Principles-Cloud Computing - Introduction
Principles-Cloud Computing - Introduction
4 minutes
When you turn on a light, you simply want the light to work. You know you need electricity for that to happen, but in
that moment, the details of how the electricity gets to the light bulb aren't important. You might not think about
electricity being created in a power plant, traveling through a large network of high-voltage transmission lines to your
town, going through a substation, and eventually making its way into your home.
The process of turning on a light is hidden behind the simple act of flipping a switch. At this point, electricity becomes a
utility, which has many benefits. First, you only pay for what you need. When you buy a light bulb, you don't pay your
electricity provider up front for how long you could possibly use it. Instead, you pay for the amount of electricity that
you actually use. Second, you don't worry about how or when power plants upgrade to the latest technology. Finally,
you don't have to manage scaling the electricity. For example, as people move to your town, you can rest assured that
your light will stay on.
As a technology professional, it would be nice to have these same benefits when developing and deploying applications.
Storing data, streaming video, or even hosting a website all require managing hardware and software. This management
is an unnecessary obstacle when delivering your application to your users. Luckily there is a solution to this problem:
cloud computing.
Learning objectives
In this module, you will:
Explore common cloud computing services
Explore the benefits of cloud computing
Decide which cloud deployment model is best for you
The three verticals, virtual machines, containers, and serverless, show different architectures. Virtual machines starts at
physical hardware and has layers built on it: host operating system, hypervisor controller, and then two virtual machines
on top with one running Linux and two apps and one running Windows and two apps. Containers starts with physical
hardware with additional layers: host operating system, container engine, and then three containers, each with their
own dependencies and hosted apps. Serverless starts with physical hardware with additional layers: host operating
system, serverless runtime, and then eight functions.
Storage
Most devices and applications read and/or write data. Here are some examples:
Buying a movie ticket online
Looking up the price of an online item
Taking a picture
Sending an email
Leaving a voicemail
In all of these cases, data is either read (looking up a price) or written (taking a picture). The type of data and how it's
stored can be different in each of these cases.
Cloud providers typically offer services that can handle all of these types of data. For example, if you wanted to store
text or a movie clip, you could use a file on disk. If you had a set of relationships such as an address book, you could take
a more structured approach like using a database.
The advantage to using cloud-based data storage is you can scale to meet your needs. If you find that you need more
space to store your movie clips, you can pay a little more and add to your available space. In some cases, the storage can
even expand and contract automatically - so you pay for exactly what you need at any given point in time.
Summary
Every business has different needs and requirements. Cloud computing is flexible and cost-efficient, which can be
beneficial to every business, whether it's a small start-up or a large enterprise.
It's cost-effective
Cloud computing provides a pay-as-you-go or consumption-based pricing model.
This consumption-based model brings with it many benefits, including:
No upfront infrastructure costs
No need to purchase and manage costly infrastructure that you may not use to its fullest
The ability to pay for additional resources only when they are needed
The ability to stop paying for resources that are no longer needed
This also allows for better cost prediction. Prices for individual resources and services are provided so you can predict
how much you will spend in a given billing period based on your expected usage. You can also perform analysis based on
future growth using historical usage data tracked by your cloud provider.
It's scalable
You can increase or decrease the resources and services used based on the demand or workload at any given time.
Cloud computing supports both vertical and horizontal scaling depending on your needs.
Vertical scaling, also known as "scaling up", is the process of adding resources to increase the power of an existing
server.
- Some examples of vertical scaling are: adding more CPUs, or adding more memory.
Horizontal scaling, also known as "scaling out", is the process of adding more servers that function together as one unit.
- For example, you have more than one server processing incoming requests.
Scaling can be done manually or automatically based on specific triggers such as CPU utilization or the number of
requests and resources that can be allocated or de-allocated in minutes.
It's elastic
As your workload changes due to a spike or drop in demand, a cloud computing system can compensate by
automatically adding or removing resources.
For example, imagine your website is featured in a news article, leading to a spike in traffic overnight. Since the cloud is
elastic, it automatically allocates more computing resources to handle the increased traffic. When the traffic begins to
normalize, the cloud automatically de-allocates the additional resources to minimize cost.
Another example is if you are running an application used by employees, you can have the cloud automatically add
resources for the peak operating hours during which most people access the application, and remove the resources at
the usual end of the day.
It's current
When you use the cloud, you're able to focus on what matters: building and deploying applications. Cloud usage
eliminates the burdens of maintaining software patches, hardware setup, upgrades, and other IT management tasks. All
of this is automatically done for you to ensure you're using the latest and greatest tools to run your business.
