Models of cloud computing (ITSAP.50.111)

Cloud service providers (CSPs) offer 3 service models and 4 deployment models. Service models provide customers with options to access a CSP’s services, while deployment models offer customers different ways of using them. This publication provides an overview of the different models of cloud computing Cloud computingThe use of remote servers hosted on the Internet. Cloud computing allows users to access a shared pool of computing resources (such as networks, servers, applications, or services) on demand and from anywhere. Users access these resources via a computer network instead of storing and maintaining all resources on their local computer. , allowing you to choose the best option for your organization.

On this page

Service models

Cloud computing has changed how organizations and individuals use technology. The service models offered to customers define the specific types of services provided by CSPs.

Software as a Service

Software as a Service (SaaS) is a software distribution model in which customers purchase a service to use applications hosted by a CSP. The service is made available for use over the Internet. Some well-known examples of SaaS include Google Workspace and Microsoft 365.

SaaS is a popular service model as it:

  • allows access to software from any device with an Internet connection
  • includes CSP upkeep of the software

Platform as a Service

Platform as a Service (PaaS) provides developers with a cloud platform to build, deploy and manage applications without the complexity of maintaining the underlying infrastructure. This service model enables efficient application development through managed hosting environments. With PaaS, developers can focus on their application's functionality rather than its operation.

Popular PaaS examples include Microsoft Azure App Service and Salesforce’s Force.com. These platforms streamline the development and deployment processes, enabling faster and more secure application delivery.

PaaS providers perform the following security actions to better secure applications against emerging threats:

  • Security updates
  • Compliance monitoring
  • Threat detection

Infrastructure as a Service

Infrastructure as a Service (IaaS) provides scalable computing resources like servers, storage and networking over the Internet. This service model enables users to develop, run and manage applications on the CSP's hardware. Examples of IaaS include Amazon Web Services (AWS) offerings like EC2 and S3.

Deployment models

Deployment models describe the access, size, and ownership of the cloud infrastructure.

Public cloud

The public cloud model offers services over the Internet, making the CSP's infrastructure and resources accessible to anyone. It's managed externally and is separated from the customer's in-house IT infrastructure.

Private cloud

The private cloud model provides a dedicated environment for a single entity, ensuring exclusive access and control over the infrastructure. It offers enhanced security and privacy, as it can be hosted and managed either onsite by the customer or offsite by the CSP. The private cloud is tailored to meet the needs of the customer, allowing greater control over computational resources and customized security measures. This model is ideal for organizations that require strict security and data privacy or that have specific regulatory compliance needs.

Community cloud

The community cloud model is a dedicated environment shared among multiple organizations with similar privacy, security and regulatory needs. It allows organizations to utilize a common infrastructure.

Hybrid cloud

The hybrid cloud combines different cloud types (public, private or community), while maintaining their distinct characteristics. These cloud types are interconnected for seamless data and application mobility. Each member cloud remains a unique entity but is bound to the others through standardized or proprietary technology. This allows applications and data to be transferred easily among members.

Learn more

For more information on the different service and deployment models, see the National Institute of Standards and Technology (NIST) Special Publication 800-145 The NIST Definition of Cloud Computing.

To learn more about cloud computing, read the following publications:

Date modified: