Cloud Advanced Features Runbook Executive Summary (

Executive Summary
    Cloud computing architecture provides a simple way for stating subcomponents and components for providing the advantage in terms of storage, sharing, maintenance and flexibility. Cloud computing refers to services like databases, software and storage. It provides the ability to design, manage and build the cloud platform. The study describes implementation of cloud computing architecture in BallotOnline. It provides interfaces and applications that are required for cloud-based service. It consists of client side applications and includes components that consist of hardware and software components like server, data storage and virtualization software. It provides GUI to end-users for performing respective tasks.
Plan Scope
●    Cloud Advanced Features Overview
Cloud computing is important for BallotOnline and it ensures continuous business growth and expansion that requires large-scale storage systems and computation power. The feature of cloud includes resource pooling and it is an essential feature of cloud computing. It means that the cloud service provider that can share the resource among multiple clients and provides different sets of services according to needs (Yoo & Kim, 2018). The on-demand self-service enables the client for continuously capabilities for monitoring, allocate network storage and monitor service uptime. It is the fundamental feature of cloud computing and it can help in controlling the computing capabilities according to the need. Data security is an important feature of the cloud. It ensures that the data is safe and the features come easily and it can be included with multiple users that are working with the particular file that comes with real-time. Automation is the feature that provides the ability for automatically configure, install and maintain cloud services. It can help in minimizing human effort and it requires constant maintenance.
Advanced Data Protection Solutions in the Cloud
●    Data Backup and Restore Using Amazon S3
Amazon S3 is lightweight and it provides the capability for storing the data. It includes a web service that provides resizable and secure computing capability in the cloud. Recovery and backup is important for disaster management. Backing up the data is important in the case of loss of data because it provides a big chance for the cu
ent environment that is vital in the case that is needed for rolling back the latest working environment (Alenezi, Atlam & Wills, 2019). It provides elastic and durable storage that can be used for static files, application data and it can be commonly used for restoring operations and file-level backups. It provides highly durable and reliable storage for providing the storage solution. Amazon S3 provides seamless integration and enables the on-premise environment for using assets that are backed up. It includes the purpose for using and storing database snapshots.
Amazon S3 provides backup and recovery for different storage classes in the Amazon S3 buckets. It can be chosen between different storage tiers and it provides better storage categories. There are many storage system and external backup options for supporting Amazon S3 API and it requires accessing S3 storage through the proprietary interface. It includes use of built-in tools provided by Amazon for backup the data to S3. The data can be backed up from S3 bucket to another using CLI tools and AWS SDKs. These tools can be used on multiple pertaining systems (Lnenicka, & Komarkova, 2019). The use of tools can help in transfe
ing the data from S3 bucket and the data is copied between storage tiers for recovery and backup. The backup to S3 commonly uses line scripts and this method is applicable for data backup of S3 bucket, physical machines, virtual machines and EC2 instances. Implementation of Amazon S3 requires maintaining data consistency during the process of backup and it required using features like volume snapshots in the operating system.
In the backup and restore process on Amazon S3, it uses AWS storage gateway for transfe
ing the data to the Amazon S3 bucket. The AWS Storage gateway provides hy
id storage that is deployed as the virtual machine. The main advantage is that it provides a caching option for accessing files faster. There are three types of AWS storage gateway that includes file gateways, tape gateways and volume gateways (Ilieva et al. 2019). After the deployment of the gateway, the user can access the Amazon S3 storage using the standard shared protocol like iSCSI, SMB and NFS. The storage gateway is available for virtual appliances on the VMware vSphere. The configuration of Amazon S3 lifecycle policy is required for managing the data and it is sent to the specified storage class for each phase of the life cycle. This allows storing, recovering and retrieving the version of any object stored in the bucket and it can help in making data recovery easier.
●    Summary
    Amazon S3 provides centralized backup and includes storing the application for storing the data in S3 alongside other AWS services for compute, database and storage. The use of a single backup policy can provide a centrally automated system for creation of backups of the application data. The backup provides an automated way for organizing the backups across different AWS services. Amazon S3 can create continuous restore and backup application data stored in S3 and it provides point-in-time with a single click. AWS backup allows to back up the S3 data along with metadata. It allows for restoring all backed-up data and metadata accepting version ID, storage class and creation data. The lifecycle management policy allows for defining the timeline for the backup and it provides many versions of the same object that are created for making the same records.
Advanced Data Security Solutions in the Cloud
●    AWS Key Management Services Overview
    AWS Key Management Services is useful and it provides beneficial services for dealing with sensitive data and it can help in making it easy for creating and managing the cryptographic keys. It provides resilient and safe services that use hardware security protocols that are required to be tested and it includes the process for being tested to protect keys. It provides with requirements along with highly available key management, storage and auditing solution for encrypting data within the application. It provides control for encryption of stored data across the AWS services. The feature of AWS Key Management Services includes easy ways for accessing and controlling the data using managed encryption (Borangiu et al. 2019). The process of key management can be reduced with simple clicks and it includes some AWS services like Amazon S3, Amazon RedShift and Amazon EBS for simplifying the encryption of data in the service. It enables creating, disabling, enabling and rotating usage policies for master key and auditing usage.
    AWS Key Management Services is used for encrypting the data. The main purpose is to manage and store encryption keys. Data encryption is important for sensitive data that ensures that it cannot be accessed by unauthorized users. The implementation of data encryption is important for both data at rest and the data in transit. Client-side encryption is required for encrypting the data from client-side and it is sent all the way to the server and provided with backend services like RedShift, S3 and EBS. Server-side encryption can help in encrypting the data and managing keys that provide backend services to encrypt the data and it can help in managing keys. The access to encrypted data by assigning the permission includes the use of keys for dealing with physical and long-lasting security of keys for enforcing the permission. It provides centralized key management that provides a single point for defining policies across AWS services. AWS Key Management Services is integrated with AWS services for simplifying the encryption of data. It monitors the use of key that provides the view for testing the data.
AWS Key Management Services uses simple APIs that can build encryption and it provides key management into the application. It can help in maintaining integrity of the data and enables users to use the platform with digital signing using the asymmetric key pairs. It uses a hardware security module for validating for protecting and generating keys. Keys can be used inside devices and it should never be shared outside the AWS region (Liu et al. 2018). Security is the priority and it aims for easing the possibility of using encryption for protecting the data and it is beyond the basic access control. It includes supporting and building encryption tool that can work with the cloud platform. It can help BallotOnline in securing the data and ensures compliances across the entire environment. It puts security in the center and ensures that the data is...