Pricing Login Free trial Support
All an engineer has to do is click a link, and they have everything they need in one place. That level of integration and simplicity helps us respond faster and more effectively.
Sajeeb Lohani
Global Technical Information Security Officer (TISO), Bugcrowd
Read case study

Glossary

Cloud application


A


B


C


D


E


F


G


H


I


J


K


L


M


N


O


P


Q


R


S


T


U


V


W


X


Y


Z

Table of contents

    A cloud application is any software application deployed and run in a cloud computing environment instead of being hosted on a local server or personal device. These applications are accessible over the internet and leverage cloud infrastructure, enabling scalability, flexibility, and remote access.

    1. Know what applications are good candidates for cloud deployment
      Older legacy applications running on mainframes simply aren’t meant to be moved into the cloud, and for some complex applications, migrating them to a cloud-based model might necessitate a complete rewrite of the application. Organizations need to accept that not all of their existing infrastructure can be easily deployed to the cloud, but there are times when the effort of re-architecting an existing application can be justified. Ultimately, IT organizations need to conduct due diligence investigations to understand what modifications will be required to prepare an application for cloud deployment.
    2. Choose the best deployment model for your needs
      Each new cloud application deployment requires IT organizations to make a decision about how the application should be hosted. Using a private cloud environment is more costly, as you’ll miss out on the savings associated with flexible data capacity and your organization must host the infrastructure on-site. Meanwhile, public cloud services offer the best value but may not be ideal for your most sensitive data. Privacy, security and cost are all key concerns when deciding how to deploy a cloud application.
    3. Focus on deployment vs migration
      When an organization makes the decision to move away from the traditional data center operation paradigm and towards a private cloud configuration, it is often motivated by a desire to consolidate applications and infrastructure spread across servers. While consolidating servers can lead to cost reduction, application deployment should be the focus of cloud service implementation.
    4. Plan for changes in application performance
      Before an integration is deployed in the cloud, your organization should benchmark its performance in the traditional data center environment and determine a minimum acceptable standard. The cloud environment functions much differently than a physical server, so you will have to monitor the performance of a newly deployed cloud application and optimize it over time.
    5. Invest in new monitoring tools for your cloud application
      The monitoring tools that were sufficient in traditional IT environments are no longer effective for the cloud. Organizations that depend on cloud applications use purpose-built monitoring tools called cloud management platforms (CMPs) to keep track of security threats, compliance status and application performance across all cloud systems.

    Cloud application advantage

    1. Cost reduction – cloud application deployment can be accomplished in a relatively short time span with little to no up-front investment in IT infrastructure. Not only are organizations spared the expense of purchasing servers and other equipment, but they also save on the administration, power, air conditioning and maintenance costs associated with operating it. Cloud services also usually offer flexible cost models, so businesses only pay for the storage and capacity that they use.
    2. Reliability – cloud service providers have the infrastructure in place to guarantee high levels of service up-time and availability for your applications, including readily available backup servers in case of an unplanned service interruption. When the system breaks, it’s your service provider’s responsibility to fix it –– not yours.
    3. Ease-of-management – organizations today can implement cloud management platform (CMP) solutions to streamline the management of cloud applications and services deployed across multiple cloud environments. CMPs use an extensive catalog of APIs to pull data from throughout the cloud environment and feed it into an integrated system where an IT organization can easily monitor performance, security and compliance.

    Cloud application disadvantages

    1. Downtime – when an application is deployed in the cloud, an internet connection is required to access it. An unplanned internet outage could therefore cause a significant business interruption by disrupting access to cloud applications. Cloud service providers may also experience technical outages from time to time, during which all of your applications and data would be unavailable.
    2. Control – the major trade-off that organizations make for the cost savings of cloud application deployment controls. Cloud infrastructure is owned, managed and operated by the cloud service provider, meaning that the organization has no actual control over back-end infrastructure. This makes cloud application deployment ideal for organizations that only want to manage applications, data and services, but not the physical hardware side of their IT.
    3. Security – as organizations increase their number of cloud application deployments, it becomes more difficult to continuously monitor the security status of the IT infrastructure and ensure that applications in the cloud do not contain vulnerabilities that could be exploited through cyber attacks. Cloud management platforms such as Sumo Logic allow IT organizations to aggregate data from applications in the cloud and use it to achieve continuous monitoring of security threats and vulnerabilities.

    Supporting multi-cloud with Sumo Logic

    FAQs

    All data ingested into Sumo Logic is managed in a secure and compliant manner right out of the box. Our cloud-native platform employs AES-256 encryption to protect data at rest and TLS for data in transit, with security controls at every application layer and a zero-trust segmentation model.

    Sumo Logic maintains multiple compliance certifications—including PCI-DSS and HIPAA certifications, ISO 27001, FedRAMP Moderate Authorization, and SOC 2 Type 2 attestation. Sumo Logic also works directly with top security industry auditors and offers a paid bug bounty program with HackerOne. Plus, we also have a full-time dedicated team performing continuous and ongoing software reviews and penetration testing to keep our customers’ data safe and secure.

    Identity and Access Management (IAM):

    • Use multi-factor authentication (MFA) and role-based access controls (RBAC).
    • Regularly review permissions based on the principle of least privilege.

    Data encryption:

    • Encrypt data both in transit and at rest, using tools like AWS KMS or Azure Key Vault for key management.

    Network security:

    • Use virtual private clouds (VPCs) and security groups to control traffic.
    • Monitor network traffic for suspicious activities.

    Monitoring and logging:

    • Enable comprehensive logging and use tools like security information and event management (SIEM) solutions for monitoring.
    • Set up alerts for potential security incidents.

    Incident response and recovery:

    • Develop and test an incident response plan.
    • Regularly back up critical data and test restoration processes.

    Patch management:

    • Regularly update software and implement automated patching.
    • Conduct vulnerability assessments and penetration testing.

    Compliance and governance:

    • Adhere to industry-specific compliance requirements and conduct regular audits.

    API security:

    • Secure APIs with authentication, use API gateways, and implement Web Application Firewalls (WAFs).

    Container security (if applicable):

    • Use container security practices, such as scanning images and using secure orchestration tools like Kubernetes.