Additionally, the computer hardware is maintained and upgraded by the cloud provider. For example, if a disk fails, the
disk will be replaced by the cloud provider. If a new hardware update becomes available, you don't have to go through
the process of replacing your hardware. The cloud provider will ensure that the hardware updates are made available to
you automatically.
It's reliable
When you're running a business, you want to be confident your data is always going to be there. Cloud computing
providers offer data backup, disaster recovery, and data replication services to make sure your data is always safe. In
addition, redundancy is often built into cloud services architecture so if one component fails, a backup component takes
its place. This is referred to as fault tolerance and it ensures that your customers aren't impacted when a disaster occurs.
It's global
Cloud providers have fully redundant datacenters located in various regions all over the globe. This gives you a local
presence close to your customers to give them the best response time possible no matter where in the world they are.
You can replicate your services into multiple regions for redundancy and locality, or select a specific region to ensure you
meet data-residency and compliance laws for your customers.
It's secure
Think about how you secure your datacenter. You have physical security – who can access the building, who can operate
the server racks, and so on. You also have digital security – who can connect to your systems and data over the network.
Cloud providers offer a broad set of policies, technologies, controls, and expert technical skills that can provide better
security than most organizations can otherwise achieve. The result is strengthened security, which helps to protect data,
apps, and infrastructure from potential threats.
When it comes to physical security – threats to cloud infrastructure, cloud providers invest heavily in walls, cameras,
gates, security personnel, and so on, to protect physical assets. They also have strict procedures in place to ensure
employees have access only to those resources that they've been authorized to manage.
Let us talk about digital security. You want only authorized users to be able to log into virtual machines or storage
systems running in the cloud. Cloud providers offer tools that help you mitigate security threats, and you must use these
tools to protect the resources you use.
Summary
Cloud computing makes running a business easier. It's cost-effective, scalable, elastic, current, reliable, and secure. This
means you're able to spend more time on what matters and less time managing the underlying details.
Compliance Offerings
The following list provides details about some of the compliance offerings available.
Criminal Justice Information Services (CJIS). Any US state or local agency that wants to access the FBI's CJIS
database is required to adhere to the CJIS Security Policy. Azure is the only major cloud provider that
contractually commits to conformance with the CJIS Security Policy, which commits Microsoft to adhering to the
same requirements that law enforcement and public safety entities must meet.
Cloud Security Alliance (CSA) STAR Certification. Azure, Intune, and Microsoft Power BI have obtained STAR
Certification, which involves a rigorous independent third-party assessment of a cloud provider's security
posture. This STAR certification is based on achieving ISO/IEC 27001 certification and meeting criteria specified
in the Cloud Controls Matrix (CCM). This certification demonstrates that a cloud service provider:
o Conforms to the applicable requirements of ISO/IEC 27001.
o Has addressed issues critical to cloud security as outlined in the CCM.
o Has been assessed against the STAR Capability Maturity Model for the management of activities in CCM
control areas.
General Data Protection Regulation (GDPR). As of May 25, 2018, a European privacy law — GDPR — is in effect.
GDPR imposes new rules on companies, government agencies, non-profits, and other organizations that offer
goods and services to people in the European Union (EU), or that collect and analyze data tied to EU residents.
The GDPR applies no matter where you are located.
EU Model Clauses. Microsoft offers customers EU Standard Contractual Clauses that provide contractual
guarantees around transfers of personal data outside of the EU. Microsoft is the first company to receive joint
approval from the EU's Article 29 Working Party that the contractual privacy protections Azure delivers to its
enterprise cloud customers meet current EU standards for international transfers of data. This ensures that
Azure customers can use Microsoft services to move data freely through Microsoft's cloud from Europe to the
rest of the world.
Health Insurance Portability and Accountability Act (HIPAA). HIPAA is a US federal law that regulates patient
Protected Health Information (PHI). Azure offers customers a HIPAA Business Associate Agreement (BAA),
stipulating adherence to certain security and privacy provisions in HIPAA and the Health Information
Technology for Economic and Clinical Health (HITECH) Act. To assist customers in their individual compliance
efforts, Microsoft offers a BAA to Azure customers as a contract addendum.
International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC)
27018. Microsoft is the first cloud provider to have adopted the ISO/IEC 27018 code of practice, covering the
processing of personal information by cloud service providers.
Multi-Tier Cloud Security (MTCS) Singapore. After rigorous assessments conducted by the MTCS Certification
Body, Microsoft cloud services received MTCS 584:2013 certification across all three service classifications:
o Infrastructure as a Service (IaaS)
o Platform as a Service (PaaS)
o Software as a Service (SaaS)
Microsoft was the first global cloud solution provider (CSP) to receive this certification across all three classifications.
