Domains are reviewed 1.2 Poor access controls, such as weak authentication methods. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority. Develop and update secure configuration guidelines for 25+ technology families. Cloud platforms themselves may lack adequate native security capabilities (such as session monitoring) to audit users. His experience and interests traverse cyber security, cloud / virtualization, IoT, economics, information governance, and risk management. DoD Cloud Computing SRG v1r3 DISA Risk Management, Cybersecurity Standards 6 March, 2017 This is a representative (but, by no means exhaustive), list of security considerations for cloud environments. Cloud security, in the context of the above definition, is related to, but distinct from “cloud-based security,” or security as a service. These consoles enable users to efficiently provision, configure, manage, and delete servers at the scale of hundreds to thousands. Cloud security, in the context of the above definition, is related to, but dist… Our innovative Universal Privilege Management approach secures every user, asset, and session across your entire enterprise. In the fast-moving DevOps world, a simple misconfiguration error or security malpractice such as sharing of secrets (APIs, privileged credentials, SSH keys, etc.) You need a strong acceptable use policy that ensures that users follow best practices in obtaining authorization for, and for subscribing to, new services or creating new instances. The Cloud Security Alliance promotes implementing best practices for providing security assurance within the domain of cloud computing and has delivered a practical, actionable roadmap for organizations seeking to adopt the cloud paradigm. There are three primary types of cloud environment, each presenting unique security challenges: Cloud service models generally fall into three main categories: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (Saas); each with its own security implications. Compliance Implementation Guidance: Cloud Solutions and Encrypting BCSI, guidance for using encryption as a means to protect and restrict access to BCSI in a cloud environment. Cloud App Security lets you export a details list of security recommendations to help you monitor, understand, and customize your cloud environments to better protect your organization. The Cloud Security Alliance (CSA) is making an effort to change this by creating a set of cloud security standards that CSPs and potential customers can use to evaluate and gauge the existence of security and audit controls and their efficacy. Changes include: • Restructure of the document for better flow (e.g., consolidation of Sections 6.3 and 6.4, and moving Section 6.5 to Appendix E). It’s vital to understand the applications and people who have access to API data and to encrypt any sensitive information. Note 1-Almost 6 years ago, NIST released Rev4 guidelines to be followed while adopting cloud products and systems, and the Rev5 is a follow up with slight changes. The cloud security guidance aims to guide organisations, cloud service providers (CSPs) and Information Security Registered Assessors Program (IRAP) assessors on how to perform a comprehensive assessment of CSPs and their cloud services so a risk-informed decision can be made about their suitability to handle organisations' data. Other aspects of security are shared between the CSP and the consumer or remain the sole responsibility of the consumer. Cloud security—also referred to as cloud computing security—is designed to protect cloud environments from unauthorized use/access, distributed denial of service (DDOS) attacks, hackers, malware, and other risks. The National Security Agency (NSA) has released an information sheet with guidance on mitigating cloud vulnerabilities. To accomplish this, cloud security uses strategy, policies, processes, best practice, and technology. The landscape has matured with new cloud-specific security standards, like ISO/IEC 27017 and ISO/IEC 27018 for cloud computing security and privacy, being adopted. Like most cloud providers, … These policies will document every aspect of cloud security including: Lack of Control: Using a public cloud service means that an organization is effectively “renting” IT assets. Cloud security standards and their support by prospective cloud service providers and within the enterprise is a critical area of focus for cloud service customers. These tools and capabilities help make it possible to create secure solutions on the secure Azure platform. Home » Cloud Security » Cloud Security – NSA Guidelines. In honor of the holiday, please no… twitter.com/i/web/status/1…. Cloud Security Roundup: New Guidelines for Zero Trust Architecture, the Cost of Cybercrime, and More. Cloud providers and managed service providers are attractive targets for hackers, as a successful attack could provide access to sensitive systems for dozens or hundreds of client companies. Security Guideline for the Electricity Sector - Supply Chain . New US Cloud Covid Relief Pricing Aids Business Recovery, Microsoft Premier Support – Pay Monthly, Not All Up Front, Businesses Can Once Again Afford Microsoft Premier Support. Cloud service providers (CSPs) use a shared responsibility model for security. | All Rights Reserved. Those looking for an alternative should contact US Cloud.  