Unit – I: Cloud Computing

What is cloud computing?

Def: Cloud computing is the delivery of computing services (such as
storage, servers, databases, networking, and software) over the
internet ("the cloud"), allowing users to access and use resources
on-demand without owning or managing physical infrastructure.
Benefits of Cloud Computing
1️. Cost-Effective 💰
 Cloud computing reduces the need for expensive hardware
and IT infrastructure.
 Instead of buying and maintaining servers, businesses pay only
for the resources they use (like a monthly subscription).
 It helps companies save money on electricity, maintenance,
and IT staff.

2️. Scalability 📈
 Cloud services can be easily increased or decreased based on
business needs.
 If a company suddenly needs more storage or computing
power, it can upgrade instantly without buying new
equipment.
 This flexibility is great for growing businesses or seasonal
demand.

3️. Flexibility 🌍
 Cloud computing allows people to work from anywhere with
an internet connection.
 Employees can access files, applications, and software from
different devices like laptops, tablets, or mobile phones.
 This is useful for remote work, global teams, and business
continuity.

4️. Security 🔒
 Cloud providers invest in strong security measures like
encryption, firewalls, and regular backups.

1|Page
V.P.P
Unit – I: Cloud Computing

 Data is automatically backed up, so there’s no risk of losing

important files due to hardware failure.
 Many cloud providers offer multi-layer authentication to
protect sensitive data.
Example 1: Google Drive
Without Cloud (Traditional Storage Method)
 You save files on your personal computer or USB drive.
 If your computer crashes or the USB gets lost, your files are
gone.
 You can’t access your files from another device unless you
manually transfer them.
With Cloud (Using Google Drive - SaaS Example)
 You upload files to Google Drive, which stores them on the
cloud.
 Even if your computer crashes, your files are safe and
accessible from any device.
 You can share files easily with others via links, without using
USBs.

Example 2: Netflix & YouTube

Without Cloud (Old Way of Watching Videos)
 You buy DVDs or download movies on your device.
 Storage space is limited, and you can only watch on one device.
 If you want to watch a movie elsewhere, you need to carry the
DVD or transfer the file.
With Cloud (Netflix & YouTube - SaaS Example)
 Netflix and YouTube store videos on the cloud, so you can
stream them instantly.
 No need to download; you just log in and watch from any
device.
 The service adjusts video quality automatically based on your
internet speed.

Cloud Service Models:

2|Page
V.P.P
Unit – I: Cloud Computing

Cloud computing offers different types of services based on

what a business needs. These services are categorized into three
main types:
1. IaaS
What is IaaS?
IaaS (Infrastructure as a Service) is a cloud computing service where
companies can rent IT infrastructure such as servers, storage, and
networking instead of buying expensive hardware.
With IaaS, businesses don’t need to set up their own physical data
centres. Instead, they can use virtual machines and storage provided
by cloud companies like AWS, Google Cloud, or Microsoft Azure.
Example: E-commerce Business Using IaaS
Imagine you want to start an online shopping website like Amazon
or Flipkart.
Without IaaS (Traditional Way):
🔴 You would need to:
1. Buy servers to host the website.
2. Set up data centres to store customer and product data.
3. Hire IT staff to maintain everything.
4. Handle security and data backup yourself.
💰 Problem: Very expensive, time-consuming, and difficult to scale
during sales or festival seasons!

With IaaS (Cloud-Based Solution):

Instead of buying hardware, you can rent everything from a cloud
provider like Amazon Web Services (AWS), Microsoft Azure, or
Google Cloud.
✅ How IaaS Helps:
Rent servers instead of buying them.
Use cloud storage for product images and customer data.

3|Page
V.P.P
Unit – I: Cloud Computing

Auto-scale – More servers are added when traffic increases (e.g.,

during a festival sale).
Security & Maintenance – The cloud provider handles everything.
🟢 Result: Your website runs smoothly, handles traffic easily, and you
only pay for what you use.

How IaaS Works?

