{"id":33512,"date":"2019-10-31T21:53:01","date_gmt":"2019-10-31T18:53:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh\/"},"modified":"2019-10-31T21:53:01","modified_gmt":"2019-10-31T18:53:01","slug":"i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","title":{"rendered":"\u201eA tak to bude sta\u010dit\u201c: co poskytovatel\u00e9 cloudov\u00fdch slu\u017eeb ne\u0159\u00edkaj\u00ed o osobn\u00edch \u00fadaj\u00edch","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Jednou jsme obdr\u017eeli \u017e\u00e1dost o cloudov\u00e9 slu\u017eby. V hrub\u00fdch rysech jsme odhadli, co od n\u00e1s bude pot\u0159eba, a poslali zp\u011bt seznam ot\u00e1zek pro up\u0159esn\u011bn\u00ed detail\u016f. Pot\u00e9 jsme analyzovali odpov\u011bdi a pochopili: z\u00e1kazn\u00edk chce um\u00edstit do cloudu osobn\u00ed \u00fadaje druh\u00e9ho stupn\u011b ochrany. Odpov\u00edd\u00e1me mu: \u201eM\u00e1te druh\u00fd typ osobn\u00edch \u00fadaj\u016f, omlouv\u00e1me se, m\u016f\u017eeme ud\u011blat pouze soukrom\u00fd cloud.\u201c A on: \u201eV\u00edte, v spole\u010dnosti X mi mohou v\u0161echno um\u00edstit i do ve\u0159ejn\u00e9ho cloudu.\u201c<\/p>\n<p><img decoding=\"async\" alt=\"\u201eA tak to bude sta\u010dit\u201c: co poskytovatel\u00e9 cloudov\u00fdch slu\u017eeb ne\u0159\u00edkaj\u00ed o osobn\u00edch \u00fadaj\u00edch\" src=\"\/wp-content\/uploads\/2019\/05\/ecdf0e89fcf51a1eba70760eaf299977.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Foto Steve Crisp, Reuters<\/i><\/p>\n<p>Podivn\u00e9 v\u011bci! \u0160li jsme na web spole\u010dnosti X, prozkoumali jejich atesta\u010dn\u00ed dokumenty, zavrt\u011bli jsme hlavou a pochopili: ot\u00e1zky ohledn\u011b um\u00edst\u011bn\u00ed osobn\u00edch \u00fadaj\u016f jsou zcela otev\u0159en\u00e9 a je t\u0159eba je po\u0159\u00e1dn\u011b prov\u011b\u0159it. Co\u017e je to, co ud\u011bl\u00e1me v tomto p\u0159\u00edsp\u011bvku.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Jak to m\u00e1 v\u0161echno fungovat<\/h2>\n<p>\nNejprve si ujasn\u00edme, podle jak\u00fdch znak\u016f se osobn\u00ed \u00fadaje v\u016fbec \u0159ad\u00ed k ur\u010dit\u00e9mu stupni ochrany. To z\u00e1vis\u00ed na kategorii dat, po\u010det subjekt\u016f t\u011bchto dat, kter\u00e9 uchov\u00e1v\u00e1 a zpracov\u00e1v\u00e1 oper\u00e1tor, a tak\u00e9 na typu aktu\u00e1ln\u00edch hrozeb.<\/p>\n<p><img decoding=\"async\" alt=\"\u201eA tak to bude sta\u010dit\u201c: co poskytovatel\u00e9 cloudov\u00fdch slu\u017eeb ne\u0159\u00edkaj\u00ed o osobn\u00edch \u00fadaj\u00edch\" src=\"\/wp-content\/uploads\/2019\/05\/0f498c9736f80f539fcccaddaaf5526d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDefinice typ\u016f aktu\u00e1ln\u00edch hrozeb je uvedena v <noindex><a rel=\"nofollow\" href=\"http:\/\/pravo.gov.ru\/proxy\/ips\/?docbody=&amp;link_id=7&amp;nd=102160483\">na\u0159\u00edzen\u00ed vl\u00e1dy Rusk\u00e9 federace \u010d. 1119<\/a><\/noindex> ze dne 1. listopadu 2012 \u201eO schv\u00e1len\u00ed po\u017eadavk\u016f na ochranu osobn\u00edch \u00fadaj\u016f p\u0159i jejich zpracov\u00e1n\u00ed v informa\u010dn\u00edch syst\u00e9mech osobn\u00edch \u00fadaj\u016f\u201c:<\/p>\n<blockquote><p>\u201eHrozby 1. typu jsou relevantn\u00ed pro informa\u010dn\u00ed syst\u00e9m, pokud pro n\u011bj jsou tak\u00e9 <i>relevantn\u00ed hrozby souvisej\u00edc\u00ed<\/i> s existenc\u00ed nedokumentovan\u00fdch (neprohl\u00e1\u0161en\u00fdch) mo\u017enost\u00ed <i>v syst\u00e9mov\u00e9m softwaru<\/i>, kter\u00fd se pou\u017e\u00edv\u00e1 v informa\u010dn\u00edm syst\u00e9mu.