[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cheat-sheet---en":3,"domain-info---en":3,"topic-info----en":3,"lesson-cloud-computing-fundamentals-cloud-services-and-architecture-cloud-service-models-iaas-vs-paas-vs-saas-en":4,"prev-cloud-computing-fundamentals-cloud-services-and-architecture-cloud-service-models-iaas-vs-paas-vs-saas-en":291,"next-cloud-computing-fundamentals-cloud-services-and-architecture-cloud-service-models-iaas-vs-paas-vs-saas-en":522},null,{"locked":5,"reason":3,"meta":6,"item":16},false,{"title":7,"description":8,"isFree":5,"estimatedMinutes":9,"difficulty":10,"learningObjectives":11},"IaaS vs. PaaS vs. SaaS","The full responsibility split across all 3 service models side by side, the keyword cues that identify each one in a scenario, and the classic trap that catches learners who assume moving up the stack always means an upgrade.",19,"intermediate",[12,13,14,15],"Compare the full responsibility split across IaaS, PaaS, and SaaS, layer by layer","Apply keyword cues to identify the correct service model in a scenario","Explain why moving up the stack trades control for convenience rather than simply improving","Evaluate a scenario against its constraints to select the service model that fits",{"id":17,"title":7,"body":18,"description":8,"difficulty":10,"estimatedMinutes":9,"extension":213,"infographics":214,"isFree":5,"learningObjectives":225,"meta":226,"navigation":227,"path":228,"quiz":229,"seo":288,"stem":289,"__hash__":290},"courses/courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/01-cloud-service-models/04-iaas-vs-paas-vs-saas.md",{"type":19,"value":20,"toc":201},"minimark",[21,26,30,34,117,122,125,129,132,136,139,174,178,181,184,187,191,194,198],[22,23,25],"h2",{"id":24},"naming-them-is-easy-telling-them-apart-is-the-actual-skill","Naming them is easy. Telling them apart is the actual skill",[27,28,29],"p",{},"You can now define IaaS, PaaS, and SaaS individually. That is not, on its own, a useful skill: almost nobody hands you a service and asks \"what is this?\" in isolation. What actually gets tested, on an exam and on the job, is a scenario with constraints, a team, a deadline, a compliance requirement, and the question of which of the 3 models fits it. That is where this lesson spends its effort.",[22,31,33],{"id":32},"the-full-stack-side-by-side","The full stack, side by side",[35,36,37,56],"table",{},[38,39,40],"thead",{},[41,42,43,47,50,53],"tr",{},[44,45,46],"th",{},"Layer",[44,48,49],{},"IaaS",[44,51,52],{},"PaaS",[44,54,55],{},"SaaS",[57,58,59,72,84,95,106],"tbody",{},[41,60,61,65,68,70],{},[62,63,64],"td",{},"Networking, servers, virtualization",[62,66,67],{},"Provider",[62,69,67],{},[62,71,67],{},[41,73,74,77,80,82],{},[62,75,76],{},"Operating system",[62,78,79],{},"You",[62,81,67],{},[62,83,67],{},[41,85,86,89,91,93],{},[62,87,88],{},"Runtime and middleware",[62,90,79],{},[62,92,67],{},[62,94,67],{},[41,96,97,100,102,104],{},[62,98,99],{},"Application code",[62,101,79],{},[62,103,79],{},[62,105,67],{},[41,107,108,111,113,115],{},[62,109,110],{},"Data and your own configuration",[62,112,79],{},[62,114,79],{},[62,116,79],{},[118,119],"infographic",{"alt":120,"slug":121},"A 3-column stack diagram comparing IaaS, PaaS, and SaaS, showing which layers the provider manages and which stay with the customer, with data and configuration always remaining the customer's responsibility.","iaas-vs-paas-vs-saas-responsibility-stack",[27,123,124],{},"Read the table by column instead of by row and the pattern is obvious: each step from IaaS to SaaS moves exactly one more layer from \"you\" to \"provider.\" Data and your own configuration are the only row that never moves, no matter which model you pick.",[22,126,128],{"id":127},"the-trap-this-is-a-tradeoff-not-a-ranking","The trap: this is a tradeoff, not a ranking",[27,130,131],{},"It is tempting to read that table left to right and conclude SaaS is simply the best model, since the provider does the most work. That conclusion is wrong, and it is exactly the trap an exam question sets. What SaaS gains in convenience, it spends in control. You cannot install a custom library on Gmail's servers, run your own code on Salesforce's infrastructure, or choose a different kernel version for Microsoft 365. IaaS gives you all of that control back, at the cost of doing the OS, runtime, and application management yourself. Neither end of the table is \"better.