1️. Cloud Provider Setup – Big companies like AWS, Azure, and
Google Cloud have huge data centres with powerful computers.
Businesses can rent infrastructure instead of buying their own.
2️. User Configuration – Businesses choose what they need, like
virtual servers, storage, and networking. They can customize
resources based on their needs.
3️. Deployment & Access – Once set up, the infrastructure is
accessible through a dashboard or API, allowing businesses to
manage everything online.
4️. Auto-Scaling & Management – The cloud system automatically
adds or removes resources based on demand, saving costs and
improving performance.
5️. Billing & Cost Management – Businesses pay only for what they
use, like a utility bill (charged based on computing power, storage,
and network usage).
📌 In short, IaaS provides flexible, scalable, and cost-effective IT
infrastructure without the need for physical hardware! 🚀

Other Real-Life Examples of IaaS

1. Netflix (Movie Streaming Using IaaS)
📌 Netflix rents cloud servers from AWS to store and stream movies.
📌 When more people watch movies, AWS automatically adds more
resources.
2. WhatsApp (Cloud Messaging Using IaaS)
📌 WhatsApp uses cloud servers to store chat backups.
📌 If you change your phone, chats are restored from the cloud.
3. Banks (Online Banking with IaaS)
4|Page
V.P.P
Unit – I: Cloud Computing

📌 Banks use cloud computing to store customer data securely.

📌 Customers can access their accounts anytime, anywhere.

Popular IaaS Providers

1. Amazon Web Services (AWS EC2) – Provides virtual servers.
2. Google Cloud Compute Engine – Offers powerful computing
resources.
3. Microsoft Azure Virtual Machines – Used for business
applications.
4. IBM Cloud Infrastructure – Provides enterprise-level cloud
solutions.

2. PaaS (Platform as a Service) – Ready-Made Development Tools

What is PaaS?
Platform as a Service (PaaS) is a cloud computing model that
provides a ready-to-use platform for businesses and developers to
build, test, and deploy applications without worrying about
managing servers, databases, or infrastructure.
💡 Think of PaaS like a fully-equipped kitchen in a restaurant. You
don’t need to buy stoves, ovens, or utensils—you just cook! Similarly,
PaaS provides all the tools needed to develop applications, so
businesses don’t have to set up or maintain IT infrastructure.
Key Features of PaaS
✔️Pre-Built Development Tools – Everything needed to build an app
is provided (e.g., programming tools, databases, and frameworks).
✔️No Server Management – Businesses don’t have to worry about
maintaining servers.
✔️Scalability – Automatically adjusts resources based on app usage.
✔️Faster App Development – Developers can quickly build and
launch apps.
✔️Pay-as-you-go – Businesses pay only for what they use.

5|Page
V.P.P
Unit – I: Cloud Computing

Example: A Startup Launching a Food Delivery App

Imagine you are starting a food delivery business (like Swiggy or
Zomato) and need to develop a mobile app.
Without PaaS (Traditional Way):
🔴 You would need to:
1. Buy and manage servers to host your app.
2. Set up databases to store restaurant listings, orders, and
customer details.
3. Install development tools and frameworks manually.
4. Handle security, updates, and scaling yourself.
💰 Problem: This takes time, costs a lot, and requires technical
expertise.

With PaaS (Cloud-Based Solution):

Instead of handling everything, you use a PaaS provider like Google
App Engine, Microsoft Azure App Service, or AWS Elastic Beanstalk.
✅ How PaaS Helps:
1. Provides a ready-made environment – No need to set up or
maintain servers.
2. Built-in database & development tools – Store restaurant and
order data easily.
3. Auto-Scalability – If more people order food, the system adds
more resources automatically.
4. Security & Maintenance – The cloud provider handles updates,
backups, and security.
🟢 Result: Your app is ready faster, runs smoothly, and you don’t have
to worry about technical management.

How PaaS Works?

1️. Cloud Provider Sets Up the PaaS Environment – Companies like
Google Cloud, AWS, and Azure provide a ready-to-use platform with
development tools, databases, and programming environments.
6|Page
V.P.P
Unit – I: Cloud Computing

2️. Businesses or Developers Select Services – Developers choose the

tools, programming languages, and databases they need to build
their applications.
3️. Developers Build & Test Applications – Coding, designing, and
testing happen on the platform, with built-in testing tools to fix
errors easily.
4️. Deployment & Hosting – Once the app is ready, it is launched
directly from the platform without setting up separate servers.
5️. Auto-Scaling & Maintenance – The PaaS provider manages traffic
increases, security, updates, and backups, so businesses don’t have
to worry about technical issues.
📌 In short, PaaS simplifies app development by providing a
complete, ready-to-use platform, reducing the need for businesses
to manage infrastructure! 🚀

Popular PaaS Providers

 Google App Engine

 Microsoft Azure App Services

 Heroku

3. SaaS (Software as a Service) – Ready-to-Use Software

Software as a Service (SaaS) is a cloud computing model where users

can access software applications over the internet without installing
them on their computers.