<\/p>\n<p>Hrozby 2. typu jsou relevantn\u00ed pro informa\u010dn\u00ed syst\u00e9m, pokud pro n\u011bj jsou tak\u00e9 <i>relevantn\u00ed hrozby souvisej\u00edc\u00ed<\/i> s existenc\u00ed nedokumentovan\u00fdch (neprohl\u00e1\u0161en\u00fdch) mo\u017enost\u00ed <i>v aplika\u010dn\u00edm softwaru<\/i>, kter\u00fd se pou\u017e\u00edv\u00e1 v informa\u010dn\u00edm syst\u00e9mu.<\/p>\n<p>Hrozby 3. typu jsou relevantn\u00ed pro informa\u010dn\u00ed syst\u00e9m, pokud pro n\u011bj <i>jsou relevantn\u00ed hrozby nesouvisej\u00edc\u00ed<\/i> s existenc\u00ed nedokumentovan\u00fdch (neprohl\u00e1\u0161en\u00fdch) mo\u017enost\u00ed <i>v syst\u00e9mov\u00e9m a aplika\u010dn\u00edm softwaru<\/i>, kter\u00fd se pou\u017e\u00edv\u00e1 v informa\u010dn\u00edm syst\u00e9mu.\u201c<\/p><\/blockquote>\n<p>\nHlavn\u00edm bodem t\u011bchto definic je existence nedokumentovan\u00fdch (neprohl\u00e1\u0161en\u00fdch) mo\u017enost\u00ed. K potvrzen\u00ed absence nedokumentovan\u00fdch mo\u017enost\u00ed softwaru (v p\u0159\u00edpad\u011b cloudu to je hypervizor) se prov\u00e1d\u00ed certifikace FSTEK Ruska. Pokud oper\u00e1tor osobn\u00edch \u00fadaj\u016f prohla\u0161uje, \u017ee v softwaru takov\u00e9 mo\u017enosti nejsou, pak ani p\u0159\u00edslu\u0161n\u00e9 hrozby nejsou relevantn\u00ed. Hrozby 1. a 2. typu se oper\u00e1to\u0159i osobn\u00edch \u00fadaj\u016f velmi vz\u00e1cn\u011b pova\u017euj\u00ed za relevantn\u00ed.<\/p>\n<p>Krom\u011b stanoven\u00ed \u00farovn\u011b zabezpe\u010den\u00ed osobn\u00edch \u00fadaj\u016f mus\u00ed oper\u00e1tor tak\u00e9 identifikovat konkr\u00e9tn\u00ed aktu\u00e1ln\u00ed hrozby pro ve\u0159ejn\u00fd cloud a na z\u00e1klad\u011b zji\u0161t\u011bn\u00e9 \u00farovn\u011b zabezpe\u010den\u00ed osobn\u00edch \u00fadaj\u016f a aktu\u00e1ln\u00edch hrozeb ur\u010dit nezbytn\u00e1 opat\u0159en\u00ed a prost\u0159edky ochrany proti nim.<\/p>\n<p>Na FSTEK jsou v\u0161echny hlavn\u00ed hrozby jasn\u011b uvedeny v <noindex><a rel=\"nofollow\" href=\"https:\/\/bdu.fstec.ru\/\">BDU<\/a><\/noindex> (datab\u00e1ze hrozeb). Poskytovatel\u00e9 a odborn\u00edci na certifikaci cloudov\u00fdch infrastruktur tuto datab\u00e1zi ve sv\u00e9 pr\u00e1ci pou\u017e\u00edvaj\u00ed. Zde jsou p\u0159\u00edklady hrozeb:<\/p>\n<blockquote><p><noindex><a rel=\"nofollow\" href=\"https:\/\/bdu.fstec.ru\/threat\/ubi.044\">UBI.44<\/a><\/noindex>: \u201eHrozba spo\u010d\u00edv\u00e1 v mo\u017enosti poru\u0161en\u00ed bezpe\u010dnosti u\u017eivatelsk\u00fdch dat programy, kter\u00e9 funguj\u00ed uvnit\u0159 virtu\u00e1ln\u00edho stroje, \u0161kodliv\u00fdm softwarem, kter\u00fd funguje mimo virtu\u00e1ln\u00ed stroj\u201c. Tato hrozba je zp\u016fsobena p\u0159\u00edtomnost\u00ed zranitelnost\u00ed softwaru hypervizoru, kter\u00fd zaji\u0161\u0165uje izolaci adresn\u00edho prostoru, kter\u00fd se pou\u017e\u00edv\u00e1 pro ukl\u00e1d\u00e1n\u00ed u\u017eivatelsk\u00fdch dat program\u016f funguj\u00edc\u00edch uvnit\u0159 virtu\u00e1ln\u00edho stroje, p\u0159ed neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem ze strany \u0161kodliv\u00e9ho softwaru funguj\u00edc\u00edho mimo virtu\u00e1ln\u00ed stroj.