\" Each one fits a different set of constraints.",[22,133,135],{"id":134},"keyword-cues-for-scenarios","Keyword cues for scenarios",[27,137,138],{},"Exam scenarios rarely say \"IaaS\" or \"PaaS\" directly. They describe a constraint, and the constraint points at the model.",[35,140,141,151],{},[38,142,143],{},[41,144,145,148],{},[44,146,147],{},"The scenario says...",[44,149,150],{},"Points to",[57,152,153,160,167],{},[41,154,155,158],{},[62,156,157],{},"\"Full control of the operating system,\" \"specific kernel version,\" \"root access\"",[62,159,49],{},[41,161,162,165],{},[62,163,164],{},"\"Just deploy the code,\" \"no server management,\" \"focus on the application\"",[62,166,52],{},[41,168,169,172],{},[62,170,171],{},"\"No installation,\" \"use it out of the box,\" \"no developers on staff\"",[62,173,55],{},[22,175,177],{"id":176},"worked-example-2-scenarios-2-answers","Worked example: 2 scenarios, 2 answers",[27,179,180],{},"A 12-person sales team needs a working CRM by next week and has no developers on staff to build one. Nothing about this scenario mentions code, infrastructure, or customization beyond configuration. That absence is the cue: this is a SaaS scenario, and a tool like Salesforce is the fit, not something a team builds from scratch.",[27,182,183],{},"Now change the constraint. A fintech company operates under a regulation that requires it to control the exact OS patch level running on every server, down to the kernel version, and to apply security patches on its own schedule rather than a vendor's. PaaS and SaaS both take the operating system out of the customer's hands, which is precisely the control this regulation demands. That single requirement rules out both, and leaves IaaS as the only model that fits.",[27,185,186],{},"Same underlying question in both cases: how far up the stack does this scenario require you to reach. The sales team's answer is \"not at all.\" The fintech company's answer is \"all the way down to the kernel.\"",[22,188,190],{"id":189},"the-connection-to-shared-responsibility","The connection to shared responsibility",[27,192,193],{},"This same layer-by-layer split is the foundation of the shared responsibility model, covered in full in this course's Security and Reliability domain. What you are learning here, which layer belongs to you and which belongs to the provider, is the exact question that model answers for security specifically. You are not learning a new idea there. You are applying this one to a new question.",[22,195,197],{"id":196},"where-this-leaves-you","Where this leaves you",[27,199,200],{},"One question separates these 3 models in any scenario: how far up the stack does the situation require the provider to go. Root access and kernel control pull you toward IaaS. A focus on shipping code with no server management pulls you toward PaaS. No installation and no in-house developers pulls you toward SaaS. The next topic in this domain leaves the service models behind and moves to the building blocks every one of them runs on: regions, compute, storage, databases, and networking.",{"title":202,"searchDepth":203,"depth":203,"links":204},"",3,[205,207,208,209,210,211,212],{"id":24,"depth":206,"text":25},2,{"id":32,"depth":206,"text":33},{"id":127,"depth":206,"text":128},{"id":134,"depth":206,"text":135},{"id":176,"depth":206,"text":177},{"id":189,"depth":206,"text":190},{"id":196,"depth":206,"text":197},"md",[215],{"slug":121,"concept":216,"style":217,"aspectRatio":218,"labels":219},"A 3-column stack diagram, one column per service model (IaaS, PaaS, SaaS), each built from the same layers stacked bottom to top: networking and servers, virtualization, operating system, runtime and middleware, application code, and data. In each column, the layers the provider manages are shaded one color and the layers the customer manages are shaded a contrasting second color. Moving left to right from IaaS to SaaS, the provider-shaded portion grows taller and the customer-shaded portion shrinks, visually showing the responsibility handoff. A footer strip carries the tradeoff takeaway.","diagram","16:9",[220,221,222,223,224],"IaaS: Provider manages networking, servers, and virtualization. You manage the OS, runtime, and app.","PaaS: Provider also takes over the OS and runtime. You manage the app code and data.","SaaS: Provider manages the entire application. You manage only your data and settings.","Data and access are always yours, in every model.","Moving right trades control for convenience. It is not an upgrade, it is a tradeoff.",[12,13,14,15],{},true,"/courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/01-cloud-service-models/04-iaas-vs-paas-vs-saas",{"passingScore":230,"questions":231},70,[232,238,243,249,255,265,273,281],{"question":233,"type":234,"options":235,"correctAnswer":55,"explanation":237},"A 12-person sales team needs a working CRM next week and has no developers on staff. Which service model fits best?","single",[52,55,49,236],"None, they must hire developers first","With no developers on staff and a working tool needed fast, SaaS fits: a complete application like Salesforce is ready to configure and use immediately. IaaS and PaaS both assume someone on the team is writing or deploying code, which this scenario rules out.",{"question":239,"type":234,"options":240,"correctAnswer":49,"explanation":242},"A fintech company is legally required to control the exact OS kernel version on every server it runs. Which service model is the only one that satisfies this requirement?",[55,52,241,49],"Either PaaS or SaaS, since both are managed by the provider","Only IaaS leaves the operating system, including the kernel version, in the customer's hands. PaaS and SaaS both move