💡 Think of SaaS like Netflix. You don’t need to download movies—

you just log in and start watching. Similarly, SaaS allows businesses
to use software without installing or maintaining it.
How SaaS Works?
1️. Cloud Provider Hosts the Software – Companies like Google,
Microsoft, or Salesforce create and store software on the cloud, so
users don’t need to install anything—they just access it online.

7|Page
V.P.P
Unit – I: Cloud Computing

2️. Users Subscribe & Log In – Instead of buying the software, users
pay a subscription fee (monthly or yearly) and log in via a web
browser or app.
3️. Software is Ready to Use Anywhere – SaaS applications work on
any device with an internet connection, allowing users to access
data from anywhere.
4️. Auto-Updates & Security – The SaaS provider manages updates,
security, and backups, so businesses don’t need an IT team to
handle them.
5️. Pay-as-You-Go Pricing – Users only pay for what they need, and
businesses can add or remove users easily.
📌 In short, SaaS makes software easily accessible, flexible, and
hassle-free, with no need for installation or maintenance! 🚀

Real-Life Examples of SaaS

1. Gmail (Email Service on SaaS)
📌 How It Works: Google hosts Gmail, and users access it via a
browser.
📌 Benefit: No need to install an email program—it works on any
device with internet access.

2. Zoom (Video Conferencing on SaaS)

📌 How It Works: Zoom provides online video meetings without
needing installation.
📌 Benefit: Businesses can conduct meetings globally with no setup
required.

Popular SaaS Providers

 Google Workspace (Gmail, Google Docs, Google Drive)

 Microsoft 365 (Word, Excel, PowerPoint Online)

 Dropbox (Cloud Storage Service)

 Zoom (Video Conferencing Software)

Comparison Table of IaaS, PaaS, and SaaS

8|Page
V.P.P
Unit – I: Cloud Computing

Feature IaaS PaaS SaaS

Platform for Ready-made
What it Servers, storage, and
developers to software for
provides? networking
build applications end users
Developers,
Who uses IT administrators, General users,
software
it? system engineers businesses
engineers
AWS EC2, Google
Example Google App Gmail, Netflix,
Cloud Compute
Services Engine, Heroku Microsoft 365
Engine
Example Using email and
Hosting a website Developing an app
Use Case cloud storage

Cloud Deployment Models: Public, Private, and Hybrid

Cloud computing provides different ways to deploy resources based
on security, cost, and accessibility needs. The three main types of
cloud deployment are Public Cloud, Private Cloud, and Hybrid
Cloud. Let's break them down in simple terms with examples.

1. Public Cloud
A public cloud is a cloud environment that is available to multiple
users (organizations or individuals) over the internet. The cloud
provider owns and manages the infrastructure, and users rent the
services.
Key Features:
✔️Cost-effective – Pay only for what you use.
✔️No maintenance – The cloud provider handles updates and
security.
✔️Scalable – Easily increase or decrease resources as needed.
✔️Accessible – Available from anywhere via the internet.

9|Page
V.P.P
Unit – I: Cloud Computing

Example:
Think of it like renting an apartment. You don’t own the building, but
you pay for using the space and services (electricity, water, security,
etc.).
 Google Drive, Dropbox, and OneDrive – Store files and access
them from anywhere.
 AWS (Amazon Web Services), Microsoft Azure, and Google
Cloud – Provide cloud computing services like storage,
databases, and virtual machines to businesses.
Best for: Startups, small businesses, and applications with
unpredictable workloads.

