Cloud Computing Notes: SaaS, PaaS, IaaS
Komal Gupta
UPSC Exam Expert & Content Editor
In this note
- 1.Quick Facts at a Glance
- 2.1. Essential Characteristics of Cloud Computing
- 3.2. Service Models: SaaS, PaaS and IaaS
- 4.3. Deployment Models
- 5.4. Advantages of Cloud Computing
- 6.5. Risks and Challenges
- 7.6. Related Concepts
- 8.7. Cloud Computing in India
- 9.8. Practice Questions
- 10.9. Shared Responsibility in the Cloud
- 11.10. Cloud Computing and UPSC Mains
- 12.Memory Trick
- 13.Related Notes
- 14.Frequently Asked Questions
PDF Notes: Cloud Computing Notes: SaaS, PaaS, IaaS
Premium PDF · one-time payment of ₹5 · instant access
Cloud computing means using computing services such as storage, processing power, databases, software and networking over the Internet, instead of owning and maintaining physical computers and servers yourself. When you save photos to Google Photos, write a document in Google Docs or Microsoft 365, watch a film on a streaming platform or store your marksheet in DigiLocker, you are using the cloud. The data and software actually sit on huge networks of servers in data centres run by cloud providers, and you access them through a browser or app. Questions on cloud computing appear in the computer awareness sections of bank, insurance, SSC and state exams, especially on the three service models SaaS, PaaS and IaaS. For UPSC, cloud computing connects to GS Paper 3 topics such as digital infrastructure, data protection, data localisation and cyber security.
Quick Facts at a Glance
- Cloud computing: On-demand delivery of IT resources over the Internet with pay-as-you-go pricing.
- Three service models: SaaS (Software as a Service), PaaS (Platform as a Service), IaaS (Infrastructure as a Service).
- Four deployment models: Public, private, hybrid and community cloud.
- Major global providers: Amazon Web Services (AWS), Microsoft Azure, Google Cloud.
- India's government cloud initiative: MeghRaj (GI Cloud), launched in 2014.
1. Essential Characteristics of Cloud Computing
The US National Institute of Standards and Technology (NIST) describes five essential features of cloud computing, which are commonly used in textbooks:
- On-demand self-service: Users can get computing resources, such as storage or servers, whenever needed, without contacting the provider manually.
- Broad network access: Services are available over the Internet from phones, laptops and other devices.
- Resource pooling: The provider's resources serve many customers at once, with resources assigned dynamically.
- Rapid elasticity: Resources can be scaled up or down quickly. An exam-results website, for example, can add capacity on result day and reduce it later.
- Measured service: Usage is measured, and customers pay for what they use, like an electricity bill.
2. Service Models: SaaS, PaaS and IaaS
| Model | What the provider gives | What the user manages | Examples |
|---|---|---|---|
| SaaS (Software as a Service) | Complete, ready-to-use software running in the cloud | Only their own data and settings | Gmail, Google Docs, Microsoft 365, Zoom, Salesforce |
| PaaS (Platform as a Service) | Platform with operating system, runtime, databases and development tools | Their own applications and data | Google App Engine, Microsoft Azure App Service, Heroku |
| IaaS (Infrastructure as a Service) | Virtual servers, storage and networking | Operating systems, applications and data | Amazon EC2, Microsoft Azure Virtual Machines, Google Compute Engine |
A simple analogy: Think of getting a meal. With IaaS, you rent a kitchen and cook everything yourself. With PaaS, you get a kitchen with ingredients and equipment ready; you only cook your own recipe. With SaaS, you simply order the finished meal and eat it. As we move from IaaS to SaaS, the user manages less and the provider manages more.
Newer terms build on these ideas: Function as a Service (FaaS) or "serverless computing" lets developers run small pieces of code without managing servers at all, and Desktop as a Service provides virtual desktops.
3. Deployment Models
- Public cloud: Owned and operated by a third-party provider and shared by many customers over the Internet. It is cost-effective and highly scalable. Examples: AWS, Azure, Google Cloud.
- Private cloud: Used exclusively by one organisation, either on its own premises or hosted by a provider. It offers more control and security, often preferred by banks, defence and government departments handling sensitive data.
- Hybrid cloud: A combination of public and private clouds, allowing data and applications to move between them. An organisation may keep sensitive data in a private cloud and use the public cloud for heavy, less sensitive workloads.
- Community cloud: Shared by several organisations with common needs, such as a group of hospitals or government departments.
- Multi-cloud: Using services from more than one public cloud provider to avoid dependence on a single company.
4. Advantages of Cloud Computing
- Lower costs: No need to buy expensive hardware; organisations pay only for what they use (converting capital expenditure into operating expenditure).
- Scalability: Resources grow or shrink with demand.
- Accessibility: Data and applications can be used from anywhere with an Internet connection.
- Automatic updates and maintenance: Providers handle software updates and hardware repairs.
- Disaster recovery and backup: Data is copied across multiple locations, reducing the risk of loss.
- Collaboration: Many people can work on the same document simultaneously.
- Support for innovation: Startups can access world-class computing power, including AI tools, without large investments.
5. Risks and Challenges
- Data security and privacy: Sensitive data stored with third parties can be exposed through breaches or misconfiguration.