the OS to the provider, which is exactly the control this regulation requires the company to keep for itself.",{"question":244,"type":234,"options":245,"correctAnswer":247,"explanation":248},"Moving from IaaS toward SaaS is always an improvement, since the provider takes on more of the work.",[246,247],"True","False","What SaaS gains in convenience, it spends in control: you cannot install custom code on Gmail's servers or choose Salesforce's kernel version. Each model fits different constraints, so moving up the stack is a tradeoff, not a straightforward upgrade.",{"question":250,"type":234,"options":251,"correctAnswer":110,"explanation":254},"According to the responsibility split, which layer is the customer responsible for in every one of the 3 service models, without exception?",[110,252,99,253],"The operating system","Virtualization","Data and your own configuration are the one row that never moves across IaaS, PaaS, or SaaS. The operating system and application code shift to the provider at different points in the stack, and virtualization belongs to the provider in all 3 models.",{"question":256,"type":257,"options":258,"correctAnswers":263,"explanation":264},"Which of the following phrases in a scenario would point toward PaaS rather than IaaS or SaaS? (Select all that apply.)","multiple",[259,260,261,262],"Full control of the operating system","Focus on deploying application code, no server management","No installation required, just log in and use it","The team wants to write and ship code without managing infrastructure",[260,262],"PaaS scenarios describe a team writing and shipping their own code while the platform handles servers and the OS. \"Full control of the operating system\" points to IaaS, and \"no installation required\" points to SaaS, since neither involves the customer deploying their own application code.",{"question":266,"type":234,"options":267,"correctAnswer":270,"explanation":272},"Why can a company not simply say SaaS is the best service model for every situation?",[268,269,270,271],"SaaS is always more expensive than IaaS","SaaS is technically inferior to IaaS and PaaS","SaaS trades away control that some scenarios genuinely require, such as running custom code or controlling the OS","SaaS does not actually exist as a real deployment option","SaaS is not inferior or superior to the other models, it is a different point on the same control-versus-convenience tradeoff. A scenario that needs custom code or OS-level control rules SaaS out regardless of how convenient it otherwise is.",{"question":274,"type":234,"options":275,"correctAnswer":277,"explanation":280},"Which service model does the shared responsibility model, covered later in this course, build directly on?",[276,277,278,279],"A completely separate framework unrelated to service models","The same layer-by-layer split between customer and provider covered in this topic","Only the SaaS model","Only the IaaS model","The shared responsibility model applies the same customer-versus-provider split you just learned specifically to security. It is not a new framework, it is this one, pointed at a specific question.",{"question":282,"type":234,"options":283,"correctAnswer":286,"explanation":287},"A team deploys an application through a PaaS product. Compared to IaaS, which additional layer does the provider now manage?",[99,284,285,286],"Data","Networking","The operating system and runtime","The operating system and runtime are the layers that move from customer to provider between IaaS and PaaS. Application code and data stay with the customer in both models, and networking is already the provider's job under IaaS.",{"title":7,"description":8},"courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/01-cloud-service-models/04-iaas-vs-paas-vs-saas","aqcJIr7pB2vb9kCvpVwqkButhpb5OOlPapjCzJzT8Z0",{"locked":5,"reason":3,"meta":292,"item":302},{"title":293,"description":294,"isFree":5,"estimatedMinutes":295,"difficulty":296,"learningObjectives":297},"Software as a Service (SaaS)","The service model where the provider runs the entire application and you just use it, from Gmail to Salesforce to Slack, and the multi-tenant architecture that makes running one application for millions of customers affordable.",14,"beginner",[298,299,300,301],"Define Software as a Service (SaaS) using the NIST framework","Explain multi-tenancy and why it makes SaaS pricing possible","Identify what a SaaS customer can and cannot configure","Distinguish genuine SaaS from a locally installed, subscription-priced application",{"id":303,"title":293,"body":304,"description":294,"difficulty":296,"estimatedMinutes":295,"extension":213,"infographics":469,"isFree":5,"learningObjectives":470,"meta":471,"navigation":227,"path":472,"quiz":473,"seo":519,"stem":520,"__hash__":521},"courses/courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/01-cloud-service-models/03-software-as-a-service.md",{"type":19,"value":305,"toc":460},[306,310,313,317,320,323,327,385,388,392,395,398,402,448,452,455,457],[22,307,309],{"id":308},"you-already-used-saas-today","You