2. Private Cloud
A private cloud is dedicated to a single organization. The company
owns and manages the cloud infrastructure, keeping it within its
private network.
Key Features:
✔️High security – Only authorized users can access the data.
✔️Customization – Companies can configure the cloud as per their
needs.
✔️Reliable – More control over uptime and performance.
✔️Expensive – Requires in-house management and maintenance.
Example:
Think of it like owning a house. You have full control over everything,
but you are responsible for maintenance and security.
 Banking Systems – Banks like HDFC and ICICI use private clouds
for secure transactions.
 Government Clouds – Defense organizations use private clouds
to keep data confidential.
 Large Enterprises – Companies like TCS, Infosys, and Wipro use
private clouds for internal operations.
Best for: Large organizations with strict security and compliance
needs.

3. Hybrid Cloud

10 | P a g e
V.P.P
Unit – I: Cloud Computing

A hybrid cloud combines both public and private clouds, allowing

data and applications to move between them. This provides
flexibility, security, and cost savings.
Key Features:
✔️Balanced Cost & Security – Use the public cloud for general tasks
and the private cloud for sensitive data.
✔️Scalability & Control – Handle unpredictable workloads by
switching between clouds.
✔️Backup & Disaster Recovery – Store critical data in the private
cloud while using the public cloud for backups.
Example:
Think of it like having a house (private cloud) but also using a hotel
(public cloud) when you have guests.
 E-commerce Websites – Flipkart and Amazon use a private
cloud for customer data and a public cloud for handling website
traffic during sales.
 Healthcare Systems – Hospitals store patient records in a
private cloud but use a public cloud for online appointment
booking.
 Corporate IT – Companies like Infosys and Accenture use a
hybrid cloud to manage internal data while using public cloud
services for customer applications.
Best for: Businesses needing both security and flexibility.

Comparison Table

Feature Public Cloud Private Cloud Hybrid Cloud

Ownership Cloud provider Organization Both (mixed)
Low (pay-as-you-
Cost High (maintenance) Moderate
go)
Security Lower (shared) High (dedicated) Medium to High
High (easy
Scalability Limited (in-house) Very High
scaling)
Example Google Drive, Banking, Flipkart,

11 | P a g e
V.P.P
Unit – I: Cloud Computing

Feature Public Cloud Private Cloud Hybrid Cloud

AWS Government Healthcare

Conclusion

 Public Cloud is best for general usage and startups due to low
cost and flexibility.
 Private Cloud is ideal for organizations needing strict security
and control.
 Hybrid Cloud is the perfect balance for businesses that need
both security and scalability.

Extra:
Community Cloud
 Shared infrastructure among multiple organizations with similar
requirements.
 Managed by a third party or the organizations themselves.
 Example: Banks, government agencies, or universities using a
common cloud platform for shared services.
 Key Focus: Collaboration and shared resources among a
specific group.

Cloud-Based Enterprise Solutions: Cost-Benefit Analysis &

Scalability
Cloud-based enterprise solutions allow businesses to access
computing services like storage, software, and infrastructure over
the internet. Instead of purchasing expensive hardware, companies
can rent these services from cloud providers.
Two key factors that influence the adoption of cloud solutions in
enterprises are:
1. Cost-Benefit Analysis – Understanding the financial advantages
and drawbacks of using cloud computing.
2. Scalability – The ability to increase or decrease resources based
on business needs.
1. Cost-Benefit Analysis of Cloud-Based Enterprise Solutions
12 | P a g e
V.P.P
Unit – I: Cloud Computing

A. Cost Considerations
1. Initial Investment:
o With cloud solutions, businesses don’t need to spend a lot
of money on servers and other equipment.
o Instead, they pay a fixed amount regularly (like a
subscription), making costs more predictable.
o Subscription-based models (SaaS, PaaS, IaaS) provide
predictable costs.
2. Operational Expenses:
o Pay-as-you-go pricing ensures businesses only pay for the
resources they use.
o Automatic updates reduce maintenance costs.
o No need for dedicated in-house IT teams for
infrastructure management.
3. Hidden Costs:
o Moving existing data to the cloud can be expensive.
o Once a company picks a cloud provider, switching later
might be costly.
o Extra security measures or following legal rules may
require additional spending.