<\/p>\n<p>Realizace t\u00e9to hrozby je mo\u017en\u00e1 za podm\u00ednky \u00fasp\u011b\u0161n\u00e9ho p\u0159ekon\u00e1n\u00ed hranic virtu\u00e1ln\u00edho stroje \u0161kodliv\u00fdm k\u00f3dem nejen vyu\u017eit\u00edm zranitelnost\u00ed hypervizoru, ale tak\u00e9 prov\u00e1d\u011bn\u00edm takov\u00e9ho vlivu z ni\u017e\u0161\u00edch (ve vztahu k hypervizoru) \u00farovn\u00ed fungov\u00e1n\u00ed syst\u00e9mu.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/bdu.fstec.ru\/threat\/ubi.101\">UBI.101<\/a><\/noindex>: \u201eHrozba spo\u010d\u00edv\u00e1 v mo\u017enosti neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu k chr\u00e1n\u011bn\u00fdm informac\u00edm jednoho u\u017eivatele cloudov\u00fdch slu\u017eeb ze strany jin\u00e9ho. Tato hrozba je zp\u016fsobena t\u00edm, \u017ee kv\u016fli charakteristik\u00e1m cloudov\u00fdch technologi\u00ed musej\u00ed u\u017eivatel\u00e9 cloudov\u00fdch slu\u017eeb spole\u010dn\u011b vyu\u017e\u00edvat stejnou cloudovou infrastrukturu. Realizace t\u00e9to hrozby je mo\u017en\u00e1 v p\u0159\u00edpad\u011b, \u017ee dojde k chyb\u00e1m p\u0159i d\u011blen\u00ed prvk\u016f cloudov\u00e9 infrastruktury mezi u\u017eivateli cloudov\u00fdch slu\u017eeb, stejn\u011b jako p\u0159i izolaci jejich zdroj\u016f a odd\u011blen\u00ed dat navz\u00e1jem.<\/p><\/blockquote>\n<p>\nOchr\u00e1nit se p\u0159ed t\u011bmito hrozbami je mo\u017en\u00e9 pouze pomoc\u00ed hypervizoru, proto\u017ee ten \u0159\u00edd\u00ed virtu\u00e1ln\u00ed zdroje. Tak\u017ee hypervizor je t\u0159eba pova\u017eovat za prost\u0159edek ochrany.<\/p>\n<p>A v souladu s <noindex><a rel=\"nofollow\" href=\"https:\/\/fstec.ru\/normotvorcheskaya\/akty\/53-prikazy\/691-prikaz-fstek-rossii-ot-18-fevralya-2013-g-n-21\">p\u0159\u00edkazem FSTEK \u010d. 21<\/a><\/noindex> Od 18. \u00fanora 2013 je hypervizor povinen proj\u00edt certifikac\u00ed na absenci NDU na \u00farovni 4, jinak bude pou\u017e\u00edv\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f \u00farovn\u011b 1 a 2 s n\u00edm nez\u00e1konn\u00e9 (<i>\u201eodst. 12. ... Pro zaji\u0161t\u011bn\u00ed \u00farovn\u00ed ochrany osobn\u00edch \u00fadaj\u016f 1 a 2, stejn\u011b jako pro zaji\u0161t\u011bn\u00ed \u00farovn\u011b ochrany osobn\u00edch \u00fadaj\u016f 3 v informa\u010dn\u00edch syst\u00e9mech, pro kter\u00e9 byly k aktu\u00e1ln\u00edmu stavu identifikov\u00e1ny hrozby typu 2, se pou\u017e\u00edvaj\u00ed prost\u0159edky ochrany informac\u00ed, jejich\u017e software pro\u0161el kontrolou nejm\u00e9n\u011b na \u00farovni 4, kde se neobjevil nedeklarovan\u00fd potenci\u00e1l\u201c<\/i>).