already used SaaS today",[27,311,312],{},"You did not install a mail server this morning. You did not patch an operating system, provision a virtual machine, or write a line of code. You typed a password into a browser, and your inbox was already there, running on hardware you have never seen, maintained by a team you have never met. That is Software as a Service, and unlike the last 2 lessons, you almost certainly used it before you finished breakfast.",[22,314,316],{"id":315},"the-nist-definition-in-practice","The NIST definition, in practice",[27,318,319],{},"NIST defines SaaS as the capability to \"use the provider's applications running on a cloud infrastructure,\" reachable \"through either a thin client interface, such as a web browser... or a program interface.\" The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.",[27,321,322],{},"That exception is doing real work in the sentence. You cannot install a plugin on Gmail's servers or change which programming language Salesforce is written in. You can set up an email filter or customize a Salesforce dashboard. The application itself, and everything beneath it, belongs entirely to the provider.",[22,324,326],{"id":325},"who-manages-what-complete","Who manages what, complete",[35,328,329,341],{},[38,330,331],{},[41,332,333,335,337,339],{},[44,334,46],{},[44,336,49],{},[44,338,52],{},[44,340,55],{},[57,342,343,353,364,374],{},[41,344,345,347,349,351],{},[62,346,64],{},[62,348,67],{},[62,350,67],{},[62,352,67],{},[41,354,355,358,360,362],{},[62,356,357],{},"Operating system, runtime",[62,359,79],{},[62,361,67],{},[62,363,67],{},[41,365,366,368,370,372],{},[62,367,99],{},[62,369,79],{},[62,371,79],{},[62,373,67],{},[41,375,376,379,381,383],{},[62,377,378],{},"Data and user configuration",[62,380,79],{},[62,382,79],{},[62,384,79],{},[27,386,387],{},"Data and your own configuration are the one row that never moves. Every other layer eventually crosses to the provider by the time you reach SaaS.",[22,389,391],{"id":390},"multi-tenancy-the-architecture-that-makes-this-affordable","Multi-tenancy: the architecture that makes this affordable",[27,393,394],{},"A SaaS vendor is not running a separate copy of Gmail for each of its billions of users. Gartner describes multitenancy as software where a single instance serves multiple customers, logically isolated from each other but physically sharing the same infrastructure underneath. Your inbox and a stranger's inbox run on the same application instance, the same servers, with the provider's software guaranteeing neither of you can see the other's data.",[27,396,397],{},"That sharing is exactly what makes SaaS pricing work. Spreading one application instance across millions of tenants is dramatically cheaper per customer than running a dedicated copy for each one, which is why a SaaS subscription usually costs a small fraction of what building and hosting the same application yourself would.",[22,399,401],{"id":400},"real-products-by-category","Real products, by category",[35,403,404,414],{},[38,405,406],{},[41,407,408,411],{},[44,409,410],{},"Category",[44,412,413],{},"Examples",[57,415,416,424,432,440],{},[41,417,418,421],{},[62,419,420],{},"Email and productivity",[62,422,423],{},"Gmail, Microsoft 365",[41,425,426,429],{},[62,427,428],{},"Customer relationship management",[62,430,431],{},"Salesforce",[41,433,434,437],{},[62,435,436],{},"Team communication",[62,438,439],{},"Slack, Zoom",[41,441,442,445],{},[62,443,444],{},"File storage and collaboration",[62,446,447],{},"Dropbox, Google Workspace",[22,449,451],{"id":450},"the-misconception-a-subscription-is-not-the-same-thing-as-saas","The misconception: a subscription is not the same thing as SaaS",[27,453,454],{},"It is tempting to call anything billed monthly \"SaaS.\" It is not. A boxed application you install on your own laptop, and personally keep updated, does not become SaaS just because its license renews every month. The test is not the billing model, it is who runs it and where. If the provider hosts, patches, and operates the application on infrastructure you never touch, and you reach it through a browser or an API, it is SaaS. If you installed it yourself and you are the one applying its updates, it is not, no matter how the invoice arrives.",[22,456,197],{"id":196},[27,458,459],{},"SaaS is the end of the handoff that started with IaaS: the provider now runs the operating system, the runtime, and the application itself, and the only thing left on your side of the line is your data and your own settings. You have now met all 3 service models individually. The next lesson puts them side by side and gives you the boundary an exam actually tests: not what each one is, but which one a scenario is describing.",{"title":202,"searchDepth":203,"depth":203,"links":461},[462,463,464,465,466,467,468],{"id":308,"depth":206,"text":309},{"id":315,"depth":206,"text":316},{"id":325,"depth":206,"text":326},{"id":390,"depth":206,"text":391},{"id":400,"depth":206,"text":401},{"id":450,"depth":206,"text":451},{"id":196,"depth":206,"text":197},[],[298,299,300,301],{},"/courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/01-cloud-service-models/03-software-as-a-service",{"passingScore":230,"questions":474},[475,483,487,495,503,511],{"question":476,"type":234,"options":477,"correctAnswer":481,"explanation":482},"Which