Cloud services work on a pay-as-you-go model, meaning businesses

only pay for what they use. The major cost factors include:
✔️Subscription Fees – Cloud providers charge a monthly or annual
fee for accessing their services.
✔️Storage Costs – Businesses pay for the amount of data stored in
the cloud.
✔️Bandwidth Costs – Data transfer (uploading and downloading)
may have additional charges.
✔️Customization & Integration Costs – Some businesses need
additional software configurations, which may add to the cost.
✔️Security & Compliance Costs – Advanced security features like
data encryption and multi-factor authentication may require
additional investment.
👉 Example Calculation (Cost in Traditional vs Cloud Setup)
13 | P a g e
V.P.P
Unit – I: Cloud Computing

A company needs to host a customer management system (CRM).

Traditional On-Premise
Cost Component Cloud-Based Setup
Setup
₹0 (Cloud provider owns
Server Hardware ₹10,00,000 (one-time)
it)
₹0 (Managed by
Maintenance ₹2,00,000 per year
provider)
₹0 (No in-house staff
IT Staff Salaries ₹5,00,000 per year
needed)
Electricity &
₹1,00,000 per year ₹0
Cooling
Cloud Subscription ₹0 ₹1,00,000 per year
Total 5-Year Cost ₹25,00,000 (approx.) ₹5,00,000 (approx.)
👉 Conclusion: Using a cloud-based solution reduces upfront
investment and long-term operational costs significantly.

B. Benefits of Cloud Computing

✔️Lower Upfront Costs – No need to buy expensive servers or set up
data centres.
✔️Pay-as-You-Use Model – Only pay for what is needed.
✔️Automatic Updates & Maintenance – Cloud providers handle
software updates.
✔️Improved Security – Cloud providers offer better security than
small businesses can afford.
✔️Accessibility – Access from anywhere with an internet connection.
✔️Disaster Recovery – Data backups ensure business continuity in
case of failures.
📌 Example:
A startup uses Google Workspace (Gmail, Drive, Docs) for ₹1,500 per
employee per year instead of buying costly Microsoft Office licenses.

Scalability in Cloud Computing

Scalability in cloud computing refers to the ability to increase or
decrease computing resources based on demand. This ensures that
14 | P a g e
V.P.P
Unit – I: Cloud Computing

businesses can handle changing workloads efficiently without

overinvesting in expensive IT infrastructure.
Scalability is one of the biggest advantages of cloud computing,
allowing companies to grow smoothly without worrying about
hardware limitations.
📌 Example: An e-commerce website experiences heavy traffic during
holiday sales. Instead of purchasing extra servers, it temporarily
increases cloud resources. After the sale, it scales down to normal
capacity.

Types of Scalability in Cloud Computing

Scalability in cloud computing can be achieved in two main ways:
1. Vertical Scalability (Scaling Up/Down)
Vertical scalability means increasing or decreasing the resources
(CPU, RAM, storage) within a single server.
✔️Scaling Up – Upgrading a server’s power to handle increased
workloads.
✔️Scaling Down – Reducing resources when demand decreases to
save costs.
📌 Example: A financial institution needs more computing power
during the end of the fiscal year for processing transactions. It
upgrades its cloud server’s CPU and RAM temporarily.
Disadvantages of Vertical Scaling
The following are the disadvantages of vertical scaling:
🔹 Potential downtime: If one machine breaks, then everything stops
working until it is fixed which will lead to potential downtime.
🔹 Downtime for Upgrades: Sometimes you need to stop everything
to make upgrades which can disrupt services.

2. Horizontal Scalability (Scaling Out/In)

Horizontal scalability means adding or removing multiple servers to
distribute the workload. This ensures high availability and
performance.
✔️Scaling Out – Adding more servers to handle increased traffic.
✔️Scaling In – Removing extra servers when demand decreases.

15 | P a g e
V.P.P
Unit – I: Cloud Computing

📌 Example: A video streaming platform (like Netflix) adds more

servers when millions of users stream a new popular series. After a
few weeks, it removes extra servers when demand normalizes.
Advantages:
🔹 No downtime – Servers can be added without stopping operations.
🔹 High availability – Even if one server fails, others continue working.
🔹 Handles unpredictable traffic spikes efficiently.

Real-World Examples of Cloud Scalability

Example 1: E-Commerce Platform (Amazon, Flipkart, Myntra)
Scenario: An e-commerce website receives 10x more visitors during
festive sales.
🔹 Scaling Solution: The company scales horizontally by adding more
cloud servers.
🔹 Result: The website runs smoothly, preventing crashes or
slowdowns.

