Cloud computing delivers compute, storage, and network as on-demand services over a network. The textbook covers the NIST definition, deployment models, and the public-private-hybrid spectrum.
6.1 Fundamentals of Cloud Computing
The NIST 800-145 definition - five essential characteristics
#
Characteristic
What it means
1
On-demand self-service
Provision via portal or API
2
Broad network access
Reachable via standard networks
3
Resource pooling
Multi-tenancy with isolation
4
Rapid elasticity
Scale up and down quickly
5
Measured service
Pay-per-use; metered
If you have all five, it is cloud. If you have a server with web-based provisioning, you have a portal, not a cloud.
Deployment models
Model
Description
Example
Public
Shared multi-tenant
AWS, Azure, GCP, OCI
Private
Dedicated to one organisation
OpenStack, vSphere
Hybrid
Private + public; bursting + sovereignty
Many PH banks
Community
Shared by an industry (govcloud)
Public sector
Multi
Multiple public clouds
Avoid lock-in
Service models (covered in 6.2)
Model
You manage
Provider manages
IaaS
OS + app + data
Hardware + network
PaaS
App + data + config
Up to runtime
SaaS
Data + config only
Whole application
Worked example - small bank workload split
Workload
Where
Mobile banking front-end
Public cloud (AWS / Azure SEA)
Core banking
Private DC (BSP-supervised)
Productivity (M365)
SaaS
CRM (Salesforce)
SaaS
Replication on-prem -> public
Hybrid: IPsec + Direct Link
Common pitfalls
Pitfall
Result
Cloud-as-cheap-on-prem
Pay for unused capacity 24x7
No tagging / showback
Finance cannot allocate cost
Single-cloud lock-in
Egress fees explode at exit
Sovereignty ignored
RA 10173 + BSP enforcement risk
Mentor’s tip: NIST five characteristics is the test. Public + private + SaaS is the realistic shape for most Philippine enterprises. Tagging, sovereignty, and exit cost are the EA-level decisions you make before the first workload moves.
Discussion
Loading…