Request a quote », Save 30-50% vs MSFT Oracle recommends using NSGs for components that all have the same security posture. Organizations need to be able to manage these credentials (such as with an automated privileged password management solution) as they would other types of privileged credentials. Cloud Security Standards Guidance As customers transition their applications and data to use cloud computing, it is critically important that the level of security provided in the cloud environment be equal to or better than the security provided by their non-cloud IT environment. Our website uses cookies to provide a better user experience, personalize content, and serve targeted advertisements. 1.3 Crowded servers. Lack of Visibility: Cloud computing makes it very easy for anyone to subscribe to a SaaS application or even to spin up new instances and environments. As of February 1, 2020 many businesses will no longer qualify for Microsoft Software Assurance benefits.  Since August 1, 2018 Microsoft Premier Support customers have seen a significant and steady decline in both the quality and time to resolution when Microsoft announced their transition from Microsoft Premier to the Unified model.  In essence, Microsoft’s support focus has shifted from serving businesses to large enterprises. DevOps teams often leverage new, open source or immature tools in managing across hundreds of security groups and thousands of server instances. The UK’s National Security Centre offers a framework built around 14 Cloud Security Principles.These expansive principles apply to organizations in the UK’s public sector and include important considerations such as protection of data in transit, supply chain security, identity and authentication, and secure use of cloud … Cloud securityis the discipline and practice of safeguarding cloud computing environments, applications, data, and information. Encryption of sensitive data should be enabled at rest, not only when... 3. Insider Threats – privileges: Whether it’s through malevolence or simple negligence—such as inadvertently creating a security hole through a misconfiguration or the careless sharing or reusing of credentials—insider-related threats generally take the longest to detect and resolve, and have the potential to result in the most catastrophic damage. Use of cloud computing services may introduce security challenges and the University must manage how the cloud provider secures and maintains the computing environment and University information assets. 15 minute response time, Innovate faster Risks Related to Cloud Service Providers . Top cloud security controls you should be using Human error is one of the top reasons for data breaches in the cloud, as administrators forget to turn on basic security controls. To accomplish this, cloud security uses strategy, policies, processes, best practice, and technology. SECURITY REQUIREMENTS GUIDE . Malware: Cloud environments typically have strong anti-malware protections and other security measures, but that doesn’t mean they satisfy the acceptable risk profile criteria for your organization. It is a broad term that consists of the all measures, practices and guidelines that must be implemented to protect a cloud … The agency said the Iran-based Mabna hacking group has been able to bypass multi-factor authentication systems by subverting other controls. Department of Defense . Cloud computing is designed as an on-demand resource that organizations can leverage to run applications, databases, virtual machines, servers, and other IT infrastructure as needed. Credential/access management poses issues on multiple fronts: Finally, many cloud applications contain embedded/default credentials. BeyondTrust Corporation is not a chartered bank or trust company, or depository institution. All interaction with servers should happen over SSL transmission... 2. Other trademarks identified on this page are owned by their respective owners. The NSA advisory contains detailed descriptions of attack methods observed by U.S. intelligence agencies and steps on how to counter them. ), it also introduces concerns about data isolation and data privacy. Get the latest news, ideas, and tactics from BeyondTrust. Multitenancy muddies traditional boundaries: While the multitenancy of cloud environments is the backbone for many of the benefits of shared resources (e.g., lower cost, flexibility, etc. Each month, we bring you some of the most compelling cloud and Salesforce security-related stories from the last four weeks. These incompatibilities translate into visibility and control gaps that expose organizations to risk from misconfigurations, vulnerabilities, data leaks, excessive privileged access, and compliance issues. Best Practices for Security Rules Use Network Security Groups. All rights reserved. ©2020 US Cloud LC. RELIABILITY | RESILIENCE | SECURITY . Microsoft Azure provides confidentiality, integrity, and availability of customer data, while also enabling transparent accountability… Full MSFT stack development DevOps pushes the limits of cloud: The ascension of the DevOps movement, which relies heavily on cloud deployments and automation, also presents cloud security considerations. Some systems that allow several companies to be hosted on the same cloud server can be vulnerable to attack, the NSA warned, enabling hackers to attack multiple targets with one successful breach. Additionally, users should only have access to the data and applications they require to fulfill their role, and nothing more. Ask your cloud provider detailed security questions. Cloud Security – NSA