of these best matches the NIST definition of SaaS?",[478,479,480,481],"The consumer provisions virtual machines and manages the operating system","The consumer deploys their own code onto infrastructure they do not manage","The consumer builds and hosts their own web application","The consumer uses the provider's application, reached through a browser or API, without managing anything underneath it","SaaS means the provider runs the entire application, network, servers, OS, and the application itself, and the consumer just uses it through a thin client like a browser or a program interface. The first 2 options describe IaaS and PaaS, and the third describes building software yourself, not consuming it as a service.",{"question":484,"type":234,"options":485,"correctAnswer":247,"explanation":486},"According to NIST, a SaaS customer has no ability to configure anything about the application, not even their own account settings.",[246,247],"NIST's SaaS definition specifically carves out an exception for limited user-specific application configuration settings, such as setting up an email filter or customizing a dashboard. What the customer cannot do is change the underlying infrastructure or the application's core code.",{"question":488,"type":234,"options":489,"correctAnswer":490,"explanation":494},"In a multi-tenant SaaS application, how are different customers' data typically kept separate?",[490,491,492,493],"Customers share the same application instance and underlying infrastructure, but the provider logically isolates each tenant's data","Each customer gets an entirely separate copy of the application running on dedicated hardware","Data is not actually separated, all customers can see all data","Each customer must build their own isolation layer","Multitenancy means many customers share one application instance and its infrastructure, with the provider's software guaranteeing logical isolation between them even though they are physically integrated. A dedicated copy per customer describes single-tenant architecture, which is the more expensive alternative SaaS providers generally avoid.",{"question":496,"type":257,"options":497,"correctAnswers":501,"explanation":502},"Which of the following are genuinely SaaS products? (Select all that apply.)",[431,498,499,500],"AWS EC2","Gmail","Google App Engine",[431,499],"Salesforce and Gmail are complete applications the provider runs entirely, which you access through a browser without managing anything underneath, the SaaS pattern. AWS EC2 hands you a virtual machine to manage yourself, IaaS, and Google App Engine runs your own code for you, PaaS, so neither qualifies as SaaS.",{"question":504,"type":234,"options":505,"correctAnswer":508,"explanation":510},"A company sells a desktop application under a monthly subscription. Customers install it themselves on their own laptops and are responsible for applying its updates. Is this SaaS?",[506,507,508,509],"Yes, because it is billed monthly like a subscription","Yes, because all modern software subscriptions count as SaaS","No, because the customer installs and maintains it themselves rather than the provider hosting and running it","No, because SaaS must always be free","The test for SaaS is not the billing model, it is who runs the application and where. Software the customer installs and personally updates on their own device is not SaaS, no matter how the invoice arrives, because the provider never hosts or operates it.",{"question":512,"type":234,"options":513,"correctAnswer":515,"explanation":518},"Why does multi-tenancy typically make SaaS pricing cheaper per customer than a dedicated, self-hosted version of the same application?",[514,515,516,517],"It doesn't, self-hosting is always cheaper","One application instance and its infrastructure are shared across many customers instead of duplicated for each one","SaaS vendors do not have to pay for servers at all","Multi-tenancy has nothing to do with pricing","Spreading one application instance across millions of tenants is dramatically cheaper per customer than running a dedicated copy for each one, which is exactly why SaaS subscriptions usually undercut the cost of building and hosting the same application privately. SaaS vendors still pay for servers, they just divide that cost across every tenant sharing them.",{"title":293,"description":294},"courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/01-cloud-service-models/03-software-as-a-service","Bz80kzlz2lf2a_WX0U_WjpUYEdYVwZpvHa09s8CmK5E",{"locked":5,"reason":3,"meta":523,"item":532},{"title":524,"description":525,"isFree":227,"estimatedMinutes":526,"difficulty":296,"learningObjectives":527},"Regions and Availability Zones","How cloud providers organize their global infrastructure