5 ms·

I can't protect my data from some random server it might run on. I happen to trust AWS with my data. AWS also scales vastly quicker than anything I could affo

I can't protect my data from some random server it might run on. I happen to trust AWS with my data. AWS also scales vastly quicker than anything I could afford to do on my own. There are a huge number of use cases where AWS / data center / servers are the best fit. That will remain true for the foreseeable future.

romaniv 12y ago
I happen to trust AWS with my data. Yeah, so let's host everything in the world on the servers of a single company. What could possibly go wrong?
- donavanm 12y ago
  The magic homomorphic system doesn't exist, and I don't see any reason to believe it will exist on a time frame I care about. Short of that we can either deploy our own infrastructure (capital) or lease it from someone else (opex/"cloud"). The cost/benefit there is a business decision, and I see no reason to believe the latter option is truly "a single company."
  - wallflower 12y ago
    tldr: AWS meets the security, privacy, and regulatory demands of the financial services industry. There was an AWS:reInvent 2014 presentation about NASDAQ OMX. OMX is the holding company of NASDAQ that develops and grows the technology that runs stock exchanges in many countries. OMX is using Redshift to build a cloud solution (FinQloud - Regulatory Records Retention) for their 20+ exchange customers (worldwide stock exchanges). To protect their data, they use HSMs (actually, a cluster of HSMs) to encrypt the data. NASDAQ OMX has a direct, leased connection to the AWS Data Centers. The data is stored on s3 in encrypted form and only decrypted at the time of Redshift building the reports by getting the decryption key from the HSM (over the leased connection). They have multiple alarms and monitoring around Redshift access in their offshore ops center (e.g. the postgres audit table). True data privacy and protection is near impossible but Amazon makes it easier to achieve high-levels of data privacy and security. http://www.slideshare.net/AmazonWebServices/bdt206-see-how-amazon-redshift-is-powering-business-intelligence-in-the-enterprise-aws-reinvent-2014 http://www.slideshare.net/AmazonWebServices/bdt206-see-how-a... http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud/ http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud...
    - dragontamer 12y ago
      The idea of encryption is that you can store it anywhere and it'd be secure. If you can find an example of NASDAQ OMX using EC2 machines to host the data, maybe I'll believe you. But for now, your post is pretty bland hyperbole. I'm sure the cloud is secure enough for a lot of businesses. But I think the links you have are reeking of "marketing", as opposed to a practical example.
      - dlgeek 12y ago
        They're doing the processing in RedShift, which is a hosted Amazon service, running on Amazon hardware.

romaniv 12y ago

I happen to trust AWS with my data. Yeah, so let's host everything in the world on the servers of a single company. What could possibly go wrong?

donavanm 12y ago
The magic homomorphic system doesn't exist, and I don't see any reason to believe it will exist on a time frame I care about. Short of that we can either deploy our own infrastructure (capital) or lease it from someone else (opex/"cloud"). The cost/benefit there is a business decision, and I see no reason to believe the latter option is truly "a single company."
- wallflower 12y ago
  tldr: AWS meets the security, privacy, and regulatory demands of the financial services industry. There was an AWS:reInvent 2014 presentation about NASDAQ OMX. OMX is the holding company of NASDAQ that develops and grows the technology that runs stock exchanges in many countries. OMX is using Redshift to build a cloud solution (FinQloud - Regulatory Records Retention) for their 20+ exchange customers (worldwide stock exchanges). To protect their data, they use HSMs (actually, a cluster of HSMs) to encrypt the data. NASDAQ OMX has a direct, leased connection to the AWS Data Centers. The data is stored on s3 in encrypted form and only decrypted at the time of Redshift building the reports by getting the decryption key from the HSM (over the leased connection). They have multiple alarms and monitoring around Redshift access in their offshore ops center (e.g. the postgres audit table). True data privacy and protection is near impossible but Amazon makes it easier to achieve high-levels of data privacy and security. http://www.slideshare.net/AmazonWebServices/bdt206-see-how-amazon-redshift-is-powering-business-intelligence-in-the-enterprise-aws-reinvent-2014 http://www.slideshare.net/AmazonWebServices/bdt206-see-how-a... http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud/ http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud...
  - dragontamer 12y ago
    The idea of encryption is that you can store it anywhere and it'd be secure. If you can find an example of NASDAQ OMX using EC2 machines to host the data, maybe I'll believe you. But for now, your post is pretty bland hyperbole. I'm sure the cloud is secure enough for a lot of businesses. But I think the links you have are reeking of "marketing", as opposed to a practical example.
    - dlgeek 12y ago
      They're doing the processing in RedShift, which is a hosted Amazon service, running on Amazon hardware.