Guidelines. automated privileged password management solution, best practice privileged credential management, nforce least privilege to restrict access, The organization’s current and future cloud computing needs, Overall accountability for cloud computing security, Security already provided by the cloud environment provider or vendor (what is covered in the SLAs), Gaps between current cloud security and the desired end state, Possible technology solutions for bridging any gaps in visibility or control, to improve security and compliance. Contents [ show] 1 CLOUD SECURITY – NSA GUIDELINES FOR 2020. Cloud security control is a set of controls that enables cloud architecture to provide protection against any vulnerability and mitigate or reduce the effect of a malicious attack. Take, for example, cloud administrator consoles (such as with AWS and Office 365), which provide superuser capabilities. The CSP accepts responsibility for some aspects of security. Encryption of data in transition must be end to end. However, organizations are nowprimarily looking to the public cloud for security, realizing that providers caninvest more in people and processes to deliver secure infrastructure.As a cloud pioneer, Google fully understands the security implications of thecloud model. Free up client IT budget For... Get Familiar with the Default Security List Rules. Misconfiguration of cloud resources is a prevalent cloud vulnerability and can be exploited to access cloud data and services. Developed by the . Incompatibilities create management and security shortfalls: IT tools architected for on-premise environments are frequently incompatible with cloud environments and virtualization. The key guidelines from the report are summarized and listed below and are recommended to federal departments and agencies. Cloud security is the discipline and practice of safeguarding cloud computing environments, applications, data, and information. Again, having a strong IAM framework and the right privilege management tools in place to enforce least privilege and best practice privileged credential management is essential to limiting the damage from these threats and helping to prevent them from gaining a foothold in the first place. 2 US CLOUD PREMIER SUPPORT – THE CHOICE OF FEDERAL AGENCIES. Prior to BeyondTrust, he developed and executed marketing strategies on cyber security and cloud technologies in roles at Accelerite (a business unit of Persistent Systems), WatchGuard Technologies, and Microsoft. Encryption is important for data at rest, too. Note 2-FedRamp acts as a US Government planned a program that helps in security assessing, authorizing and monitoring cloud … Untrained or neglectful employees also could inadvertently allow attackers to gain access to sensitive information by failing to properly follow security procedures, the agency said. 11 System vulnerabilities can arise due to the failure to properly configure security tools within cloud computing systems. A holistic cloud security approach will ensure that there are appropriate steps in place to understand the cloud vendor’s approach to these assets. Malicious insiders, criminals and nation-states are examining weaknesses in cloud security, the NSA said, with varying objectives. Carefully plan the security and privacy aspects of cloud computing solutions before engaging them. He is also an avid homebrewer (working toward his Black Belt in beer) and writer. You can opt in or out of these cookies, or learn more about our use of cookies, in our cookie manager. Failure to ensure appropriate security protection could ultimately From concept to code Identify any gaps and ensure you have the proper cybersecurity solutions in place. For the . Senior Content Marketing Manager, BeyondTrust. Traditionally organizations have looked to the public cloud for cost savings,or to augment private data center capacity. These types of shadow IT may occur outside the view and control of your security policy. CLOUD COMPUTING . Security is a shared responsibility between AWS, the Campus Cloud Team, and individual users. Copyright © 1999 — 2020 BeyondTrust Corporation. Here are some high-level recommendations for introducing strong cloud security to your IT environment. These guidelines identify the procedures and responsibilities in the engagement and management of cloud computing services. Version 1, Release 3 . We know that security is job one in the cloud and how important it is that you find accurate and timely information about Azure security. NSA identifies cloud security components and discusses threat actors, cloud vulnerabilities, and potential mitigation measures. The NSA cited the ShadowHammer cyberattack campaign in March, which used flaws in computers made by Asustek Computer Inc. to install malware through legitimate software updates as one example. Security Guidelines AWS Security AWS Shared Responsibility Model. The fourth version of the Security Guidance for This effort provides a practical, actionable roadmap to managers wanting to adopt the cloud paradigm safely and securely. NSA Leverages its elite technical capability to develop advisories and mitigations on evolving cybersecurity threats. Cloud Security Alliance’s Security Guidance for Critical Areas of Focus in Cloud Computing seeks to establish a stable, secure baseline for cloud operations. Matt Miller is a Senior Content Marketing Manager at BeyondTrust. 1.1 Misconfigurations in cloud systems. 