Scaleway

Initial Setup: Choose from pre-configured InstantApps or manually deploy software on Scaleway Instances or Kubernetes clusters.

Provisioning Infrastructure: Select compute resources (e.g., General Purpose Instances, Elastic Metal servers) based on workload needs.

Software Deployment:

• Use Docker, Ansible, or Kubernetes for deployment.

• One-click deployment available for popular tools like OpenVPN, GitLab Runner, and phpMyAdmin.

Configuration & Integration:

• Customize networking, storage, and security settings.

• Integrate with external services or APIs.

Testing & Validation: Verify performance, scalability, and security configurations.

Monitoring & Scaling: Use Scaleway’s Cockpit dashboard and APIs to monitor usage and scale resources as needed.

Infrastructure Flexibility: Choose from virtual machines, bare metal servers, and GPU instances.

Software Stack Control: Full control over OS, middleware, and application layers.

Tagging & Budgeting: Use virtual tagging to organize resources by team, environment, or region.

Cost Allocation: Customize cost reports and allocate expenses across departments.

API Access: Automate deployments and resource management via Scaleway’s RESTful APIs.

Multicloud Compatibility: Integrate with AWS, Azure, and GCP using tools like Holori for unified cost management.

Security Customization: Configure firewalls, VPNs, and access control lists (ACLs) for tailored security.

Setup Fees: Typically none for basic deployments; costs depend on selected resources.

Compute Charges: Based on instance type, duration, and usage (e.g., hourly or monthly).

Storage Costs: Charged per GB for block storage, object storage, and snapshots.

Network Charges: Free inbound traffic; outbound traffic may incur fees depending on volume.

Support Plans:

• Basic support included.

• Premium support available at additional cost (custom SLAs, dedicated account manager).

Maintenance Costs: users manage updates unless using managed services.

Monitoring & Alerts: Included via Cockpit; advanced alerting via third-party tools may add cost

Interactive Onboarding: Step-by-step guides for setting up infrastructure, enabling MFA, and managing IAM roles.

Documentation Portal: Extensive technical documentation covering compute, storage, networking, and security setup.

Security Training: Courses on enabling/disabling Multi-Factor Authentication (MFA), password management, and compliance requirements.

Support Channels:

• Community forums and Slack groups.

• Email and ticket-based support.

• Premium support plans with dedicated account managers.

Console-Based Guidance: Security checklists and prompts for new IAM members to comply with organizational policies

Multi-Factor Authentication (MFA): Enforced at both user and organizational levels.

Role-Based Access Control (RBAC): Granular permissions for users and services.

Encryption:

• Disk encryption for data at rest.

• SSL/TLS for data in transit.

Audit Logging: Tracks access and changes to resources for compliance and monitoring.

Penetration Testing: Regular internal and external security assessments.

Endpoint Protection: Includes mobile device management and email security protocols.

Compliance Certifications:

• GDPR

• ISO/IEC 27001

• HDS (Health Data Hosting)

Regular Updates: Scaleway releases updates frequently to patch vulnerabilities and improve performance.

Security Bulletins: Public disclosure of critical vulnerabilities like the “Ingress Nightmare” affecting Kubernetes ingress controllers.

Automated Patch Management: Managed services receive automatic updates; manual deployments require user action.

Trust Center Notifications: Users can subscribe to update alerts and security advisories

Full Data Ownership: Customers retain full ownership of their data stored and processed on Scaleway infrastructure.

Data Portability: Users can export data at any time using standard formats and APIs to avoid vendor lock-in.

No Proprietary Lock-In: Scaleway avoids proprietary formats that restrict migration or integration with other platforms.

Contract Clauses: Scaleway contracts include specific terms that protect data ownership and portability rights.

Backup and Export Tools: Users can automate backups and schedule exports to external storage or cloud providers.

Elastic Infrastructure: Users can scale resources (CPU, RAM, storage) up or down instantly via the Scaleway console or API.

Pay-as-You-Go Model: Charges are based on actual usage, allowing cost-effective scaling without long-term commitments.

No Downtime Scaling: Most services support live scaling without rebooting or service interruption

Auto-Scaling Options: Available for Kubernetes clusters and serverless functions to handle dynamic workloads.

Resource Tagging: Helps organize and manage scaling across teams, projects, or environments.

No Long-Term Lock-In: Most services are billed monthly or hourly, with no mandatory long-term contracts.

Automatic Renewal: Subscriptions renew automatically unless canceled before the billing cycle ends.

Cancellation Process:

• Users can cancel services via the Scaleway console.

• No cancellation fees for standard services.

• Reserved instances or premium support may have minimum commitment periods.

Contract Access: Users can download and review their contracts anytime from the Scaleway dashboard.

Transparency: Contracts outline rights, responsibilities, and legal compliance clearly for both parties

GDPR (General Data Protection Regulation): Ensures data privacy and protection for EU-based users.

ISO/IEC 27001: International standard for information security management systems.

HDS (Health Data Hosting): Certified to host sensitive health data in compliance with French regulations.

SecNumCloud (in progress): Scaleway is undergoing qualification by ANSSI, France’s cybersecurity agency, for one of the world’s strictest cloud security standards.

Data Sovereignty: Infrastructure located in France and the Netherlands supports compliance with European data residency laws.