<\/p>\n<p>Pot\u0159ebnou \u00farove\u0148 certifikace, NDU-4, m\u00e1 pouze jeden hypervizor, rusk\u00e9ho v\u00fdvoje \u2014 <noindex><a rel=\"nofollow\" href=\"http:\/\/gorizont-vs.ru\/\">Horizont VC<\/a><\/noindex>. M\u011bkk\u00e9 \u0159e\u0161en\u00ed, m\u00edrn\u011b \u0159e\u010deno, nen\u00ed p\u0159\u00edli\u0161 popul\u00e1rn\u00ed. Komer\u010dn\u00ed cloudy obvykle stav\u00ed na VMware vSphere, KVM, Microsoft Hyper-V. \u017d\u00e1dn\u00fd z t\u011bchto produkt\u016f nem\u00e1 certifikaci na NDU-4. Pro\u010d? Pravd\u011bpodobn\u011b z\u00edsk\u00e1n\u00ed takov\u00e9 certifikace pro v\u00fdrobce zat\u00edm nen\u00ed ekonomicky v\u00fdhodn\u00e9.<\/p>\n<p>A pro osobn\u00ed \u00fadaje \u00farovn\u011b 1 a 2 v ve\u0159ejn\u00e9m cloudu n\u00e1m zb\u00fdv\u00e1 pouze Horizont VC. Smutn\u00e9, ale pravdiv\u00e9.<\/p>\n<h3>Jak v\u0161echno (podle na\u0161eho n\u00e1zoru) opravdu funguje<\/h3>\n<p>\nNa prvn\u00ed pohled to vypad\u00e1 dost p\u0159\u00edsn\u011b: uveden\u00e9 hrozby by m\u011bly b\u00fdt eliminov\u00e1ny spr\u00e1vn\u00fdm nastaven\u00edm standardn\u00edch mechanism\u016f ochrany hypervizoru certifikovan\u00e9ho podle NDU-4. Ale existuje jedna kli\u010dka. Podle na\u0159\u00edzen\u00ed FSTEK \u010d. 21 (<i>\u201eodst. 2 Bezpe\u010dnost osobn\u00edch \u00fadaj\u016f p\u0159i jejich zpracov\u00e1n\u00ed v informa\u010dn\u00edm syst\u00e9mu osobn\u00edch \u00fadaj\u016f (d\u00e1le \u2014 informa\u010dn\u00ed syst\u00e9m) zaji\u0161\u0165uje provozovatel nebo osoba, kter\u00e1 zpracov\u00e1v\u00e1 osobn\u00ed \u00fadaje na z\u00e1klad\u011b pov\u011b\u0159en\u00ed provozovatele podle <noindex><a rel=\"nofollow\" href=\"http:\/\/about:blank\">legislativy<\/a><\/noindex> Rusk\u00e9 federace\u201c<\/i>), poskytovatel\u00e9 samostatn\u011b hodnot\u00ed aktu\u00e1lnost mo\u017en\u00fdch hrozeb a podle toho vyb\u00edraj\u00ed ochrann\u00e1 opat\u0159en\u00ed. Proto, pokud nebudou hrozby UBI.44 a UBI.101 pova\u017eov\u00e1ny za aktu\u00e1ln\u00ed, nevznikne ani pot\u0159eba pou\u017e\u00edvat certifikovan\u00fd hypervizor podle NDU-4, kter\u00fd by m\u011bl zaji\u0161\u0165ovat ochranu p\u0159ed nimi. A to bude dosta\u010duj\u00edc\u00ed pro z\u00edsk\u00e1n\u00ed osv\u011bd\u010den\u00ed o shod\u011b ve\u0159ejn\u00e9ho cloudu s \u00farovn\u011bmi ochrany, kter\u00e9 budou uspokojovat Roskomnadzor.<\/p>\n<p>Samoz\u0159ejm\u011b, krom\u011b Roskomnadzoru m\u016f\u017ee p\u0159ijet i FSTEC \u2014 a tato organizace je mnohem pe\u010dliv\u011bj\u0161\u00ed v technick\u00fdch ot\u00e1zk\u00e1ch. Ur\u010dit\u011b ji zaujme, pro\u010d byly pr\u00e1v\u011b hrozby UBI.44 a UBI.101 pova\u017eov\u00e1ny za neaktu\u00e1ln\u00ed? Ale obvykle FSTEC prov\u00e1d\u00ed kontrolu pouze tehdy, kdy\u017e obdr\u017e\u00ed informace o n\u011bjak\u00e9m v\u00fdzna\u010dn\u00e9m incidentu. V tomto p\u0159\u00edpad\u011b nejprve nav\u0161t\u00edv\u00ed oper\u00e1tora osobn\u00edch \u00fadaj\u016f \u2014 tedy dodavatele cloudov\u00fdch slu\u017eeb. V nejhor\u0161\u00edm p\u0159\u00edpad\u011b oper\u00e1tor dostane malou pokutu \u2014 nap\u0159\u00edklad pro Twitter na za\u010d\u00e1tku roku. <noindex><a rel=\"nofollow\" href=\"https:\/\/vc.ru\/legal\/59169-roskomnadzor-sostavil-protokol-o-pravonarushenii-twitter\">pokuta<\/a><\/noindex> v podobn\u00e9m p\u0159\u00edpad\u011b \u010dinila 5000 rubl\u016f. Pot\u00e9 FSTEC pokra\u010duje k poskytovateli cloudov\u00fdch slu\u017eeb. Kter\u00fd m\u016f\u017ee b\u00fdt zcela zbaven licenc\u00ed kv\u016fli nedodr\u017een\u00ed regula\u010dn\u00edch po\u017eadavk\u016f \u2014 a to jsou ji\u017e zcela jin\u00e1 rizika, jak pro cloudov\u00e9ho poskytovatele, tak pro jeho klienty. Ale, opakuji, <i>k proveden\u00ed kontroly FSTEC obvykle pot\u0159ebuje jasn\u00fd podn\u011bt.