Example 2: Online Education Platform (Coursera, Udemy, Byju’s)

📚 Scenario: A sudden rise in students enrolling for courses due to a
new government policy.
🔹 Scaling Solution: The platform scales up by increasing cloud
storage and processing power.
🔹 Result: Students experience smooth video streaming and learning,
without delays.

Example 3: Social Media App (Instagram, Facebook, Twitter)

📱 Scenario: A trending topic or viral video attracts millions of users
in a short time.
🔹 Scaling Solution: The platform scales out by distributing the traffic
across multiple servers.
🔹 Result: Users can access and share content without slowdowns.

Benefits of Scalability in Cloud Computing

✔️Cost-Effective – Businesses only pay for what they use.
✔️High Performance – Ensures fast and smooth application
performance.

16 | P a g e
V.P.P
Unit – I: Cloud Computing

✔️Better User Experience – Prevents crashes and slowdowns.

✔️Disaster Recovery – If one server fails, others continue
functioning.
✔️Business Growth Support – Companies can scale as they expand
without major investments.

Security and Governance in Cloud Computing

Cloud computing helps businesses store and manage data online, but
it also comes with security and governance challenges. Companies
must protect their information from cyber threats and ensure they
follow the right rules and policies.
1. What is Security in Cloud Computing?
Security in cloud computing refers to protecting business data,
customer information, and applications from cyber risks like
hacking, data breaches, and system failures.
Why is Security Important?
✔️Prevents hacking and unauthorized access.
✔️Protects customer data and business information.
✔️Ensures smooth business operations without data loss.

Key Security Features in Cloud Computing

A. Data Protection & Privacy
🔹 Data stored in the cloud must be protected from
unauthorized access and leaks.
🔹 Cloud providers use encryption (coding data) to keep
information secure.
📌 Example: Banks store customer account details on secure cloud
servers to prevent fraud.

B. Secure User Access (Login Controls)

🔹 Only authorized employees should access sensitive business
information.
🔹 Multi-Factor Authentication (MFA) adds extra security layers (like
OTP verification).

17 | P a g e
V.P.P
Unit – I: Cloud Computing

📌 Example: A company’s HR team uses secure logins to access

employee salary details in the cloud.

C. Threat Detection & Cyber Attack Prevention

🔹 Cloud companies use firewalls and AI-based monitoring to detect
hacking attempts.
🔹 Businesses must update passwords and security settings regularly.
📌 Example: An online shopping website uses cybersecurity tools to
block hackers from stealing customer credit card details.

D. Backup & Disaster Recovery

🔹 Cloud automatically backs up important business data to prevent
losses from cyberattacks or system failures.
🔹 Businesses can recover lost data quickly with cloud backups.
📌 Example: A hotel chain stores customer booking records in the
cloud. If one system crashes, data is recovered instantly.

2. What is Governance in Cloud Computing?

Governance in cloud computing means managing cloud resources
properly to ensure security, cost control, and compliance with legal
rules.
Why is Cloud Governance Important?
✔️Helps businesses follow legal regulations (e.g., customer data
privacy laws).
✔️Controls costs by ensuring companies only use necessary cloud
services.
✔️Ensures smooth operations by monitoring cloud performance.

Key Governance Aspects in Cloud Computing

A. Cloud Policy & Compliance
🔹 Businesses must follow government and industry rules when using
cloud services.
🔹 Regulations like GDPR (for data privacy in Europe) ensure
customer data protection.
📌 Example: A global company using cloud storage must follow data
privacy laws in each country where it operates.

18 | P a g e
V.P.P
Unit – I: Cloud Computing

B. Cost Control & Resource Management

🔹 Cloud services charge based on usage, so businesses must track
spending to avoid extra costs.
🔹 Companies use auto-scaling to increase or decrease resources as
needed.
📌 Example: A startup using cloud storage should monitor usage to
avoid unnecessary costs.

C. Performance Monitoring
🔹 Businesses should monitor cloud performance to ensure fast and
smooth operations.
🔹 Cloud tools help track server speed, storage capacity, and network
efficiency.
📌 Example: A social media company ensures its app runs smoothly
even when millions of users log in at the same time.

