Protection from data loss is one of BallotOnline’s top priorities. Because native cloud offerings lack the advanced data protection capabilities BallotOnline is seeking, you will have to deploy advanced data protection solutions in the cloud to maintain data compliance requirements and meet all the service-level agreements for the business units.

Review

Data Loss Prevention

Like most services in the cloud, there are many data protection solutions to choose from. You’ve narrowed it to the following three solutions. Before moving on to the next step, be sure you understand the features and pros and cons of each:

Engage in an online conversation with your colleagues to discuss advanced data protection solutions in the Discussion: Advanced Data Protection Solutions and then move on to the next step to deploy the first solution in the cloud. 

 Deploying a backup solution to provide advanced data protection to BallotOnline business units that use Office365 SaaS Email solution will ensure that in the event of vendor shutdown or other problems, BallotOnline will not lose the data in the cloud.

While all three services have their merits, since you already have NetApp services in the service catalog and they have been working well for BallotOnline so far, you’ve decided to move ahead with NetApp SaaS Backup. 

In this step, you will deploy an advanced data security solution in the cloud.

You will deploy both AWS Key Management Service and SafeNet Virtual KeySecure 8.3, 64-bit.

Option 1

• AWS Key secures data within AWS. AWS maintains the keys to the encryption.
• SafeNet allows you to take the keys out of AWS and control them yourself. This provides an extra layer of protection and will protect data if there is ever a breach that compromises AWS itself.

Option 2

Use the following link to perform all the tasks listed in the AWS KMS Workshop:

https://github.com/aws-samples/aws-kms-workshop

Take screenshots (make sure that your screenshots show your unique AWS ID, which is at the top right corner of the AWS console) showing the completion of each section (section 1 through 4) and add the screenshots in your P2 deliverable.

• AWS Key secures data within AWS. AWS maintains the keys to the encryption.
• SafeNet allows you to take the keys out of AWS and control them yourself. This provides an extra layer of protection and will protect data if there is ever a breach that compromises AWS itself.

Deploy NetApp ONTAP Cloud and Test Use Cases

Use the 1. NetApp ONTAP Cloud data management solution for the cloud workload to ensure that the solution should be able to sustain an availability zone outage.

1.https://docs.netapp.com/us-en/occm/task_getting_started_aws.html

Follow the instructions in the 2. Enterprise Applications POC Guide to deploy NetApp ONTAP cloud and test the following use cases:

2. https://cloud.netapp.com/ontap-cloud 

Take screenshots as you work for later use in the Advanced Cloud Features Runbook.

 In this step, you will deploy advanced cloud resource monitoring and metering by using CloudHealth Cloud Service Management.

Review

Monitoring and Management of Your Cloud Environment

Capacity, Performance, and Availability Needs

Scalability

Native monitoring alerting capabilities are limited to monitoring only the internal cloud assets and lack any correlation capabililities with your business objectives.

Now, you will deploy a solution that will help align cloud operations with BallotOnline’s business objectives. Monitoring and metering ensures that you are optimizing the mix of resources used in the cloud to maximize efficiency.

It is important to automate tasks as much as possible and make monitoring a priority so you can head off small problems before they become big ones.

You will leverage the following list of use cases to enable these capabilities once you have deployed CloudHealth Cloud Service Management to perform the advanced cloud resources monitoring and metering in the cloud:

• Cloud Visibility and Control
• Cloud Cost Management
• Cloud Resource Utilization
• Cloud Security Risks
• Cloud Scalability
• Cloud Governance

Take screenshots as you work for later use in the Advanced Cloud Features Runbook.

In this step, you will use your knowledge of  5. cloud service catalogs to deploy a new service catalog and enhance it with advanced features. This fresh build will give BallotOnline a comprehensive catalog with advanced offerings.

5. https://docs.aws.amazon.com/servicecatalog/latest/adminguide/getstarted.html

Growing companies like BallotOnline need a service catalog to consolidate all their service offerings in a central location so that end users can request available services. Advanced features will enable end users to request customized services from additional sources, including the AWS Marketplace.

The final Advanced Cloud Features Runbook is designed to provide BallotOnline with a comprehensive features baseline that encompasses existing IT policies. The final document should be between 15 and 17 pages.

Use the Advanced Cloud Features Runbook Template to write your Advanced Cloud Features Runbook and submit it after reading the instructions below.

The runbook will enable you to consolidate the work that you have completed in the steps along with some additional elements (scope, executive summary, etc.). You will submit your work for approval at the executive meeting.