<\/i> Tak\u017ee cloudov\u00ed poskytovatel\u00e9 jsou p\u0159ipraveni riskovat. Do prvn\u00edho v\u00e1\u017en\u00e9ho incidentu. <\/p>\n<p>Je tu je\u0161t\u011b skupina \u201ev\u00edce odpov\u011bdn\u00fdch\u201c poskytovatel\u016f, kte\u0159\u00ed se domn\u00edvaj\u00ed, \u017ee lze v\u0161echny hrozby uzav\u0159\u00edt dopln\u011bn\u00edm hypervisoru o vrstvu jako vGate. Ale v rozd\u011blen\u00e9m mezi z\u00e1kazn\u00edky virtu\u00e1ln\u00edm prost\u0159ed\u00ed lze \u00fa\u010dinn\u00fd mechanismus ochrany pro n\u011bkter\u00e9 hrozby (nap\u0159\u00edklad uvedenou UBI.101) realizovat pouze na \u00farovni certifikovan\u00e9ho hypervisoru dle NDV-4, proto\u017ee jak\u00e9koli syst\u00e9mov\u00e9 nadstavby na standardn\u00ed funkce hypervisoru p\u0159i spr\u00e1v\u011b zdroj\u016f (zejm\u00e9na opera\u010dn\u00ed pam\u011bti) nemaj\u00ed vliv.<\/p>\n<h3>Jak pracujeme my<\/h3>\n<p>\nM\u00e1me cloudov\u00fd segment realizovan\u00fd na hypervisoru certifikovan\u00e9m FSTEC (ale bez certifikace dle NDV-4). Tento segment je akreditov\u00e1n, tak\u017ee v cloudu na jeho z\u00e1klad\u011b lze umis\u0165ovat osobn\u00ed \u00fadaje <i>3 a 4 \u00farovn\u011b ochrany<\/i> \u2014 po\u017eadavky na ochranu p\u0159ed nedeklarovan\u00fdmi mo\u017enostmi zde dodr\u017eovat nen\u00ed t\u0159eba. Tady je, mimochodem, architektura na\u0161eho zabezpe\u010den\u00e9ho segmentu cloudu:<\/p>\n<p><img decoding=\"async\" alt=\"\u201eA tak to bude sta\u010dit\u201c: co poskytovatel\u00e9 cloudov\u00fdch slu\u017eeb ne\u0159\u00edkaj\u00ed o osobn\u00edch \u00fadaj\u00edch\" src=\"\/wp-content\/uploads\/2019\/05\/05a21f4a6a15ff7db3ea83a4bf2f13c5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSyst\u00e9my pro osobn\u00ed \u00fadaje <i>1 a 2 \u00farovn\u011b ochrany<\/i> Pou\u017e\u00edv\u00e1me pouze dedikovan\u00e9 za\u0159\u00edzen\u00ed. Teprve v tomto p\u0159\u00edpad\u011b, nap\u0159\u00edklad hrozba UBI.101, nen\u00ed skute\u010dn\u011b aktu\u00e1ln\u00ed, proto\u017ee serverov\u00e9 stojany, kter\u00e9 nejsou spojeny jedn\u00edm virtu\u00e1ln\u00edm prost\u0159ed\u00edm, si nemohou navz\u00e1jem ovliv\u0148ovat i p\u0159i um\u00edst\u011bn\u00ed v jednom datov\u00e9m centru. Pro takov\u00e9 p\u0159\u00edpady nab\u00edz\u00edme slu\u017ebu pron\u00e1jmu dedikovan\u00e9ho za\u0159\u00edzen\u00ed (je\u0161t\u011b naz\u00fdv\u00e1na Hardware as a Service, za\u0159\u00edzen\u00ed jako slu\u017eba).<\/p>\n<p>Pokud si nejste jisti, jak\u00e1 \u00farove\u0148 ochrany je po\u017eadov\u00e1na pro v\u00e1\u0161 syst\u00e9m osobn\u00edch \u00fadaj\u016f, tak\u00e9 pom\u00e1h\u00e1me s jejich klasifikac\u00ed.<\/p>\n<h3>V\u00fdstup<\/h3>\n<p>\nN\u00e1\u0161 mal\u00fd pr\u016fzkum trhu uk\u00e1zal: n\u011bkte\u0159\u00ed cloudov\u00ed oper\u00e1to\u0159i jsou ochotni riskovat jak bezpe\u010dnost dat klient\u016f, tak vlastn\u00ed budoucnost, aby z\u00edskali zak\u00e1zku. Ale my se v t\u011bchto z\u00e1le\u017eitostech dr\u017e\u00edme jin\u00e9 politiky, kterou jsme shrnuli v\u00fd\u0161e. Budeme r\u00e1di odpov\u011bd\u011bt na va\u0161e ot\u00e1zky v koment\u00e1\u0159\u00edch.