matt_prigge
Contributing Editor

Treat a cloud deployment as you would a home remodel

analysis
May 6, 20136 mins

Cost, reliability, and security are obvious, but control and responsibility are often overlooked in choosing cloud services

When weighing whether to go to the cloud or which cloud service to use when you do, it’s a no-brainer to make sure the service’s reliability, cost effectiveness, and security track records match your requirements. However, many cloud buyers don’t carefully consider two other critically important characteristics of any cloud service: the degree to which you can control your services without intervention from your vendor and the degree to which you cede responsibility for day-to-day management tasks to your vendor.

When I think back to some of the more well-publicized failures of megascale cloud infrastructures (Amazon Web Services and Microsoft Azure), each has been followed by enraged forum posts from users who had incurred downtime, lost production data, or both. It’s entirely understandable for customers to be irate when a service they’re paying for fails. However, it’s also an excellent indication that these cloud users didn’t fully understand that they still bore a large responsibility for managing and protecting their systems.

Cloud vendors should shoulder some of the responsibility for this disconnect. Although it might not be good for business, big, red warning text suggesting that users are responsible for backing up their data or maintaining replicated failover instances in different availability zones might have dampened some of those anguished cries.

I believe the responsibility for understanding what a service will and will not do for you (or allow you to do for yourself) rests with the user. You don’t need a computer science degree to understand how this works in the cloud — knowing what to look for in a cloud service is very much like what you’d look for in any outsourced service.

Your bathroom or your business — the same principles apply

Let’s say I want to remodel my bathroom (as it happens, I do). First, I have to decide what I want to have done — that’s the needs and design phase, a combination of requirements and user-experience preferences.

If I’m willing to spend hours digging through fixture catalogs and poring over Pinterest to get ideas for what I want in my new bathroom, I can do much of the design myself. If I don’t want to do that or don’t have the time, I could hire an interior decorator to come up with design ideas for me. If I do it myself, I have complete artistic control over my new bathroom, but I’ve also spent a ton of time and don’t benefit from the years of experience an experienced decorator might bring to the table. If I have someone else do it, I might not get exactly what I want and I’ll spend more, but I don’t have to do any research and it probably won’t look like a mismatched horror show when it’s done.

After I have a design in hand, I enter the deployment phase. I could hire a general contractor to handle the project soup to nuts; I could hire subcontractors (plumbers, electricians, carpenters) for individual jobs for me while I handle a portion on my own; or I could do the whole job myself.

The first way will undoubtedly be the most expensive, but it also substantially decreases the amount of time I’ll spend working on the job and the amount of risk I’ll expose myself to if something goes wrong. The second way saves some of the money that the general contractor would have pocketed, but it leaves me managing the contractors to make sure that they all show up at the right time and do what they’re supposed to.

The third deployment option — do it myself — is always the cheapest, and it would let me control every tiny detail of the job. However, I would also end up bearing all of the risk should I fail to do something important (like caulk the tub surround or ground the electrical outlets). I’d probably also spend many a precious weekend making it happen.

Know your risks and rewards

These are types of decisions that almost any homeowner is familiar with. It so happens that they bear a striking resemblance to the challenges involved in figuring out how to appropriately use the cloud. For the needs and design phase, you can do the research yourself on what cloud service to use to handle your workloads, or you could hire a consultant to help you. If you do the research yourself, you’ll undoubtedly learn more and spend less money, but you also might miss details a more experienced eye might catch.

For the deployment phase, you have essentially the same choices for the cloud as you do for your bathroom remodel: You can go with a full-service IT provider (the general contractor) that will manage every aspect of your environment, including backups, patching, site failover, and user support. You can use a largely DIY infrastructure-as-a-service provider to drive your services while you provide your own support and disaster-recovery capabilities (the equivalent of hiring subcontractors). Or you can build your own private cloud and retain responsibility and control over everything (the true DIY approach).

Although I’ve primarily focused on cloud infrastructure here, the same decisions apply to applications and SaaS. If I want to run a complex website with a content management system, I can have a hosting company that specializes in the design and operation of such sites handle the whole thing, buy a straight Web-hosting service and install and manage the CMS myself, or buy and colocate my own hardware and do it all myself.

No matter how you slice it, it’s the exact same set of trade-offs. If I use a “general contractor,” the responsibility is entirely on someone else, but I’ll almost certainly not have the same degree of control over how things are done. If I want to color outside of the lines and do something the provider doesn’t typically support, I may simply not be able to — or will at the very least have to pay extra to get what I want. If I use “subcontractors,” I’ll have more control and pay less, but I’ll also have substantially more responsibility. If I do it all myself, I have all the control I’d ever want, but also bear the full responsibility.

As cloud users become better educated about how to use the cloud, you’ll see happier cloud users and fewer cloud horror stories. But the cloud providers could certainly help the process along by making it clearer to cloud users what the providers take responsibility for and what responsibilities remain with the user. This becomes all the more important when you consider the potential liability of third-party software licensing and government regulation.

This article, “Treat a cloud deployment as you would a home remodel,” originally appeared at InfoWorld.com. Read more of Matt Prigge’s Information Overload blog and follow the latest developments in storage at InfoWorld.com. For the latest business technology news, follow InfoWorld.com on Twitter.