Service Organization Controls (SOC) 1, 2, and 3. Microsoft-covered cloud services are audited at least annually
against the SOC report framework by independent third-party auditors. The Microsoft cloud services audit
covers controls for data security, availability, processing integrity, and confidentiality as applicable to in-scope
trust principles for each service.
National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF). NIST CSF is a voluntary
Framework that consists of standards, guidelines, and best practices to manage cybersecurity-related risks.
Microsoft cloud services have undergone independent, third-party Federal Risk and Authorization Management
Program (FedRAMP) Moderate and High Baseline audits, and are certified according to the FedRAMP standards.
Additionally, through a validated assessment performed by the Health Information Trust Alliance (HITRUST), a
leading security and privacy standards development and accreditation organization, Office 365 is certified to the
objectives specified in the NIST CSF.
UK Government G-Cloud. The UK Government G-Cloud is a cloud computing certification for services used by
government entities in the United Kingdom. Azure has received official accreditation from the UK Government
Pan Government Accreditor.
Economies of scale
Economies of scale is the ability to do things more efficiently or at a lower-cost per unit when operating at a larger scale.
This cost advantage is an important benefit in cloud computing.
Cloud providers such as Microsoft, Google, and Amazon are large businesses leveraging the benefits of economies of
scale. These providers can then pass the savings on to their customers.
These savings are apparent to end users in a number of ways, one of which is the ability to acquire hardware at a lower
cost. Cloud providers can also make deals with local governments and utilities to get tax savings, lowering the price of
power, cooling, and high-speed network connectivity between sites. Cloud providers are then able to pass on these
benefits to end users in the form of lower prices than what you could achieve on your own.
Graph shows costs versus time, with time on the horizontal axis. Lines are plotted for demand prediction, actual
demand costs, capital expenditure costs, and auto scaled costs. The demand prediction goes up linearly over
time. Actual costs form an increasing sine wave style plotting. Capital expenditure costs go up in a stairstep
shape as infrustructure is added to meet exceeded actual demand. Auto scaled costs nearly align to the sine
wave style curve of the actual demand.
With the OpEx model, companies wanting to try a new product or service don't need to invest in equipment. Instead,
they pay as much or as little for the infrastructure as required.
OpEx is particularly appealing if the demand fluctuates or is unknown. Cloud services are often said to be agile. Cloud
agility is the ability to rapidly change an IT infrastructure to adapt to the evolving needs of the business. For example, if
your service peaks one month, you can scale to demand and pay a larger bill for the month. If the following month the
demand drops, you can reduce the used resources and be charged less. This agility lets you manage your costs
dynamically, optimizing spending as requirements change.
Public cloud
This is the most common deployment model. In this case, you have no local hardware to manage or keep up-to-date –
everything runs on your cloud provider's hardware. In some cases, you can save additional costs by sharing computing
resources with other cloud users.
Businesses can use multiple public cloud providers of varying scale. Microsoft Azure is an example of a public cloud
provider.
Advantages
High scalability/agility – you don't have to buy a new server in order to scale
Pay-as-you-go pricing – you pay only for what you use, no CapEx costs
You're not responsible for maintenance or updates of the hardware
Minimal technical knowledge to set up and use - you can leverage the skills and expertise of the cloud provider
to ensure workloads are secure, safe, and highly available
A common use case scenario is deploying a web application or a blog site on hardware and resources that are owned by
a cloud provider. Using a public cloud in this scenario allows cloud users to get their website or blog up quickly, and then
focus on maintaining the site without having to worry about purchasing, managing or maintaining the hardware on
which it runs.
Disadvantages
Not all scenarios fit the public cloud. Here are some disadvantages to think about:
There may be specific security requirements that cannot be met by using public cloud
There may be government policies, industry standards, or legal requirements which public clouds cannot meet
You don't own the hardware or services and cannot manage them as you may want to
Unique business requirements, such as having to maintain a legacy application might be hard to meet
Private cloud
In a private cloud, you create a cloud environment in your own datacenter and provide self-service access to compute
resources to users in your organization. This offers a simulation of a public cloud to your users, but you remain
completely responsible for the purchase and maintenance of the hardware and software services you provide.
Advantages
This approach has several advantages:
You can ensure the configuration can support any scenario or legacy application
You have control (and responsibility) over security
Private clouds can meet strict security, compliance, or legal requirements
Disadvantages
Some reasons teams move away from the private cloud are:
You have some initial CapEx costs and must purchase the hardware for startup and maintenance
Owning the equipment limits the agility - to scale you must buy, install, and setup new hardware
Private clouds require IT skills and expertise that's hard to come by
A use case scenario for a private cloud would be when an organization has data that cannot be put in the public cloud,
perhaps for legal reasons. An example scenario may be where government policy requires specific data to be kept in-
country or privately.
