{"id":186,"date":"2026-10-12T16:31:10","date_gmt":"2026-10-12T16:31:10","guid":{"rendered":"http:\/\/www.scmgalaxy.com\/tutorials\/2010\/03\/09\/cloud-computing-the-computer-is-out-the-window\/"},"modified":"2026-10-12T16:31:10","modified_gmt":"2026-10-12T16:31:10","slug":"cloud-computing-the-computer-is-out-the-window","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/cloud-computing-the-computer-is-out-the-window\/","title":{"rendered":"Cloud Computing Beyond the Hype: Security, Control, and a Practical Adoption Path"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Cloud computing has moved from debate to default for many engineering teams, but the hard questions have not changed: <strong>how secure is it<\/strong>, and <strong>how much control are we giving up<\/strong>? This guide is for DevOps and platform teams who want a clear model for evaluating cloud choices and rolling them out safely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Originally published on 2010-03-09; fully revised and updated.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-4144 aligncenter\" src=\"https:\/\/www.devopsschool.com\/blog\/wp-content\/uploads\/2010\/03\/cloud-computing-2.png\" alt=\"cloud-computing\" width=\"600\" height=\"400\" srcset=\"https:\/\/www.devopsschool.com\/blog\/wp-content\/uploads\/2010\/03\/cloud-computing-2.png 600w, https:\/\/www.devopsschool.com\/blog\/wp-content\/uploads\/2010\/03\/cloud-computing-2-300x200.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What cloud computing changed in practice<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cloud computing shifted infrastructure from a procurement model (buy, rack, maintain) to a service model (provision, automate, pay for usage). The biggest practical benefit is speed: teams can provision environments in minutes instead of waiting for hardware cycles. The biggest trade-off is governance: identity, network boundaries, data residency, and compliance must now be managed across provider-managed platforms.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why security and control remain the core concerns<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Early cloud discussions focused on whether cloud was &#8220;safe enough.&#8221; Today, the better question is whether your operating model is mature enough for shared responsibility.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Security concerns teams must design for<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Identity sprawl (users, roles, service accounts across environments)<\/li><li>Misconfiguration risk (public storage, over-permissive security groups, weak IAM policies)<\/li><li>Data protection requirements (encryption, key management, backup immutability)<\/li><li>Auditability (centralized logging, trail retention, incident response readiness)<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Control concerns engineering leaders should clarify<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Who owns runtime operations: app team, platform team, or vendor?<\/li><li>How much customization is required for networking, security, and compliance?<\/li><li>What lock-in risk is acceptable for faster delivery?<\/li><li>What exit path exists for critical workloads?<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Cloud service models and the control trade-off<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Different service models provide different speed-versus-control balances. Choosing correctly per workload is often more important than choosing a single provider.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Model<\/th><th>You manage<\/th><th>Provider manages<\/th><th>Best for<\/th><th>Main risk<\/th><\/tr><\/thead><tbody><tr><td>On-premises<\/td><td>Network, servers, virtualization, OS, middleware, apps, data<\/td><td>Facility-level services only (if any)<\/td><td>Strict control or legacy constraints<\/td><td>Slow scaling, high operational overhead<\/td><\/tr><tr><td>IaaS<\/td><td>OS, middleware, apps, data, much of security configuration<\/td><td>Physical infrastructure and core virtualization<\/td><td>Lift-and-shift, custom stacks<\/td><td>Misconfiguration and IAM complexity<\/td><\/tr><tr><td>PaaS<\/td><td>Application code and data policies<\/td><td>Runtime, patching, scaling platform components<\/td><td>Faster app delivery<\/td><td>Platform constraints and portability limits<\/td><\/tr><tr><td>SaaS<\/td><td>Data governance, access policy, business process controls<\/td><td>Full application stack operations<\/td><td>Standard business capabilities<\/td><td>Limited customization and data residency concerns<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">A practical cloud adoption workflow<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A phased rollout reduces risk and helps teams validate both security and reliability before broad migration.