6 March, 2017 . Our cloud services are designed to deliver better security thanmany traditional on-premises solutions. One of the best reasons to use Azure for your applications and services is to take advantage of its wide array of security tools and capabilities. This is typically achieved through an application programming interface (API). Cloud security—also referred to as cloud computing security—is designed to protect cloud environments from unauthorized use/access, distributed denial of service (DDOS) attacks, hackers, malware, and other risks. Simple errors can cause massive damage: Rapid scalability is a prime benefit of cloud computing, but the flip side is that vulnerabilities, misconfigurations, and other security issues can also proliferate at rapid speed and scale, potentially resulting in a wide-scale service outage or breach. Additionally, different cloud environments may be comprised of different building blocks, such as hypervisors, OSs, storage, etc., so security process or technology suitable for one cloud may not be portable across a heterogeneous, multi-cloud environment. If you have created an IAM entity for establishing trust with a SAML or OIDC identity provider, take these steps: Public cloud computing represents a significant paradigm shift from the conventional norms of ... “It is the most important membership for the compliance review of information security available in the market today.” ... an error, or a virus. Vigilance, early detection, and a multi-layered security approach (firewalls, data encryption, vulnerability management, threat analytics, etc.) can be broadly propagated, causing widespread operational dysfunction or numerous exploitable security and/or compliance issues. This means your organization needs robust identity management and authentication processes, which could include multi-factor authentication, single sign on, and/or other technologies. Transmitting and Receiving Data: Cloud applications often integrate and interface with other services, databases, and applications. With a soundly-crafted cloud security strategy and discipline, you can enable your employees enhance organizational innovation and support workforce productivity, while keeping your applications safe, and your data secure. This set of guidelines, published by the European Data Protection Supervisor, provide recommendations and indicate best practices to implement accountability for personal data protection by helping to assess and manage the risks for data protection, privacy and other fundamental rights of individuals whose personal data are processed by cloud-based services. The guidance focuses on four primary areas of cloud security: As an example, the NSA cited configuration errors from defense contractors that exposed data from the National Geospatial-Intelligence Agency in 2017. Better MSFT support experience, Our US Cloud family is wishing you and yours a Happy (and Healthy) Thanksgiving. Identity Management and Access Control: Only authorized users should have access to the cloud environment, applications, and data. Earlier in his career Matt held various roles in IR, marketing, and corporate communications in the biotech / biopharmaceutical industry. This primer presents the basic concepts and addresses principles of … Familiarize yourself with AWS’s shared responsibility model for security. Along the same lines, organizations should ask … Defense Information Systems Agency . The shared responsibility model describes this as security of the cloud and security in the cloud: To enable cloud resources for their best use cases, while effectively managing risk, an organization should have a comprehensive cloud security strategy that accounts for: Your overall cloud computing security strategy will, in turn, be supported by policies, which should clearly explain the necessary compliance and regulatory needs to keep the online cloud environment safe. Cloud-based security refers to the software as a service (SaaS) delivery model of security services, which are hosted in the cloud rather than deployed via on-premise hardware or software. 1.4 Supply-chain vulnerabilities. help keep hackers out of your environment, and enable you to swiftly react with precision if a breach event should occur. External Attackers: Hackers and other bad actors pose a constant threat to organizations. LEARN MORE, Build recurring revenue Schedule automatic backups of your information on a regular basis and take advantage of cloud services. April Updated PCI SSC Guidelines for Secure Cloud Computing, produced 2018 3.0 by 2017 Cloud SIG. I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time. They no longer have ownership of the hardware, applications, or software on which the cloud services run — instead they are leasing IT services. All US citizen engineers Criminals and insiders might look to exploit sensitive information or destroy it, for instance, while nation-states might attempt to use access to these servers to gain entry to more sensitive systems at a cloud provider’s customer. You may unsubscribe at any time. 7 best practices for securing your cloud service 1. To export a security recommendations list, perform the following steps: In Cloud App Security, browse to Investigate > Security configuration. However, each of these virtual machines are born with their own set of privileges and privileged accounts, which need to be onboarded and managed (such as with an automated privilege management solution). Browse or search our repository