into regions and availability zones, and why that structure is the reason a well-built cloud application can survive a data center fire.",16,[528,529,530,531],"Define what a region and an availability zone are and how they relate to each other","Explain why providers physically isolate availability zones from each other","Apply availability zone redundancy to explain why spreading an application across zones improves uptime","Compare how AWS, Azure, and Google Cloud name and structure their regions and zones",{"id":533,"title":524,"body":534,"description":525,"difficulty":296,"estimatedMinutes":526,"extension":213,"infographics":665,"isFree":227,"learningObjectives":673,"meta":674,"navigation":227,"path":675,"quiz":676,"seo":731,"stem":732,"__hash__":733},"courses/courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/02-core-cloud-services/01-regions-and-availability-zones.md",{"type":19,"value":535,"toc":656},[536,540,543,547,550,553,557,560,563,567,570,573,577,580,584,588,591,648,651,653],[22,537,539],{"id":538},"the-data-center-that-never-fails-does-not-exist","The data center that never fails does not exist",[27,541,542],{},"Picture an online store's servers running out of one building. That building loses power during the year's biggest sales event, and every server in it goes dark at the same moment. It does not matter how good the code is or how much traffic the servers could otherwise handle: the store is offline until someone restores power in that one place. Cloud providers face the exact same physics as that building. A single data center can still catch fire, flood, or lose power, no matter whose logo is on the door. What providers built instead is a structure that keeps one location's bad day from becoming everyone's bad day: regions and Availability Zones.",[22,544,546],{"id":545},"regions-where-in-the-world-your-resources-live","Regions: where in the world your resources live",[27,548,549],{},"A Region is a separate geographic area, for example US East (N. Virginia) or Europe (Ireland). When you launch a virtual machine or create a storage bucket, you choose a Region, and that choice decides which country or continent physically holds your data and how far network traffic has to travel to reach your users. AWS alone operates around 39 Regions worldwide, each one designed to be fully isolated from every other Region so that a failure in one has no way to reach the others.",[27,551,552],{},"Regions exist for 2 practical reasons: latency and law. A user in Singapore gets faster responses from a Singapore Region than from one in Virginia, and some industries and governments require that certain data never leave a specific country's borders. Picking a Region is your first infrastructure decision on any cloud platform, and it is usually driven by exactly those 2 constraints.",[22,554,556],{"id":555},"availability-zones-isolation-inside-the-region","Availability Zones: isolation inside the Region",[27,558,559],{},"A Region on its own does not protect you from anything, it is just a location. The protection comes one level down, inside the Region, where providers carve out multiple Availability Zones (AZs). Each AZ is 1 or more discrete data centers, each with its own redundant power, cooling, and physical security, housed in a physically separate facility from the other AZs in the same Region. AWS guarantees a minimum of 3 AZs per Region. The AZs are still close enough to each other, generally within 100 km, that a dedicated low-latency, high-bandwidth fiber connection keeps traffic between them fast.",[27,561,562],{},"AWS names AZs after their Region: us-east-2a, us-east-2b, and us-east-2c are the 3 AZs in the us-east-2 Region. That trailing letter is the only thing that changes: everything before it identifies the Region, and the letter picks the specific zone.",[22,564,566],{"id":565},"worked-example-1-az-versus-3","Worked example: 1 AZ versus 3",[27,568,569],{},"Say a retailer runs its checkout service on 6 virtual machines. Put all 6 in a single AZ, and a power failure in that one data center takes every one of them offline at the same instant, exactly like the single building from the opening scenario. Split those same 6 machines across 3 AZs, 2 per AZ, and the picture changes completely: if 1 AZ loses power, the other 4 machines in the remaining 2 AZs keep serving checkout requests. The AZ that failed is offline, but the checkout service, as a whole, is not.",[27,571,572],{},"Nothing about the code changed between those 2 scenarios. The only difference is where the 6 machines physically sit, which is the entire reason Availability Zones exist as a concept, not as a feature you write, but as a decision you make when you deploy.",[22,574,576],{"id":575},"the-misconception-multi-az-is-not-multi-region","The misconception: multi-AZ is not multi-region",[27,578,579],{},"It is tempting to treat \"spread across Availability Zones\" and \"protected against any outage\" as the same thing. They are not. Multi-AZ protects you from a failure that is local to 1 data center