<\/p>\n\n\n\n<pre class=\"mermaid\">\nflowchart TD\n    A[Inventory applications and data] --> B[Classify sensitivity and compliance]\n    B --> C[Choose service model per workload]\n    C --> D[Design identity network encryption backups]\n    D --> E[Run pilot in non critical environment]\n    E --> F{Pilot meets reliability and security goals}\n    F -- No --> G[Remediate and retest]\n    F -- Yes --> H[Migrate in phases]\n    H --> I[Operate monitor optimize]\n<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Example commands for a cloud baseline check<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you are using AWS, these commands provide a quick operational baseline for identity, region visibility, storage inventory, and audit trail presence.<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-1\" data-shcb-language-name=\"PHP\" data-shcb-language-slug=\"php\"><span><code class=\"hljs language-php language-bash\"><span class=\"hljs-comment\"># Confirm active identity and account context<\/span>\naws sts get-caller-identity\n\n<span class=\"hljs-comment\"># List available regions<\/span>\naws ec2 describe-regions --query <span class=\"hljs-string\">\"Regions&#91;].RegionName\"<\/span> --output text\n\n<span class=\"hljs-comment\"># List S3 buckets in the current account<\/span>\naws s3api <span class=\"hljs-keyword\">list<\/span>-buckets --query <span class=\"hljs-string\">\"Buckets&#91;].Name\"<\/span> --output text\n\n<span class=\"hljs-comment\"># Check whether CloudTrail trails exist<\/span>\naws cloudtrail describe-trails --query <span class=\"hljs-string\">\"trailList&#91;].Name\"<\/span> --output text<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-1\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">PHP<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">php<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<p class=\"wp-block-paragraph\">For infrastructure automation, teams typically codify provisioning and policy in version control (for example, using Terraform or provider-native templates), then enforce reviews through CI pipelines.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why this was a major shift, not a passing trend<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The original post correctly framed cloud as a structural shift. Browser-based software, managed platforms, and improved internet access made remote computing practical for mainstream workloads. Often-cited milestones include early hosted infrastructure startups and the commercial availability of services such as Amazon EC2 in the mid-2000s. The result is not that computers disappeared, but that local devices increasingly became access points to cloud-delivered services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Historical reference from the original article: <a href=\"http:\/\/tinyurl.com\/yj7rln3\">Computer Weekly history of cloud computing (original link)<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Best practices for balancing cloud speed with control<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Adopt a <strong>shared responsibility<\/strong> model and document ownership boundaries.<\/li><li>Use least-privilege IAM and short-lived credentials wherever possible.<\/li><li>Make logging, alerting, and backup policy mandatory before production cutover.<\/li><li>Standardize landing zones and guardrails before scaling team-by-team migration.<\/li><li>Treat cost management as an engineering practice, not just a finance report.<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Cloud computing is a long-term operating model, not a temporary trend. This revised guide explains the control trade-offs, security concerns, and a practical migration workflow teams can use today.<\/p>\n","protected":false},"author":1,"featured_media":4144,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[3468,531,3388,3473,646,3470,3474,3472,3475,3393,3458,3469,3392,3471,1528,3457,560],"class_list":["post-186","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorised","tag-cc","tag-cloud","tag-cloud-adoption","tag-cloud-adoption-challenges","tag-cloud-computing","tag-cloud-computing-adoption","tag-cloud-computing-challenges","tag-cloud-computing-future","tag-cloud-computing-limitations","tag-cloud-computing-services","tag-cloud-computing-solution","tag-cloud-computing-trend","tag-cloud-technology","tag-cloud-technology-adoption","tag-computing","tag-sky-computing","tag-virtualization"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=186"}],"version-history":[{"count":3,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/186\/revisions"}],"predecessor-version":[{"id":79016,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/186\/revisions\/79016"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media\/4144"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}