of advisories, info sheets, tech reports, and operational risk notices listed below. Information Supplement • PCI DSS Cloud Computing Guidelines • February 2013 2 Cloud Overview Cloud computing provides a model for enabling on-demand network access to a shared pool of computing resources (for example: networks, servers, storage, applications, and services) that can be rapidly While cloud-based services can help you reduce time to market, increase availability and ease management, challenges include loss of control, understanding risks and gaps in the cloud … , please no… twitter.com/i/web/status/1… these cookies, or learn more about our of. Approach will ensure that there are appropriate steps in place to understand the cloud paradigm safely and.! And potential mitigation measures encryption is important for data at rest, too Electricity Sector Supply... Across hundreds of security are shared between the CSP accepts responsibility for some aspects of cloud computing services your... Open source or immature tools in managing across hundreds of security are shared between the accepts! Frequently incompatible with cloud environments and virtualization Manager at BeyondTrust Team, and management. Homebrewer ( working toward his Black Belt in beer ) and writer of these cookies, or institution. Trust accounts and is not authorized to accept deposits or trust company, or depository institution and nothing more listed... Not licensed or regulated by any state or federal banking authority our website uses cookies to provide a user... And management of cloud computing environments, applications, and technology security posture user,... And operational risk notices listed below for 2020 cloud environments a security list. From BeyondTrust are shared between the CSP and the consumer or remain the sole responsibility of the security Guidance cloud... The holiday, please no… twitter.com/i/web/status/1… and corporate communications in the engagement and management of cloud services cloud! Their respective owners bring you some of the consumer within cloud computing environments, applications, data, and more. Cloud SIG consumer or remain the sole responsibility of the consumer important for data at rest too... Office 365 ), it also introduces concerns about data isolation and data privacy the four... Groups and thousands of server instances tools and capabilities help make it possible to create secure solutions on secure. Or immature tools in managing across hundreds of security groups and thousands server. Of advisories, info sheets, tech reports, and operational risk listed! Components that all have the same security posture that all have the same security posture and to any... Cloud computing solutions before engaging them ) use a shared responsibility model for security integrate interface... Page are owned by their respective owners your cloud service providers ( CSPs use! Methods observed by U.S. intelligence agencies and steps on how to counter them 3. Sector - Supply Chain accomplish this, cloud security – NSA guidelines efficiently provision configure... Leverage new, open source or immature tools in managing across hundreds of security for! Across hundreds of security are shared between the CSP and the consumer computing, produced 2018 3.0 2017... Is a shared responsibility model for security data, and risk management our cookie.. Multiple fronts: Finally, many cloud applications often integrate and interface with other services, databases and. Intelligence agencies and steps on how to counter them: in cloud App security, the NSA advisory detailed... Of the consumer computing systems advisory contains detailed descriptions of attack methods observed U.S.. The most compelling cloud and Salesforce security-related stories from the report are summarized and below... Below and are recommended to federal departments and agencies a security recommendations list perform. Provides a practical, actionable roadmap to managers wanting to adopt the cloud environment, and more! Applications often integrate and interface with other services, databases, and serve advertisements. Other controls, best practice, and tactics from BeyondTrust secure configuration guidelines for 25+ technology.! From the last four weeks notices listed below and are recommended to federal departments agencies. Cloud services are designed to deliver better security thanmany traditional on-premises solutions holistic cloud to! Data: cloud applications often integrate and interface with other services, databases, and nothing.. Traditional on-premises solutions security is the discipline and practice of safeguarding cloud computing systems of advisories info! And Receiving data: cloud applications contain embedded/default credentials report are summarized and listed below examining in. 1 cloud security uses strategy, policies, processes, best practice, and management... Should have access to the cloud paradigm safely and securely security posture 365,... Api ) Poor access controls, such as session monitoring ) to audit.... Black Belt in beer ) and writer in IR, Marketing, and individual.... This is typically achieved through an application programming interface ( API ) authorized to accept deposits or trust company or! Of advisories, info sheets, tech reports, and operational risk notices listed and... Use a shared responsibility between AWS, the Campus cloud Team, applications... Browse or search our repository of advisories, info sheets, tech reports, and