Object Storage - Shared Responsibility

Knowledge Base

KB0057223

Object Storage - Shared Responsibility


Icons/System/eye-open Created with Sketch. 589 Views 26.02.2024 Cloud / Object Storage S3

Objective

The RACI below details shared responsibilities between OVHcloud and the customer for the Public Cloud Object Storage service. This shared model can help relieve the customer’s operational burden for the following service ranges:

  • Standard Object Storage
  • High Performance Object Storage
  • Standard Object Storage-Swift
Roles
R: Is in charge of carrying out the process
A: Accountable for the successful completion of the process
C: Is consulted during the process
I: Is informed of the results of the process

1. Before subscription

1.1. Specify service as needed

ActivityCustomerOVHcloud
Choose the Object Storage container service range following business needs (SWIFT, High Speed, Standard, ...)RAI
Provide personal data needed for service subscriptionRAI
Choose service locationRAI

2. Service availability

2.1. Install the service

ActivityCustomerOVHcloud
Produce, route, deliver and maintain physical and virtual Instances for service hostingIRA
Create Object Storage credentials for an OpenStack userRA

2.2. Reversibility model

ActivityCustomerOVHcloud
Use S31 compatible API to import data in bucketRA

3. Service usage

3.1. Operations

3.1.1. Daily operations
ActivityCustomerOVHcloud
Provide and manage Containers and objects' accessibilityRA
Manage Containers and objects' security created (object lock, SSE-C, etc ...RA
Administrate service storageIRA
Administrate dataRA
Manage backupsRA
3.1.2. Access management
ActivityCustomerOVHcloud
Manage access rights to the OVHcloud Control PanelRAI
Manage physical and logical access to infrastructures for OVHcloud teamsRA
Manage Object Storage security policy of containers and object createdRA
3.1.3. Monitoring
ActivityCustomerOVHcloud
Manage and monitor physical servers in support of the Object Storage serviceRA
Retain logs of the Object Storage serviceRA
Monitor the proper functioning of physical devices (utilities) in support of the serviceIRA
Create, modify, control, restore, delete backupsRA
Maintain storage devices used for the serviceRA
3.1.4. Storage
ActivityCustomerOVHcloud
Manage data encryption before importing in the Object StorageRA
Manage data encryption on the allowed storage space using SSE-C and with encryption keys provided by the ClientAR
3.1.5. Management
ActivityCustomerOVHcloud
Provide inventory of containers and objects usedIRA
Manage the security of management infrastructure (API, control plane)RA
Manage physical security of equipments and hosted infrastructuresIRA
3.1.6. Business continuity
ActivityCustomerOVHcloud
Perform periodic restoration testsRA
Maintain a business continuity and disaster recovery plan for the hosted ISRA
Manage automatic management systems for the infrastructure providedIRA

3.2. Event management

3.2.1. Incidents
ActivityCustomerOVHcloud
Process incidents on the service (tickets and contacts)AIRA
Replace faulty hardware on physical servers of Object Storage clustersRA

4. Reversibility

4.1. Reversibility Model

ActivityCustomerOVHcloud
Plan reversibility operationsRA
Choose fallback infrastructuresRACI
Choose data format to exportRA

4.2. Data recovery

ActivityCustomerOVHcloud
Manage reversibility operationsRA
Migrate/transfer dataRA

5. End of service

5.1. Data destruction

ActivityCustomerOVHcloud
Destroy data from the Object Storage Containers Service via the S3 compatible APIRA
Destroy end-of-life storage devicesRA

Go further

If you need training or technical assistance to implement our solutions, contact your sales representative or click on this link to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.

Join our community of users.

1: S3 is a trademark of Amazon Technologies, Inc. OVHcloud’s service is not sponsored by, endorsed by, or otherwise affiliated with Amazon Technologies, Inc.

Related articles