location, power, cooling, fire, flood. It does nothing for an event that affects an entire geographic area at once, a major natural disaster or a region-wide network failure. Surviving that requires running in more than 1 Region, replicating data and traffic across a much larger distance, which is a bigger commitment in cost and complexity than multi-AZ. Most applications only need multi-AZ. Multi-Region is for workloads where losing an entire geographic area for any length of time is not acceptable.",[118,581],{"alt":582,"slug":583},"A hierarchy diagram showing a Region containing multiple Availability Zones, and each Availability Zone containing multiple independent data centers, illustrating how cloud providers isolate failures.","regions-and-availability-zones-hierarchy",[22,585,587],{"id":586},"how-the-3-major-providers-compare","How the 3 major providers compare",[27,589,590],{},"The concept is universal, even though the vocabulary shifts slightly between providers.",[35,592,593,608],{},[38,594,595],{},[41,596,597,599,602,605],{},[44,598,67],{},[44,600,601],{},"Top-level location",[44,603,604],{},"Isolated unit inside it",[44,606,607],{},"Typical minimum per location",[57,609,610,624,636],{},[41,611,612,615,618,621],{},[62,613,614],{},"AWS",[62,616,617],{},"Region",[62,619,620],{},"Availability Zone",[62,622,623],{},"3",[41,625,626,629,631,633],{},[62,627,628],{},"Azure",[62,630,617],{},[62,632,620],{},[62,634,635],{},"3 (in AZ-enabled regions)",[41,637,638,641,643,646],{},[62,639,640],{},"Google Cloud",[62,642,617],{},[62,644,645],{},"Zone",[62,647,623],{},[27,649,650],{},"One structural difference is worth knowing: if an entire Azure Region experiences a failure, every Availability Zone inside it can be affected, because Azure builds a Region out of its Zones. AWS and Google Cloud design Regions to be isolated from each other, so a failure specific to 1 Region should not spread to a different Region. This is a design detail, not something that changes how you use multi-AZ day to day, but it explains why \"which Regions to use\" is itself sometimes an availability decision, not just a latency one.",[22,652,197],{"id":196},[27,654,655],{},"A Region picks where your resources live; the Availability Zones inside it are what actually protect you from a single data center's bad day. Deploy across at least 2, ideally 3, AZs whenever an application needs to stay up, and reach for multiple Regions only when an entire geographic area going dark is a risk you cannot accept. Now that you know how providers organize the physical map beneath the cloud, the next lesson covers what you actually rent inside that map: compute.",{"title":202,"searchDepth":203,"depth":203,"links":657},[658,659,660,661,662,663,664],{"id":538,"depth":206,"text":539},{"id":545,"depth":206,"text":546},{"id":555,"depth":206,"text":556},{"id":565,"depth":206,"text":566},{"id":575,"depth":206,"text":576},{"id":586,"depth":206,"text":587},{"id":196,"depth":206,"text":197},[666],{"slug":583,"concept":667,"style":217,"aspectRatio":218,"labels":668},"A hierarchy diagram with 3 nested levels, read top to bottom. Level 1: a world map with a handful of pins, each pin labeled as one Region. Level 2: one Region pin expands into 3 Availability Zone boxes side by side, each drawn as a distinct physical location. Level 3: each Availability Zone box expands into 2 small data center icons inside it, each with its own power and network lines, to show that a single AZ is itself more than one building. A footer strip carries the resilience takeaway.",[669,670,671,672],"Region: a geographic area, such as US East (N. Virginia)","Availability Zone: one or more isolated data centers inside a Region","Data center: independent power, cooling, and networking","A failure in one Availability Zone should never reach another.",[528,529,530,531],{},"/courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/02-core-cloud-services/01-regions-and-availability-zones",{"passingScore":230,"questions":677},[678,686,695,699,707,715,723],{"question":679,"type":234,"options":680,"correctAnswer":683,"explanation":685},"A team runs its entire application on EC2 instances in a single Availability Zone. What is the main risk of this setup?",[681,682,683,684],"The application will run slower than if it used multiple AZs","AWS will not allow single-AZ deployments for production workloads","A single-AZ failure, such as a data center power or cooling outage, takes the entire application down","There is no risk, since Availability Zones never fail","A single Availability Zone is one or more discrete data centers, and a failure there, power, cooling, flooding, fire, is isolated to that AZ. If every instance sits in that one AZ, the whole application goes down with it. Spreading the same instances across 2 or 3 AZs means one AZ's failure only removes part of the capacity.",{"question":687,"type":257,"options":688,"correctAnswers":693,"explanation":694},"Which of the following are true about how AWS structures Availability Zones within a Region? (Select all that