Is Nokia onboarding services all on public cloud like AWS / GCP or also on a private cloud?

Private cloud might come with security and cost benefits

That's for sure. We will have a hybrid environment at target. Mix of private and public. As an example we have landing zones at all 3 of the cloud service providers as well as our private infra.

Yeah, that looks like the industry standard. How does Nokia envision data security on the public cloud? If using S3 / cloud storage, how are security policies defined across buckets? Is everything under a single VPC or multiple VPCs?

On the cost benefits - the public players are making it very attractive to be competitive in the market. The other issue as well is the the private cloud costs are generally under estimated from our experience and as you know keeping all that infrastructure current is another challenge. But for sure it will end up being a mix.

We have multiple VPC's per our classifications

We are essentially replicating many of our security polices and profiles on the cloud, and the nice benefit is that we are also able to leverage the latest technology in security as well as having influence on the service offering from the cloud provider

Thanks Ravi, Mac ! Are you guys utilising VPC Peering or making use of PrivateLink, or other managed services ?

Also, on VPCs, are these VPCs segregated based on business use-case classification or across teams / cost etc?

The VPCs are set primarily by security policies (e.g. confidential, high, etc..) . We are working on further refining this for certain services we are going to implement within google, such a GCVE or BMS. We are not using any VPC peering right now. Our connectivity to Google is via Direct Connects.

Thanks Jonathan !

Anuranjan, do you work in the security area today?

Yes, I'm graduating summer of 2021 and I'm very passionate about cloud and cloud security.