Untitled Quiz

Cloud Computing Architecture Layers and Model

• Cloud computing architecture is the collective term for all components used in cloud computing. It's usually divided into three main components: a front end for user interaction, a back end for data storage and computation, and a network to connect them.
• A cloud-based delivery model provides seamless user access to the system.
• Computing layers manage specific parts of a cloud solution, abstracting deeper layers and underlying infrastructure.

Application Layer

• This layer handles the front end and user experience.
• The platform layer sits beneath, providing tools for developers to build and manage solutions.

Infrastructure Layer

• This layer manages the back-end operations (sometimes split into storage and compute layers).
• It manages the back-end operations of the solution.
• It is sometimes split into storage and compute layers.
• The data center layer handles networking with the underlying infrastructure and hardware.

Network Layer

• The network connects the front-end and back-end components.
• It connects the front-end (user interface) to the back-end (operations).
• Cloud solutions often use regular internet connections, some use intranets (private clouds).
• Multi-cloud solutions rely on an intercloud network.

Back-End Platform

• The back end does all the heavy lifting, with components like applications, services for accessing infrastructure/storage, and management/security systems within the architecture.

Cloud Runtime

• The runtime performs computations and executes code.

Storage

• Cloud storage is used by solutions for storing data.

Infrastructure

• The underlying infrastructure is typically in the form of remote servers in data centers.

Management

• Systems administrators and developers use the management tools to monitor, customize and optimize the cloud architecture.

Security

• Built-in security measures are needed to prevent unauthorized access and data leaks.
• Cloud computing usually exposes the solution to the public internet.

Cloud Architecture Layers

• Cloud architecture is divided into layers, each handling specific components.
• The layers represent levels of abstraction and purpose.
• Key layers include application, platform, and infrastructure (which can be further broken down into storage, compute, network, and physical layers).

Application Layer (Functionality)

• This layer is the outermost abstraction, often with a user interface.
• In SaaS solutions, it's typically the only back-end layer accessible to clients.

Platform Layer (Functionality)

• This layer sits beneath the application layer.
• It provides tools and environments for developers to test and change front-end and back-end application functionality.
• PaaS solutions offer access to this layer.

Infrastructure Layer (Functionality)

• This layer manages allocation of storage and compute resources for the platform layer.
• The storage layer gives users access to cloud storage resources (often apparently limitless).
• The compute layer provides virtual machines with the necessary processing power.
• The data center layer contains the underlying network connections and physical hardware.

Deployment Models

• Types include public, private, hybrid, and multi-cloud.
• Public clouds are maintained by third-party providers, often with pay-as-you-go or subscription models, and offering cost-effectiveness and flexibility (but with less control).
• Private clouds are either privately owned or leased, giving clients more control and customization.
• Hybrid solutions combine public and private cloud services.
• Multi-cloud solutions utilize multiple cloud providers.

Architecture based on Deployment Model

• Public
• Private
• Hybrid
• Multi-cloud

Cloud Architecture Service Models

• IaaS (Infrastructure as a Service):
  • Provides direct access to infrastructure layer.
  • User is responsible for securing applications and data.
  • Services may be offered as pay-as-you-go options or fixed-fee accounts.
• PaaS (Platform as a Service):
  • Simplifies architecture by abstracting infrastructure layers.
  • Developers can concentrate on applications without managing infrastructure components.
  • Some services provide access to a marketplace of third-party services (APIs for e.g.).
• SaaS (Software as a Service):
  • This is the most abstracted form, offering a user interface that is connected to the application layer, hiding underlying infrastructure details.
  • Service providers manage the hardware, software, security and availability of apps.
  • Users generally access through web browsers or dedicated software.

Common SaaS scenarios

• Many services are free for personal use
• Business services can be purchased through subscriptions

Multi-Tenancy Model

• A single software architecture accommodating multiple tenants.
• Cloud providers manage hardware/software.
• Customers customize specific aspects of the service.
• Typical layouts with single tenants versus multi-tenants are shown.

Automated Provisioning

• Users can access SaaS applications from anywhere (easy access).
• Automated management is a key part of SaaS models.
• Some providers (like Microsoft) use APIs to enable automated provisioning of access to services.
• De-provisioning is also important in SaaS.

Single Sign-On (SSO)

• A single login provides access to multiple SaaS applications.
• Integrating with existing enterprise identity systems and reducing overhead cost is the main benefit.

Subscription-Based Billing

• Subscription-based SaaS services offer predictable and simple pricing.
• Users pay based on usage or a fixed subscription model.

High Availability

• SaaS applications offer availability through internet-based access.
• They're based around multiple tenants, requiring high availability and no service interruptions.

Elastic Infrastructure

• Supports scaling (up and down) of resources based on need or demand.
• Flexibility is crucial to meet fluctuations in resource demands.
• The underlying infrastructure resources are managed by the cloud provider (or managed by the vendor).

Data Security

• Security is essential to protect user data and business information.
• Security is crucial to protect user data and business information.
• Crucial for multi-tenant setups with encrypted storage for each customer
• Cloud providers use frameworks for securing and managing encryption keys.
• Cloud service brokers such as CASB are used to manage risk (e.g., based-access controls).

Application Security

• SaaS applications must address vulnerabilities from OWASP and SAN-identified risks.
• Strong session management and controls can mitigate unauthorized user access.
• Multi-factor authentication is used to enhance security.
• SaaS applications need to protect themselves from buffer overflow attacks (e.g., exploiting loopholes in operating systems).
• A CASB integration helps gain customer confidence.

Configuration and Customization

• Users can often customize a SaaS application based on their configuration parameters.
• Users customize elements (individual page layouts) rather than changing the entire interface.

Open Integration Protocols

• SaaS apps commonly offer APIs for interoperability with external systems and services.
• APIs and integration protocols allow data exchange between different applications, particularly when these applications are external to the business (e.g., with accounting systems).

Accelerated Feature Delivery

• SaaS apps are usually frequently updated - compared to traditional applications.
• The agility that comes with the SaaS development and hosting model frequently leads to accelerated feature-delivery.

Advantages of SaaS

• Access to sophisticated applications, typically without upfront investment.
• Only pay for what's used.
• Typically using free client software, such as a browser.
• Easy to deploy and manage staff across different locations or roles.

What is PaaS?

• PaaS is a cloud platform where customers use cloud platform (hosting, hardware and software) without managing it themselves.
• The platform is offered by a vendor that is responsible for maintaining the platform.
• PaaS customers can pay either for user access/resources, or they can pay on a per-use basis. This varies according to the provider.

What is IaaS?

• An Infrastructure-as-a-Service cloud solution provides infrastructure (such as servers, networking, storage).
• Users can customize their setup, as well as their applications/software.
• IaaS uses a pay-as-you-go model.

Features of IaaS

• Resources virtualization.
• Scalability.
• Self-service provisioning.