A private cloud can provide cloud functionality to external customers as well, or to specific internal departments such as
Accounting or Human Resources.
Hybrid cloud
A hybrid cloud combines public and private clouds, allowing you to run your applications in the most appropriate
location. For example, you could host a website in the public cloud and link it to a highly secure database hosted in your
private cloud (or on-premises datacenter).
This is helpful when you have some things that cannot be put in the cloud, maybe for legal reasons. For example, you
may have some specific pieces of data that cannot be exposed publicly (such as medical data) which needs to be held in
your private datacenter. Another example is one or more applications that run on old hardware that can't be updated. In
this case, you can keep the old system running locally, and connect it to the public cloud for authorization or storage.
Advantages
Some advantages of a hybrid cloud are:
You can keep any systems running and accessible that use out-of-date hardware or an out-of-date operating
system
You have flexibility with what you run locally versus in the cloud
You can take advantage of economies of scale from public cloud providers for services and resources where it's
cheaper, and then supplement with your own equipment when it's not
You can use your own equipment to meet security, compliance, or legacy scenarios where you need to
completely control the environment
Disadvantages
Some concerns you'll need to watch out for are:
It can be more expensive than selecting one deployment model since it involves some CapEx cost up front
It can be more complicated to set up and manage
Summary
Cloud computing is flexible and gives you the ability to choose how you want to deploy it. The cloud deployment model
you choose depends on your budget, and on your security, scalability, and maintenance needs.
Copy
First column, on-premises, shows all elements managed by you. Second, infrastructure as a service, moves virtualization,
servers, storage, and networking to the cloud provider. Third, platform as a service, moves runtime, middleware, and OS
to the cloud provider. And fourth, software as a service, moves all elements to the cloud provider, with applications and
data being the last elements moving.
IaaS requires the most user management of all the cloud services. The user is responsible for managing the
operating systems, data, and applications.
PaaS requires less user management. The cloud provider manages the operating systems, and the user is
responsible for the applications and data they run and store.
SaaS requires the least amount of management. The cloud provider is responsible for managing everything, and
the end user just uses the software.
Combine cloud services to fit your needs
IaaS, PaaS, and SaaS each contain different levels of managed services. You may easily use a combination of these types
of infrastructure. You could use Office 365 on your company's computers (SaaS), and in Azure, you could host your VMs
(IaaS) and use Azure SQL Database (PaaS) to store your data. With the cloud's flexibility, you can use any combination
that provides you with the maximum result.
Summary
3 minutes
In this module, you've learned about cloud computing, what it is and what its key characteristics are. Here are some of
the things you covered.
Different types of cloud models that are available and the considerations of using those different models.
Some of the key terms and concepts such as high availability, agility, elasticity, fault tolerance, and CapEx vs.
OpEx.
The different cloud services available, the benefits of using the different types, and the management
responsibilities under each service type.
Cloud models such as public, private and hybrid, and what the key characteristics of each model are.
The different types of cloud service available: IaaS, PaaS, and SaaS; what the key characteristics of each service
are and when you would choose one over the other.
Microsoft Azure
Azure is Microsoft's cloud computing platform. Azure provides over 100 services that enable you to do everything from
running your existing applications on virtual machines to exploring new software paradigms such as intelligent bots and
mixed reality.
Here are just a few kinds of services you'll find on Azure:
Compute services such as VMs and containers that can run your applications
Database services that provide both relational and NoSQL choices
Identity services that help you authenticate and protect your users
Networking services that connect your datacenter to the cloud, provide high availability or host your DNS
domain
Storage solutions that can accommodate massive amounts of both structured and unstructured data
AI and machine-learning services can analyze data, text, images, comprehend speech, and make predictions
using data — changing the world of agriculture, healthcare, and much more.
And many more!
Learn more
Stay on the Azure Fundamentals Learning Path to learn more about how Microsoft Azure can help you build more
secure, reliable, performant applications in the cloud.
In addition, here are some places to go to learn more about what we've covered today:
Cloud Computing Terms
What is Azure?
Azure compliance offerings
Azure Architecture Center
Overview of Azure compute options
************************************************************************************
Interested in the cloud, but aren't quite sure what it can do for you? This path is the
place to start.
For specific training for the AZ-900 certification and information on how to register for
the exam, see AZ900 Microsoft Azure Fundamentals Exam.