- Dependence on the Internet: Without connectivity, cloud services cannot be accessed.
- Vendor lock-in: Moving from one provider to another can be difficult and costly.
- Outages: A failure at a large provider can disrupt many services at once.
- Legal and jurisdiction issues: Data stored abroad may fall under foreign laws, raising questions of data sovereignty and data localisation.
- Environmental impact: Data centres consume large amounts of electricity and water for cooling.
6. Related Concepts
- Virtualisation: The technology that lets one physical server run many "virtual machines", the foundation of cloud computing.
- Edge computing: Processing data close to where it is generated (for example, in a factory or a phone tower) rather than in a distant data centre, reducing delay. It is important for self-driving cars, industrial robots and 5G applications.
- Fog computing: An intermediate layer between edge devices and the cloud.
- Data centre: A facility housing thousands of servers, storage systems and networking equipment.
7. Cloud Computing in India
India's government has adopted cloud computing to deliver digital services at scale. MeghRaj, the GI Cloud initiative launched by the Ministry of Electronics and Information Technology (MeitY) in 2014, aims to speed up the delivery of e-services by providing a common cloud infrastructure for government departments. Cloud service providers are empanelled by MeitY to host government data under defined security standards. Popular citizen services such as DigiLocker, CoWIN (used during COVID-19 vaccination), UMANG and many e-governance portals rely on cloud infrastructure. India's data centre capacity has also been growing rapidly, driven by digital payments, streaming, AI and data localisation rules for certain sectors such as payments data under RBI guidelines.
8. Practice Questions
- Gmail is an example of which cloud service model? Answer: SaaS.
- Which model provides virtual servers and storage? Answer: IaaS.
- Which deployment model combines public and private clouds? Answer: Hybrid cloud.
- What is the name of India's government cloud initiative? Answer: MeghRaj.
- Which technology allows one physical server to run many virtual machines? Answer: Virtualisation.
9. Shared Responsibility in the Cloud
A common misunderstanding is that once data moves to the cloud, security becomes entirely the provider's job. In reality, cloud security follows a shared responsibility model. The provider secures the physical data centres, hardware and core infrastructure, while the customer is responsible for securing their own accounts, passwords, access permissions, data and, in IaaS and PaaS, their operating systems and applications. Many major data leaks have happened not because the cloud was hacked, but because a storage bucket was left publicly accessible by mistake. Strong passwords, multi-factor authentication, encryption and careful access settings are therefore essential.
10. Cloud Computing and UPSC Mains
In GS Paper 3, cloud computing can be discussed under several themes. Under digital public infrastructure, it explains how platforms like DigiLocker and CoWIN served hundreds of millions of users. Under economy, it shows how startups and small businesses can access advanced technology at low cost, supporting innovation and employment. Under security, it raises questions about protecting critical data, dependence on foreign technology companies and the need for domestic data centres. A balanced answer would note the benefits of efficiency and scale, while also highlighting the need for strong data protection under the DPDP Act, 2023, energy-efficient data centres and diversified, trusted providers.
Memory Trick
Remember the three service models from top to bottom as "S-P-I": Software you simply use (SaaS), a Platform you build on (PaaS) and Infrastructure you control (IaaS). The higher you go, the less you manage. For deployment, remember "Public is shared, Private is yours, Hybrid is both, Community is a group". These two lines answer most exam questions on the topic.
Related Notes
- Internet and Networking Notes
- Digital India Initiatives Notes
- Cyber Security Notes for UPSC
- Artificial Intelligence and Emerging Technologies
Frequently Asked Questions
What is cloud computing?
The delivery of computing services such as storage, servers, databases and software over the Internet on a pay-as-you-use basis.
What are the three main cloud service models?
SaaS (Software as a Service), PaaS (Platform as a Service) and IaaS (Infrastructure as a Service).
What is SaaS? Give an example.
Ready-to-use software delivered over the Internet, such as Gmail or Microsoft 365.
What is PaaS?
A platform that gives developers tools, operating systems and databases to build and run their own applications.
What is IaaS?
Rented computing infrastructure such as virtual servers, storage and networks.
What are the types of cloud deployment?
Public, private, hybrid and community cloud.
What is a hybrid cloud?
A combination of public and private clouds that allows data and applications to be shared between them.
What is MeghRaj?
The Government of India's cloud computing initiative (GI Cloud), launched by MeitY in 2014.
What is edge computing?
Processing data near its source instead of in a distant data centre, to reduce delay.
What is vendor lock-in?
Difficulty in switching from one cloud provider to another because of technical or cost barriers.
Is DigiLocker a cloud service?
Yes. DigiLocker stores citizens' documents in the cloud for access anytime.
What is the main technology behind cloud computing?
Virtualisation, which allows physical servers to be divided into many virtual machines.
Previous chapter
Email, Web Browsers and Search Engines Notes
Next chapter
File Extensions and Formats Notes for Competitive Exams
Komal Gupta
UPSC Exam Expert & Content Editor
Komal is a senior UPSC exam strategist with 8+ years of experience helping aspirants crack CSE, CDS and NDA exams. She writes in-depth notification breakdowns, exam pattern guides and preparation strategies.