apply.)",[689,690,691,692],"Each Region has at least 3 Availability Zones","Availability Zones are connected by low-latency, high-bandwidth dedicated networking","An Availability Zone can span more than one discrete data center","Availability Zones in the same Region share a single power grid to reduce cost",[689,690,691],"AWS Regions ship with a minimum of 3 AZs, linked by dedicated low-latency metro fiber so cross-AZ traffic stays fast, and each AZ itself can be one or more discrete data centers. Shared power would defeat the entire point of an AZ: each one has its own independent power, cooling, and physical security, precisely so a power failure in one AZ cannot reach another.",{"question":696,"type":234,"options":697,"correctAnswer":247,"explanation":698},"A company needs to protect its application from an outage that takes down an entire geographic region, not just one data center. Deploying across multiple Availability Zones in the same Region is sufficient to guarantee this.",[246,247],"Multi-AZ protects against a failure inside one data center or AZ, not against an event that affects an entire geographic area, a widespread natural disaster or a regional network failure. Surviving a whole-region event requires deploying across multiple Regions, a different and larger commitment than multi-AZ.",{"question":700,"type":234,"options":701,"correctAnswer":703,"explanation":706},"In AWS naming, an Availability Zone code looks like us-east-2a. What does the trailing letter identify?",[702,703,704,705],"The specific data center building number","The Availability Zone within the named Region","The customer's AWS account partition","The generation of hardware running in that zone","The code before the letter, us-east-2, names the Region, and the trailing letter, a, b, c, and so on, identifies one specific Availability Zone inside that Region. AWS also maps each AZ to an AZ ID behind the scenes, so the same physical location is consistent across different AWS accounts even though the a/b/c letters are assigned per account.",{"question":708,"type":234,"options":709,"correctAnswer":711,"explanation":714},"Why do cloud providers place the data centers inside one Availability Zone many kilometers apart from the data centers in a neighboring Availability Zone, rather than right next door?",[710,711,712,713],"To reduce the provider's real estate costs","So that a single localized disaster, a fire, a flood, a tornado, cannot plausibly damage 2 Availability Zones at once","Distance is required by international data-transfer law","It has no real purpose beyond marketing","The physical separation is the entire point of an Availability Zone: keeping AZs a meaningful distance apart, while still close enough for low-latency links between them, means a fire or flood at one AZ has no physical path to reach another. Distance without redundant power and networking would not achieve this on its own, which is why both matter together.",{"question":716,"type":234,"options":717,"correctAnswer":718,"explanation":722},"A learner assumes that since Google Cloud subnets are regional resources instead of zonal, Google Cloud regions must not use Availability Zones at all. Why is that assumption wrong?",[718,719,720,721],"Google Cloud does use isolated zones inside each region, generally at least 3; only its subnet resource happens to span the whole region instead of a single zone","The assumption is correct, Google Cloud has no concept of zones","Google Cloud only isolates by continent, not by data center","Subnets and zones are the same concept in Google Cloud, so this question does not apply","Google Cloud regions are still built from multiple isolated zones, the direct equivalent of an AWS Availability Zone. What differs is scope for a specific resource: a Google Cloud subnet is defined once per region and reaches every zone in it, while an AWS subnet is pinned to a single AZ. That is a networking design choice, not a sign that zone-level isolation is missing.",{"question":724,"type":234,"options":725,"correctAnswer":728,"explanation":730},"A retailer's checkout service must never go fully offline, even if one data center loses power during a flash sale. What is the most direct fix based on what this lesson covers?",[726,727,728,729],"Switch to a faster instance type","Move the entire workload to a single, larger data center","Deploy the service across multiple Availability Zones in the Region instead of one","Wait for the provider to fix the outage, since nothing can be done in advance","Spreading the same service across multiple AZs means the loss of any single AZ, including a power failure during peak traffic, leaves the other AZs still serving checkout requests. A single, larger data center recreates the exact single point of failure this lesson opened with; it just makes the failure bigger.",{"title":524,"description":525},"courses/cloud-computing-fundamentals/en/domains/02-cloud-services-and-architecture/02-core-cloud-services/01-regions-and-availability-zones","RCsBDdNOxQh4cQt1FCGGi44NuThUKLNiq2mMDIuHrwg"]