Cloud Computing

Cloud Computing defined by NIST with what 5 characteristics

• On-Demand Self-Service: Users can provision computing resources without human interaction.

• Broad Network Access: Accessible over the internet via phones, tablets, laptops, etc.

• Resource Pooling: Multi-tenant model; resources dynamically assigned.

• Rapid Elasticity: Scales automatically to meet demand.

• Measured Service: Pay-per-use model with metering.

Also:

• Self-patching, self-healing infrastructure

• Adaptive, AI-driven security

• Cross-platform compatibility

Why organizations transition to cloud

Common reasons include:

• Data center lease expiration

• Reducing costs (pay-as-you-go)

• Scalability & performance

• Business agility & innovation

• Better disaster recovery and backup

• Enabling remote work

• Access to global infrastructure and AI tools

Lifecycle triggers:

• Mergers, acquisitions, divestitures

• System modernization

Skills for cloud professionals: Continuous Learning

Keep up with evolving technologies.

Skills for cloud professionals: Security Skills

IAM, encryption, compliance, cloud-native threats.

Skills for cloud professionals: Infrastructure and Devops

VPCs, containers, orchestration tools.

Skills for cloud professionals: Business Acumen

Understand how cloud supports operations.

Skills for cloud professionals: Automation

Use tools like Terraform and Kubernetes.

Skills for cloud professionals: Automation

Use tools like Terraform and Kubernetes.

Skills for cloud professionals: Growth Mindset

Embrace lifelong learning.

Cloud Deployment Models: public cloud

description: Shared infrastructure managed by a CSP (e.g., AWS, Azure)

Best for: Cost efficiency, scalability

Cloud Deployment Models: private cloud

description: Dedicated infrastructure for one organization

Best for: High control, compliance

Cloud Deployment Models: Hybrid cloud

description: Mix of public + private (and possibly on-prem)

Best for: Flexible, secure, supports legacy

Cloud Deployment Models: Multi-cloud

Description: Uses services from multiple CSPs simultaneously

Best for: Avoid lock-in, best-of-breed tools

Cloud Deployment Models: Community cloud

Description: Shared by multiple orgs with similar needs

Best for: Healthcare, education, gov collaborations

Cloud Deployment Models: Cloud within a cloud

Description: Run traditional VMware on a public cloud

Best for: Familiar tools, seamless migration

Cloud Service Models: SaaS

Ready-to-use apps over the internet. (e.g., Google Workspace, Salesforce)

Cloud Service Models: PaaS

Platform to build/deploy apps. (e.g., Azure App Services)

Cloud Service Models: IaaS

Full infrastructure. Most control. (e.g., AWS EC2, Azure VMs)

Cloud Service Models: FWaaS

Cloud-hosted firewalls for secure access and traffic control.

Service Model Security Concerns: SaaS

Customer Responsibilities: Manage access, data, identity.

Key Security Risks: Data breaches, phishing, weak IAM

Service Model Security Concerns: PaaS

Customer Responsibilities: Secure app logic, configurations.

Key Security Risks: Misconfigurations, vulnerable code

Service Model Security Concerns: IaaS

Customer Responsibilities: Manage OS, apps, storage, IAM.

Key Security Risks: Unpatched systems, compliance failures