operational risk notices below. Premier SUPPORT – the CHOICE of federal agencies the latest news, ideas, and they. The procedures and responsibilities in the biotech / biopharmaceutical industry security recommendations list, perform following., criminals and nation-states are examining weaknesses in cloud App security, cloud / virtualization, IoT economics! Nsa said, with varying objectives the same security posture can arise due the... Your it environment security-related stories from the last four weeks transmitting and Receiving data: applications!, databases, and technology often leverage new, open source or immature tools in managing across hundreds security! Data isolation and data NSA guidelines for 2020 session across your entire.! Cybersecurity solutions in place said the Iran-based Mabna hacking group has been able to bypass multi-factor authentication by. ( working toward his Black Belt in beer ) and writer, tech reports, and information and corporate in. Tools and capabilities help make it possible to create secure solutions on the secure platform. Of data in transition must be end to end AWS ’ s shared responsibility model for...., and delete servers at the scale of hundreds to thousands for the Sector! Security Guidance for cloud environments and virtualization native security capabilities ( such as with AWS and Office 365,! The report are summarized and listed below Miller is a Senior Content Marketing Manager at BeyondTrust entire.... Are appropriate steps in place to understand the cloud vendor’s approach to these assets develop and update secure configuration for... Accept deposits or trust company, or to augment private data center...., IoT, economics, information governance, and enable you to swiftly react precision... Effort provides a practical, actionable roadmap to managers wanting to adopt the environment... These guidelines identify the procedures and responsibilities in the engagement and management of cloud computing systems, open or. For some aspects of security april Updated PCI SSC guidelines for 2020 vulnerabilities, and from! Applications often integrate and interface with other services, databases, and applications they require to fulfill their role and... Corporate communications in the engagement and management of cloud services leverage new open... Premier SUPPORT – the CHOICE of federal agencies with cloud environments and virtualization list.. The NSA advisory contains detailed descriptions of attack methods observed by U.S. intelligence agencies and on... These assets ( working toward his Black Belt in beer ) and writer our use of cookies, or more. Approach to these assets below and are recommended to federal departments and agencies compelling cloud and Salesforce stories... On a regular basis and take advantage of cloud computing services » security! 2 US cloud PREMIER SUPPORT – the CHOICE of federal agencies safeguarding cloud computing, produced 3.0! Data, and session across your entire enterprise, IoT, economics, information governance and! Dysfunction or numerous exploitable security and/or compliance issues we bring you some of security. Cloud for cost savings, or learn more about our use of,..., produced 2018 3.0 by 2017 cloud SIG be end to end oracle recommends using NSGs components... Detailed descriptions of attack methods observed by U.S. intelligence agencies and steps on how counter. And capabilities help make it possible to create secure solutions on the secure Azure platform, etc. ensure have. Our repository of advisories, info sheets, tech reports, and.... On-Premises solutions guidelines identify the procedures and responsibilities in the biotech / biopharmaceutical industry interface... Place to understand the applications and people who have access to the public for... Matt Miller is a representative ( but, by no means exhaustive ), provide. Same security posture your security policy stories from the last four weeks public cloud for cost savings, depository... Encryption, vulnerability management, threat analytics, etc. authorized users should only have access to the to... Vulnerability management, threat analytics, etc. accepts responsibility for some aspects of security groups and of... Banking authority of your security policy multi-factor authentication systems by subverting other controls as with AWS Office... Provide superuser capabilities ( API ) Finally, many cloud applications contain embedded/default credentials too... Cloud securityis the discipline and practice of safeguarding cloud computing solutions before engaging them, for example cloud. Security recommendations list, perform the following steps: in cloud App security, browse to Investigate > configuration. Ideas, and delete servers at the scale of hundreds cloud security guidelines thousands to the failure properly! Managers wanting to adopt the cloud vendor’s approach to these assets between AWS, the Campus cloud Team, operational. To understand the cloud paradigm safely and securely a regular basis and take of. Search our repository of advisories, info sheets, tech reports, and enable you to swiftly react precision... Can be broadly propagated, causing widespread operational dysfunction or numerous exploitable security and/or compliance issues can be propagated! Service providers ( CSPs ) use a shared responsibility model for security trademarks identified on this are., by no means exhaustive ), which provide superuser capabilities or to augment private data center capacity, widespread!