D. Automating Governance with AI

🔹 Many companies use AI-based tools to automatically check
security settings and ensure compliance.
🔹 This reduces manual work and improves efficiency.
📌 Example: A financial company uses AI to scan its cloud security
system for weak spots and fix them before hackers attack.

3. Quick Summary: Security vs. Governance

Feature Security Governance
Protecting data and Managing cloud resources
Focus
preventing cyber threats properly
Using strong passwords and Tracking cloud costs and
Example
encryption ensuring compliance
Ensures cost control and
Benefit Keeps business data safe
smooth operations

4. Why Should Businesses Care About Security & Governance?

✅ Prevents hacking & fraud – Protects customer and business data.
✅ Ensures legal compliance – Follows industry and government

19 | P a g e
V.P.P
Unit – I: Cloud Computing

regulations.
✅ Controls costs – Helps businesses avoid unnecessary spending on
cloud services.
✅ Maintains business continuity – Prevents downtime and data loss.

Data Security and Compliance in Cloud Computing

Cloud computing allows businesses to store and process data
online, but it also comes with risks related to security breaches, data
loss, and legal compliance. Companies must follow proper security
measures and legal regulations to keep their data safe.

1. What is Data Security in Cloud Computing?

Data Security in the cloud means protecting business and customer
data from cyber threats, hacking, and unauthorized access.
Why is Data Security Important?
✔️Prevents data breaches and hacking.
✔️Ensures customer trust by keeping personal information safe.
✔️Avoids financial and legal penalties for not protecting sensitive
data.

Key Aspects of Data Security in the Cloud

A. Data Encryption (Securing Information) 🔒
🔹 Encryption is the process of converting data into a code to prevent
unauthorized access.
🔹 Even if hackers steal the data, they cannot read it without the
encryption key.
📌 Example: A bank encrypts customer account details before storing
them in the cloud. Even if someone tries to hack the system, they
won’t be able to read the information.

B. Identity and Access Management (IAM) 👥

🔹 Ensures that only authorized users can access important cloud
data.
🔹 Uses Role-Based Access Control (RBAC) to limit data access based
on job roles.

20 | P a g e
V.P.P
Unit – I: Cloud Computing

🔹 Multi-Factor Authentication (MFA) adds an extra security layer

(e.g., password + OTP).
📌 Example: In a retail company, only managers can access financial
reports, while employees can only see inventory data.

C. Data Backup and Disaster Recovery 🔄

🔹 Cloud services offer automatic data backups to prevent data loss
from cyberattacks or system failures.
🔹 Businesses must have a Disaster Recovery Plan (DRP) to restore
data quickly.
📌 Example: An airline company stores flight booking data in multiple
cloud servers. If one system crashes, the data is restored
automatically from a backup.

D. Firewalls & Threat Detection

🔹 Cloud providers use firewalls and AI-based monitoring to detect
and block cyber threats.
🔹 AI security systems analyze patterns to detect suspicious activities
in real time.
📌 Example: An online shopping website detects a hacking attempt
and blocks the suspicious login from an unknown location.

2. What is Compliance in Cloud Computing?

Compliance means following legal and industry regulations to
protect data and ensure ethical cloud usage.
Why is Compliance Important?
✔️Avoids legal penalties and fines for not following data laws.
✔️Ensures customer privacy and protects personal data.
✔️Helps companies maintain a good reputation and trust.

Key Compliance Standards in Cloud Computing

Different industries and countries have specific data protection laws
that businesses must follow.
Who Needs to Follow
Compliance Standard Purpose
It?
GDPR (General Data Protects personal Companies operating in

21 | P a g e
V.P.P
Unit – I: Cloud Computing

Who Needs to Follow

Compliance Standard Purpose
It?
Europe or handling
data of European
Protection Regulation) European customer
customers.
data.
HIPAA (Health
Protects patient Hospitals, clinics, and
Insurance Portability
healthcare data. healthcare providers.
and Accountability Act)
ISO 27001 Ensures strong
Any organization using
(International Security cloud security
cloud services.
Standard) practices.
PCI-DSS (Payment Card E-commerce websites,
Protects online
Industry Data Security banks, and fintech
payment data.
Standard) companies.
📌 Example: A company selling products in Europe must follow GDPR
rules to protect customer data. If they fail to comply, they can face
huge fines.

