> For the complete documentation index, see [llms.txt](https://digitalgarden.batamladen.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://digitalgarden.batamladen.com/notes/certificates/az-900/fundamental-cloud-concepts/cloud-service-types.md). # Cloud Service Types The cloud service types are: * IaaS – infrastructure as a service * Paas – platform as a service * Saas – software as a service ## Iaas IaaS (Infrastructure as a Service): A cloud computing model where a provider delivers virtualized computing resources—like servers, storage, and networking—over the internet, so you don’t have to manage physical hardware. The cloud vendor is responsible for the physical 3 (datacenter, physical servers, networking/cabling) IaaS is managed infrastructure and this "infrastructure" always refers to VMs. Basic example of an IaaS service provider is Contaboo, they rent you VMs where you are responsible for everything except the above mentioned physical 3. ## Paas Fully managed cloud solution. Managed and prepacked services for developing apps/solutions. * No managin of infra * Instead, focus on code Specialized services for different use cases (managed db, managed storage...) Serverless = Extreme Paas * Just run code with no infra management at all

## Saas Is a cloud based application Pros: * Redy-to-go software, just download it or open in browser * Subscription based *** ## Defense in Depth ### What is Def in Depth? A multi-layered approach to security. Objective is to slow or stop unauthorized data access If one layer is breached other layers reman

### Understanding Def in Depth Layers Physical security * First line of def * building/hardware access Identity & Access * Securing identities * Giving only the bare minimum so job can be done Perimeter * Protect agains network based attacks * Perimeter firewall/ddos protection Network * Secure connectivity btw resources * Perimeter and network are related but network is more focues on limiting network conn inside our network Compute * Harden VMs * Endpoint prtection/updates Appliciation * Resolve vulns in apps * Secure secrets Data layer * Primart target * databases, disks, SaaS apps --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://digitalgarden.batamladen.com/notes/certificates/az-900/fundamental-cloud-concepts/cloud-service-types.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.