Cloud Security · 4 min
Cloud Security Fundamentals
Why the cloud isn't just someone else's datacenter
This lesson explains the concept, then checks your understanding in a short interactive exercise.
Three service models
The model determines how much you build and how much you inherit. The boundaries are a spectrum, not three tidy boxes.
- IaaS — you rent compute, storage and networking, and run the OS
- PaaS — you deploy code onto a managed runtime
- SaaS — you consume an application and configure it
Control plane vs data plane
This distinction matters more in cloud than almost anything else. The control plane is the management layer where resources are created, changed and permissioned. The data plane is where your workloads and data actually live.
- Control plane — APIs, consoles, IAM, resource configuration
- Data plane — running workloads, stored objects, database records
- Control-plane access can often grant data-plane access indirectly
Loading the interactive lesson…