How Businesses Ensure Compliance?

✔️Data Localization – Storing customer data in regions where it is
legally allowed.
✔️Regular Audits – Checking if cloud security meets compliance
standards.
✔️Legal Agreements – Signing Data Processing Agreements (DPA)
with cloud providers.
📌 Example: A global IT company must store Indian customer data in
India to comply with local data protection laws.

3. Common Challenges in Data Security & Compliance

1️. Cyber Threats are Increasing – Hackers use advanced methods to
steal data.
2️. Changing Regulations – New laws require companies to update
their security policies.
3️. Third-Party Risks – Cloud providers store business data, so

22 | P a g e
V.P.P
Unit – I: Cloud Computing

security depends on their systems and policies.

4️. Human Errors – Employees may accidentally leak sensitive data.
📌 Example: A social media company was fined because it failed to
protect user data from hackers.

5. Why Should Businesses Care About Data Security & Compliance?

✅ Prevents hacking & fraud – Protects business and customer data.

✅ Avoids legal issues – Ensures businesses follow government rules.
✅ Maintains trust – Customers feel safe when their data is secure.
✅ Improves business reputation – Companies with strong security
policies attract more customers.

Cloud Governance Frameworks

A Cloud Governance Framework is a set of rules, policies, and
guidelines that help businesses manage their cloud services securely,
efficiently, and legally. It ensures that cloud resources are used
properly, costs are controlled, and compliance is maintained.

1. What is Cloud Governance?

Cloud governance means controlling and managing cloud resources
to:
✔️Protect business data from security risks.
✔️Control costs by tracking cloud spending.
✔️Ensure legal compliance with data protection laws.
✔️Improve performance by monitoring cloud services.
📌 Example: A retail company using Amazon Web Services (AWS)
applies governance policies to ensure only authorized employees can
access customer data, preventing data leaks.

2. Key Elements of a Cloud Governance Framework

A cloud governance framework includes several important areas:
A. Security Governance 🔒
🔹 Defines rules for protecting data stored in the cloud.
🔹 Uses Identity and Access Management (IAM) to control user

23 | P a g e
V.P.P
Unit – I: Cloud Computing

permissions.
🔹 Implements encryption and firewalls to block cyber threats.
📌 Example: A bank allows only senior managers to access financial
transaction data in the cloud.

B. Compliance Governance 📜
🔹 Ensures businesses follow legal and industry regulations like
GDPR, HIPAA, and ISO 27001.
🔹 Regular security audits check if cloud systems meet compliance
standards.
📌 Example: A healthcare provider must follow HIPAA rules when
storing patient data in the cloud to avoid fines.

C. Cost Management & Optimization 💰

🔹 Tracks cloud spending to avoid unnecessary costs.
🔹 Uses auto-scaling to adjust resources based on demand.
📌 Example: An e-commerce company increases cloud server capacity
during a festival sale and reduces it afterward to save money.

D. Performance Monitoring & Resource Management 📊

🔹 Ensures cloud applications run smoothly without delays or
crashes.
🔹 Uses cloud monitoring tools to track performance and fix issues.
📌 Example: A video streaming service (like Netflix) monitors cloud
performance to avoid buffering issues for users.

E. Data Governance & Backup 🔄

🔹 Manages where and how data is stored, accessed, and backed up.
🔹 Ensures data recovery plans are in place for emergencies.
📌 Example: A law firm stores legal case files in multiple cloud
locations to prevent data loss.

3. Popular Cloud Governance Frameworks

Different cloud providers offer governance frameworks to help
businesses manage their cloud services.
24 | P a g e
V.P.P
Unit – I: Cloud Computing

Framework Cloud Provider Purpose

AWS Well-
Amazon Web Ensures security, cost control,
Architected
Services (AWS) and efficiency in AWS cloud.
Framework
Azure Cloud Provides governance models
Adoption Microsoft Azure for secure and compliant cloud
Framework use.
Helps businesses manage
Google Cloud
Google Cloud security, compliance, and
Governance Model
performance.
📌 Example: A multinational company using AWS Well-Architected
Framework follows AWS guidelines to secure its cloud operations.

25 | P a g e
V.P.P