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/croccloudteam\/blog\/451528\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439. \u0417\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0432\u0435\u0442\u044b \u0438 \u043f\u043e\u043d\u044f\u043b\u0438: \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a \u0445\u043e\u0447\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c \u0432 \u043e\u0431\u043b\u0430\u043a\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041e\u0442\u0432\u0435\u0447\u0430\u0435\u043c \u0435\u043c\u0443: \u00ab\u0423 \u0432\u0430\u0441 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0435\u0440\u0441\u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u0432\u0438\u043d\u0438\u0442\u0435, \u043c\u043e\u0436\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u0442\u043d\u043e\u0435 \u043e\u0431\u043b\u0430\u043a\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c\u00bb. \u0410 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25212,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33512","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u00ab\u0418 \u0442\u0430\u043a \u0441\u043e\u0439\u0434\u0435\u0442\u00bb: \u0447\u0442\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043d\u0435 \u0434\u043e\u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u044e\u0442 \u043e \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:53:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:53:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u201eA tak to bude sta\u010dit\u201c: co cloudov\u00ed poskytovatel\u00e9 nezmi\u0148uj\u00ed o osobn\u00edch \u00fadaj\u00edch | ProHoster","description":"Jednou k n\u00e1m p\u0159i\u0161la \u017e\u00e1dost o slu\u017eby cloudu. Odhadli jsme v hrub\u00fdch rysech, co od n\u00e1s bude pot\u0159eba, a poslali zp\u011bt seznam ot\u00e1zek pro up\u0159esn\u011bn\u00ed detail\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u00ab\u0418 \u0442\u0430\u043a \u0441\u043e\u0439\u0434\u0435\u0442\u00bb: \u0447\u0442\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043d\u0435 \u0434\u043e\u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u044e\u0442 \u043e \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster","og:description":"\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:01+00:00","article:modified_time":"2019-10-31T18:53:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33512","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:35:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:23","updated":"2026-01-21 15:35:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=33512"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33512\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/25212"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=33512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=33512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=33512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}