1) Service Models in Cloud Computing

Cloud Services are divided into three main categories:

• IaaS – Infrastructure as a Service
• PaaS – Platform as a Service
• SaaS – Software as a Service

IaaS (Infrastructure as a Service)

• IaaS stands for Infrastructure as a Service
• IaaS is a Virtual Infrastructure
• It is Used by network architects and system admins
• User controls:
  • Applications
  • Data
  • Runtime
  • Middleware
  • Operating System (OS)
• Requires technical knowledge
• Example: AWS (Amazon Web Services)

PaaS (Platform as a Service)

• PaaS stands for Platform as a Service
• PaaS is an app development platform
• It is Used by software developers
• User controls:
  • Applications
  • Data
• Requires some technical knowledge
• Example: Google App Engine

SaaS (Software as a Service)

• SaaS stands for Software as a Service
• It provides ready-to-use software over the internet
• It is Used by end-users
• User controls: Nothing
• No technical knowledge required
• Example: Gmail

2) Key Features and Services provided by AWS, Azure and Google Cloud

AWS:

• AWS stands for Amazon Web Services
• Key Features:
  • Cost Effectiveness:
    • Instead of buying external computer hardware or building data centers to store data, users can simply pay rent for storing the data in cloud servers.
    • If you use more, you pay more.
    • If you use less, you pay less.
  • Scalability:
    • The ability of a computing system to handle workloads by adjusting its performance and costs is called scalability.
    • Instead of upgrading the entire system, cloud systems allow you to add more servers to increase scalability.
  • Availability & Reliability:
    • Cloud systems store data at different locations around the world.
    • If one data center fails, the data is still safe in the cloud system, which makes it more reliable and highly available.
• Cloud Services:
  • EC2
  • S3
  • EBS
  • SQS
  • SimpleDB

Microsoft Azure:

• Key Features:
  • Works well with Microsoft tools
  • Provide communication between services
  • Load Balancing:
    • It distributes the workloads across multiple servers.
    • Load Balancing Algorithm is mainly of two types:
    • Static Load Balancing Algorithm
    • Dynamic Load Balancing Algorithm
• Cloud Services:
  • Live Service
  • .NET Service
  • SharePoint Service
  • SQL Azure
  • Azure Tables

Google Cloud:

• Key Features:
  • Can handle very large volumes of data
  • Scalability:
    • The ability of a computing system to handle workloads by adjusting its performance and costs is called scalability.
    • Instead of upgrading the entire system, cloud systems allow you to add more servers to increase scalability.
  • Availability & Reliability:
    • Cloud systems store data at different locations around the world.
    • If one data center fails, the data is still safe in the cloud system, which makes it more reliable and highly available.
• Cloud Services:
  • Gmail
  • Google Docs
  • Google Search Engine

3) Languages, Frameworks, and Development Tools supported by AWS and Azure

4) Networking Options and Capabilities in Public Cloud Platforms

i) Virtual Networking:

• It helps you to create a private network in the cloud
• You can choose your own IP Addresses
• Both AWS and Microsoft Azure provide Virtual Networking

ii) Load Balancing:

• It distributes the workloads across multiple servers.
• Load Balancing Algorithm is mainly of two types:
  • Static Load Balancing Algorithm
  • Dynamic Load Balancing Algorithm

iii) VPN:

• VPN stands for Virtual Private Network
• Cloud Platforms allow you to connect your data centre to the cloud by using this VPN Connection
• Both AWS and Microsoft Azure provide VPN connections

iv) CDN:

• CDN stands for Content Delivery Network
• CDN helps to deliver the content faster to the user
• Both AWS and Microsoft Azure provide CDN Services

v) DNS:

• DNS stands for Domain Name System
• Domain Name System manages the domain names
• Both AWS and Microsoft Azure provide DNS Services

5) Security Measures and Compliance Certifications in Public Cloud Platforms

Security Measures:

• Data Encryption:
  • The process of encrypting the data from plaintext to ciphertext is called as Data Encryption.
  • Standard Encryption Algorithm:
    • AES Algorithm
    • TLS/SSL Algorithm
• IAM:
  • IAM stands for Identity and Access Management
  • It ensures only Authorized users can access the data and perform actions.
  • AWS uses AWS IAM
  • Microsoft Azure uses Azure AD
• Threat detection:
  • They send alerts when something unusual or suspicious activity is happening
  • Machine Learning is used to detect the threat and stop the attack before it causes damage
• Backup & Recovery:
  • Cloud systems store data at different locations around the world.
  • If one data center fails, the data is still safe in the cloud system, which makes it more reliable and highly available
  • AWS uses S3
  • Microsoft Azure uses Azure Backup
  • Google Cloud uses Google Cloud Storage

Compliance Certifications:

• AWS - ISO 27001, GDPR, HIPAA, SOC 1/2/3
• Microsoft Azure - ISO 27001, GDPR, HIPAA, FedRAMP
• Google Cloud - ISO 27001, GDPR, HIPAA, SOC 2

6) Authentication and Access Control in AWS and Azure

Authentication in AWS:

• AWS uses IAM to authenticate the users
• IAM stands for Identity and Access Management
• It ensures only authorized users can access the data and perform actions
• Users: You can create different users for each person
• Groups: Helps manage permissions for many users at once
• MFA:
  • MFA stands for Multi-Factor Authentication
  • Provides an extra layer of security

Access Control in AWS:

• IAM Policies: Rules that define what actions users, groups, and roles can perform
• Policies are used in:
  • Users
  • Groups
  • Roles
• Policies are written in JSON format

Authentication in Azure:

• Azure uses Azure AD to authenticate the users
• Azure AD stands for Azure Active Directory
• It ensures only authorized users can access the data and perform actions
• Azure AD acts like a central login system for Microsoft services
• SSO:
  • SSO stands for Single Sign-On
  • User can log in once and get access to multiple Microsoft services

Access Control in Azure:

• Azure uses RBAC (Role-Based Access Control)
• Types of Roles:
  • Owner
  • Contributor
  • Reader
• Access can be controlled based on:
  • Location
  • Device
  • Time of login

7) SOA – Service Oriented Architecture

SOA stands for Service Oriented Architecture

• SOA is a way to build software using small parts called Services
• Each service does one job and can be reused in other programs
• There are two major roles in SOA:
  • Service Provider – Creates and publishes services
  • Service Consumer – Finds and uses services

SOA Roles Diagram:

Components of SOA:

8) Difference Between SOA and Traditional Software Architectures