[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-656317-105":3,"detail-sidebar-cat-0-en-105":80,"doc-detail-656317-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":73,"head_meta":75,"extra_data":77,"updated_unix":79},105,"en","cloudguard-iaas-public-cloud-architecture-reference-and-best-practices-guide-for-successful-lift-and-shift-secure-migration-model-for-microsoft-azure-aws-and-google-cloud-platform","CloudGuard IaaS Public Cloud Architecture Reference and Best Practices - Guide for Successful Lift and Shift Secure Migration Model for Microsoft Azure, AWS, and Google Cloud Platform","","This white paper provides security reference architectures for public cloud IaaS, leveraging CloudGuard Network Security to support a Zero Trust approach. It explains how organizations can plan and execute secure lift and shift migrations across Microsoft Azure, Amazon Web Services, and Google Cloud Platform, aligned to business requirements and shared responsibility. It includes use cases, architecture diagrams, IaaS security segmentation, transit security hub concepts, and guidance for security and networking engineers and architects.",{"@graph":14,"@context":72},[15,34,55],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/technology/","Technology",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/cloudguard-iaas-public-cloud-architecture-reference-and-best-practices-guide-for-successful-lift-and-shift-secure-migration-model-for-microsoft-azure-aws-and-google-cloud-platform/656317/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/cloudguard-iaas-public-cloud-architecture-reference-and-best-practices-guide-for-successful-lift-and-shift-secure-migration-model-for-microsoft-azure-aws-and-google-cloud-platform/656317.png","ImageObject",300,407,{"name":42,"@type":43},"Aria Callaghan","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-11-02","2026-10-25",true,{"@type":52,"interactionType":53,"userInteractionCount":33},"InteractionCounter",{"@type":54},"ViewAction",{"@type":56,"mainEntity":57},"FAQPage",[58,64,68],{"name":59,"@type":60,"acceptedAnswer":61},"What is the main purpose of the white paper?","Question",{"text":62,"@type":63},"It outlines security reference architectures and a Zero Trust approach for public cloud IaaS using CloudGuard Network Security, enabling secure lift-and-shift migrations across major cloud providers.","Answer",{"name":65,"@type":60,"acceptedAnswer":66},"Which cloud platforms are covered for the reference architectures?",{"text":67,"@type":63},"The paper covers Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), along with related Check Point technology and technical examples.",{"name":69,"@type":60,"acceptedAnswer":70},"Who is the intended audience for this document?",{"text":71,"@type":63},"It is aimed at security and networking engineers, solution architects, and designers who want to integrate public cloud IaaS solutions with Check Point technology for advanced security.","https://schema.org",{"og:url":32,"og:type":74,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":76,"canonical":32},"index,follow",{"doc_id":78,"site_id":7},656317,1793030561,{"code":4,"msg":81,"data":82},"success",[83,87,91,95,100,104,109,114,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":84,"show_sort_weight":85,"slug":86},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":88,"show_sort_weight":89,"slug":90},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":92,"show_sort_weight":93,"slug":94},"Exam",70,"exam",{"id":96,"doc_module":4,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},5,"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":102,"slug":103},6,50,"technology",{"id":105,"doc_module":4,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},7,"Healthcare",40,"healthcare",{"id":110,"doc_module":4,"doc_module_name":25,"category_name":111,"show_sort_weight":112,"slug":113},8,"Research & Report",30,"research-report",{"id":115,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},9,"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":96,"slug":129},19,"General","general",{"code":4,"msg":81,"data":131},{"doc_id":78,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":101,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":33,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":139,"language":140,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":12,"update_tm":144,"read_time":145},962084926284,"https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","Security Reference Architectures for Public Clouds Using CloudGuard Network Security  \nGuide for a Successful Lift and Shift Secure Migration Model for Microsoft Azure, Amazon Web Services, and Google Cloud Platform  \nABSTRACT  \nThis white paper outlines use cases, architecture diagrams, and a Zero Trust approach that will allow organizations to build the best strategy for a public cloud data center. CloudGuard Network Security will be used to design the strategy , according to the organization’s business needs, within a variety of cloud service providers.  \nAUDIENCE  \nThe desire to transition from a hardware-centric to an application-centric network construct is driving more and more organizations to embrace the cloud as part of their IT strategy. As a result, businesses are rapidly adopting cloud-based solutions to virtualize their data centers, as well as extending applications and data to public cloud environments.  \nThis white paper aims to provide the reader with reference architectures using different technical examples taken from Microsoft Azure, Amazon Web Services, the Google Cloud Platform, and Check Point Software Technologies, as well as from a variety of technical blogs. The information presented in this paper is intended to educate and enable security and networking engineers, solution architects, and designers who would like to integrate public cloud IaaS solutions and Check Point technology for advanced security. To get the most from this paper, the reader should be well versed in cloud computing, network and security design, as well as Zero Trust methodologies.  \nTABLE OF CONTENTS  \nINTRODUCTION ............................................................................................................................................... 4  \nWhat is Lift-and-Shift? ........................................................................................................................................................ 4  \nLift-and-Shift Optimized Model ........................................................................................................................................... 4  \nShared Responsibility for Public IaaS................................................................................................................................. 5  \nZero Trust Model................................................................................................................................................................. 6  \nIaaS Security Segmentation ............................................................................................................................................... 7  \nHUB-AND-SPOKE PRINCIPLES....................................................................................................................... 9  \nHigh-Level Security Design .............................................................................................................................................. 10  \nREFERENCE ARCHITECTURE FOR PUBLIC CLOUD IAAS ......................................................................... 12  \nMacro-Segments and Micro-Segments With Transit Security Hubs ................................................................................ 12  \nMicrosoft Azure Security Architecture............................................................................................................................... 19  \nGoogle Cloud Platform (GCP) Security Architecture ........................................................................................................ 20  \nAmazon Web Services (AWS) Security Architecture ....................................................................................................... 22  \nTransit Gateway Appliance Mode and GWLB – Gateway Load Balancer............................................................... 24  \nUSE CASES ........................................................................................................","cbCais9zxe5C9dV2","https://ap.wps.com/l/cbCais9zxe5C9dV2","pdf",9790186,71,"English","# Introduction\n## What is Lift-and-Shift?\n## Lift-and-Shift Optimized Model\n## Shared Responsibility for Public IaaS\n## Zero Trust Model\n## IaaS Security Segmentation\n# HUB-AND-SPOKE PRINCIPLES\n## High-Level Security Design\n# Reference Architecture for Public Cloud IaaS\n## Macro-Segments and Micro-Segments With Transit Security Hubs\n## Microsoft Azure Security Architecture\n## Google Cloud Platform (GCP) Security Architecture\n## Amazon Web Services (AWS) Security Architecture\n## Transit Gateway Appliance Mode and GWLB - Gateway Load Balancer\n# Use Cases\n## Ingress Traffic to the Public Cloud\n## Egress Traffic\n## East-West Traffic in the Public Cloud\n## Data Center On-Premises Traffic to the Cloud\n## Remote Access to Corporate Resources Using the Public Cloud (SASE)\n# Consolidated Cloud Security Management\n# Infrastructure as Code\n## Infrastructure as Code Posture Management\n# Conclusion","[{\"question\":\"What is the main purpose of the white paper?\",\"answer\":\"It outlines security reference architectures and a Zero Trust approach for public cloud IaaS using CloudGuard Network Security, enabling secure lift-and-shift migrations across major cloud providers.\"},{\"question\":\"Which cloud platforms are covered for the reference architectures?\",\"answer\":\"The paper covers Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), along with related Check Point technology and technical examples.\"},{\"question\":\"Who is the intended audience for this document?\",\"answer\":\"It is aimed at security and networking engineers, solution architects, and designers who want to integrate public cloud IaaS solutions with Check Point technology for advanced security.\"}]","CloudGuard IaaS Public Cloud Architecture Reference and Best Practices - Guide for Successful Lift and Shift Secure Migration Model for Microsoft Azure, AWS, and Google Cloud Platform | PDF",1792967637,179]