Chapter 8 Quality attributes and sizing of the dXp • Use a virtual private cloud (VPC) to integrate with in-house/on premise applications. • Leverage adaptors provided by the cloud provider to integrate the enterprise application to the on-premise applications. Security Security involves various categories, as discussed in Chapters 6 and 7. From a cloud deployment standpoint, infrastructure security and data privacy are key concerns. We need to carefully evaluate the infrastructure-level security provided by the cloud provider; that includes firewall, layered security, and security measures against denial of service (DoS) or distributed denial of service (DDoS). We should also check for regulatory requirements and compliance requirements for the data storage location and options provided by the cloud provider for the same. Integration design Most of the modern digital applications use service-oriented design for integrations. The digital platform should be designed to use REST-based services for all its integrations. This would provide an easier and extensible way to integrate with all external and third- party applications. When we deploy the CMS or other systems in headless mode, the RESTful integration model can easily consume (and is flexible to adapt to) this headless integration model. Cloud Deployment Model A typical cloud deployment model for a DXP application on the Amazon Cloud is shown in Figure 8-1. 226