How can I host a web application (Django/Flask) such that its database is in the cloud and only employees of my company can manage it from any location? If not web application what other types of applications should be used to handle all types of devices, ensure company privacy and be in the cloud at the same time?
2 Answers
There is an answer for AWS so I will provide a solution using Google Cloud.
First, you can deploy your application using Google Kubernetes Engine or Google Compute Engine or App Engine.
Second, you need to create an external HTTPS load balancer for public access from internet.
Third, you need to set up Identity Aware Proxy to allow only user with Identity allowed to access the application (Google Identities or third party identities)
From my own experiences with AWS and GCP, I found GCP Identity Aware Proxy the easier solution to set up but you will have less control and less options on authentication and authorisation methods.
There are likely many architectures for this scenario offered by different cloud providers.
In AWS, for example, you could do this with a VPC comprising of a combination of public and private subnets, plus site-to-site VPN access. The web server would be in the public subnet listening on an elastic IP, while the DB would be in the private subnet and connected via VPN and a virtual private gateway to your corporate site.
It all depends on your specific requirements and constraints.
See just one of many possible examples:
Related