Transitioning approach and security models when adopting the cloud
'Vault', data access ID-based approach

With the increasing adoption of multi-cloud in Korea accompanied by cost and security issues, HashiCorp provides solutions to resolve potential problems arising during cloud migration, including Zero Trust security.

HashiCorp presented the status of cloud adoption in 2023 and solutions to problems at a press conference held at COEX on the 12th. The event primarily covered the benefits of applying HashiCorp's Zero Trust security solutions in the domestic market.

"When transitioning from traditional methods to modern data centers with infrastructure as code, the approach must also change," said Amon Dedgar, co-founder and CTO of HashiCorp. "By automating with HashiCorp's solutions, you can shorten development time and reduce risks and costs in various environments."

He also stated, "When transitioning to the cloud, the security model itself must be transitioned," adding, "You must adopt a zero-trust security solution that does not trust any default values based on identity (ID) on a dynamic cloud network."

HashiCorp is a company that supports the provisioning, security, connectivity, and execution of all applications and infrastructure through cloud infrastructure automation.

Starting with an open-source foundation, it currently provides eight types of solutions in the areas of infrastructure, networking, security, and applications, and recorded 450 million downloads over the past year. It has clients including Samsung, SKB, and LG Uplus.

HashiCorp said that it has witnessed the emergence of 'platform teams' supporting the cloud as the global transition to multi-cloud environments occurs recently.

Cloud adoption goes through a total of three stages. Stage 1 is a distributed stage, Stage 2 is a stage where a more centralized platform team builds the cloud in a common way, and Stage 3 is a stage where it is applied to private data centers.

Amon Dedga, co-founder and CTO of HashiCorp, said, "Korea is between Stage 1 and the early stages of Stage 2. HashiCorp's tools are used as open source in Stage 1, and commercial products are used when entering Stages 2 and 3 later."

The explanation is that through the platform team's work, the development team can achieve rapid development and reliable security, allowing them to focus on their own tasks.

■ Zero Trust Security for the Dynamic Cloud

Amon Dedga, co-founder and CTO of HashiCorp, emphasized zero trust as a key issue in cloud security strategy.

"We are emphasizing security solutions because we view them as the area customers hesitate about the most when transitioning to the cloud, as the scale of cloud adoption grows," he said.

Zero Trost security essentially starts with trusting nothing. As interconnected cloud domains came to form a super network, moving away from the existing dichotomous approach through a single channel, the need arose for a transition in operational methods and security models. Due to the dynamic environment on the cloud, which was previously IP-based, ID-based control became necessary.

HashiCorp introduced Vault, Consul, and Boundary as its Zero Trust security solutions. Vault provides an identity-based approach to how applications access data. Consul protects network traffic between applications and services. Boundary ensures that the right people can access the appropriate systems and services only for the time they need them.

For example, vaults have fragmented IDs existing across AWS, Azure, applications, etc., but vaults can standardize this to provide compatibility.

Meanwhile, HashiCorp offers solutions such as Terraform, Vault, Consul, and Nomad for not only security but also workflow standardization, integrated infrastructure management, automation, and cost optimization.

At the event, HashiCorp stated, "Last year, the number of HashiCorp clients increased by 100 companies. Korea is a rapidly growing market, and we expect total revenue of over 591 million in 2024."

"Hashicorp has focused on expanding the domestic ecosystem and building references for customers adopting the cloud." “We are currently in the stage of introducing each solution to various customers across industries, and ultimately, we will increase overall cloud efficiency through all solutions,” he said, expressing his aspirations.

He also said, "Although the adoption rate of public cloud in Korea is low, there is more consideration being given to adopting public cloud than expected, including in the manufacturing sector," adding, "HashiCorp can provide significant assistance in a successful cloud transition."