy Forward Agenda items: GCNet considerations for cloud Internet access architecture and design for cloud Mitigations Understanding the suite of potential latency sensitive cloud applications Data centre and CSP location impact analysis Legal review: impact on contracts, terms and SLAs Develop standards / architecture that meets or exceeds GC security requirements 11

12 Additional Information 12

13 AFAC Participants: Cloud Computing First Name Last Name Company/Association Association Representatives Avvey Peters Communitech Evan Fox Corporate Executive Board Jeff Lynt CABiNET Kris Van Riper Corporate Executive Board Linda Oliver ITAC Steve Woodward CATA/Cloud Perspectives Tim Lewis CITPA Observer Industry Representatives Lynn Sutherland Canadian Cloud Council John Cousens Canadian Cloud Council Mario Bernier Northern Micro Peter Fu TeraMach Chris Makkreel Salesforce James Lambe Google John Schouten Dell Mark Godfrey NetApp First Name Last Name Company/Association Industry Representatives Don Powell Enterprise Architect, CABiNET Jean-Olivier Le Brun CGI Corey Glynn IBM Lloyd Switzer Telus Mike Monteith ThoughtWire Edward Cordeiro AT Labs Canada Ron Babin Ryerson University Sasha Lebovic Cisco Stuart MacKay HP Vadim Schvarts VMware Wally Kowal Canadian Cloud Computing Jamie Hart Microsoft Dave Wharry Oracle Sébastien Boire-Lavigne Sagemcom Canada Andy Makowski IBM Mike Cardy OnX Strahan McCarten Bell Brian O'Higgins Invest Ottawa 13