raft Bulletin-Cloud Computing
3network, servers, operating systems, or storage, but has control over the deployedapplications and possibly application hosting environment configurations.
loud Infrastructure as a Service (IaaS).
The capability provided to the consumer isto provision processing, storage, networks, and other fundamental computingresources where the consumer is able to deploy and run arbitrary software, which caninclude operating systems and applications. The consumer does not manage or controlthe underlying cloud infrastructure but has control over operating systems, storage,deployed applications, and possibly limited control of select networking components(e.g., host firewalls).
epending upon user needs, and other considerations, cloud computing services aretypically deployed using one of the following four models as defined by NIST:
The cloud infrastructure is operated solely for an organization. It may be managed by the organization or a third party and may exist on premise or off premise.
The cloud infrastructure is shared by several organizations andsupports a specific community that has shared concerns (e.g., mission, securityrequirements, policy, and compliance considerations). It may be managed by theorganizations or a third party and may exist on premise or off premise.
The cloud infrastructure is made available to the general public or alarge industry group and is owned by an organization selling cloud services.
The cloud infrastructure is a composition of two or more clouds(private, community, or public) that remain unique entities but are bound together bystandardized or proprietary technology that enables data and application portability(e.g., cloud bursting for load-balancing between clouds).(All definitions are from NIST
efinition of Cloud Computing, Version 15, 10-07-2009)Public and private clouds are termsof artused in the IT community and by NIST to describevarious cloud configurations. These terms are not related to whether records in those cloudsare publicly accessible. In addition, definitions do not preclude agency responsibilities tomanage the r