Cloud computing is the on-demand delivery of computing resources such as servers, storage, and software over the internet, instead of owning and running them yourself. A provider maintains the physical equipment in large data centres, and customers access what they need remotely, usually paying only for what they use. In everyday terms, the cloud lets you rent computing power rather than buy it.
How is cloud computing defined?
A widely cited definition comes from the U.S. National Institute of Standards and Technology, or NIST. It describes cloud computing as a model for convenient, on-demand network access to a shared pool of configurable computing resources, such as networks, servers, storage and applications, that can be rapidly provisioned and released with minimal management effort or provider interaction.
Packed into that sentence are the qualities that make the cloud distinctive: resources are shared, available quickly, and can be scaled up or down without lengthy setup. NIST breaks the model down into five essential characteristics, a set of service models and a set of deployment models. That framework has become a common reference point across the industry.
The word cloud is a metaphor. There is no fluffy thing in the sky; behind it sit very real buildings called data centres, filled with rows of computers, storage systems and networking equipment, cooled and powered around the clock. When people say their photos or files are in the cloud, the data actually lives on physical machines in one or more of these facilities, which a provider owns and operates on their behalf.
What are the five essential characteristics?
According to NIST, five features together define a true cloud service:
- On-demand self-service: users can provision resources automatically, without human help from the provider.
- Broad network access: services are available over the network from a range of devices, from laptops to phones.
- Resource pooling: the provider serves many customers from shared physical resources, assigning capacity dynamically.
- Rapid elasticity: capacity can expand or shrink quickly to match demand, sometimes automatically.
- Measured service: usage is metered, so customers can be billed for exactly what they consume.
These characteristics explain why cloud services feel flexible and pay-as-you-go compared with running your own equipment, where you must buy for peak demand and hope you guessed right.
What are the main service models?
Cloud services are commonly grouped into three models, sometimes called the SPI model, which differ in how much the provider manages for you.
| Model | What the provider supplies | Typical example |
|---|---|---|
| Infrastructure as a Service (IaaS) | Basic building blocks such as virtual servers, storage and networking | Renting virtual machines |
| Platform as a Service (PaaS) | A ready environment with tools to build and run applications | An app development platform |
| Software as a Service (SaaS) | Finished applications delivered over the internet | Web-based email or document tools |
Moving from IaaS to SaaS, the customer manages less and the provider manages more. With IaaS you still run your own software on rented hardware; with SaaS you simply open a browser and use a finished product, leaving almost everything else to the provider.
What are the deployment models?
NIST also describes four ways the cloud can be deployed. A public cloud shares infrastructure among many unrelated customers. A private cloud is provisioned for the exclusive use of a single organisation, whether hosted on its own premises or by a third party. A community cloud is shared by organisations with common concerns, such as similar security or compliance needs. A hybrid cloud combines two or more of these so that data and applications can move between them.
Each model offers a different balance of control, cost and convenience, and many organisations mix them to suit different workloads. A business might keep sensitive records in a private cloud while using a public cloud for tasks with sudden spikes in demand. A growing approach called multi-cloud spreads work across more than one public provider, which can reduce dependence on any single company.
Why does cloud computing matter?
The cloud has reshaped how software and services are built and delivered. Organisations can launch projects without buying hardware, scale to meet spikes in demand, and reach users almost anywhere. Paying mainly for what is used can turn large upfront costs into ongoing operating expenses, which helps small teams and large enterprises alike. Startups in particular can now access the kind of computing power that once required a major investment, renting a handful of servers one month and hundreds the next as their needs grow. The same flexibility helps established organisations experiment cheaply, since a project that does not work out can be shut down without leaving behind expensive, idle hardware.
The same shift powers many services people use daily, from streaming video and online storage to the apps behind banking and shopping. Much of the modern internet runs on cloud infrastructure without users ever being aware of it.
How does the cloud differ from traditional computing?
The clearest difference is ownership. In the traditional model, an organisation buys servers, installs them in its own building, and pays staff to maintain them. It must plan for the busiest day it expects and carry that capacity even when demand is low. In the cloud model, the same organisation rents capacity from a provider and adjusts it as needs change.
| Aspect | Traditional on-premises | Cloud computing |
|---|---|---|
| Upfront cost | High, buying hardware in advance | Low, pay as you go |
| Scaling | Slow, requires buying more equipment | Fast, adjust on demand |
| Maintenance | Handled by the organisation | Largely handled by the provider |
| Access | Often limited to local network | Available over the internet |
Neither model is always better. Some organisations keep certain systems in-house for control or legal reasons while moving others to the cloud, which is one reason hybrid setups are common.
What about the risks?
Security in the cloud is a shared responsibility. Providers protect the underlying data centres and infrastructure, while customers must manage access, configure services correctly and safeguard their own data. Understanding that division is essential, since customer misconfigurations, such as leaving storage open to the public, are a frequent cause of data exposure. Other considerations include relying on an internet connection, the risk of becoming locked in to one provider, and the need to know where data is stored for legal reasons. Cost can be another surprise, because pay-as-you-go bills can climb if resources are left running or are not sized carefully, so many organisations actively monitor their usage. Used carefully, though, cloud computing gives people and organisations powerful capabilities that once required rooms full of their own machines, and it has become a foundation of how modern software is built and delivered.
Sources
Related from Technology
How Modern Ransomware Operations Are Actually Structured
Ransomware is no longer lone hackers and crude code. It has become an industry — with suppliers, affiliates, customer service and a…
What a Botnet Is, and How It Powers Cyberattacks
A botnet is a network of secretly infected devices under an attacker's remote control, used together to launch large-scale cyberattacks.
What Is Edge Computing, and Why It Is Reshaping the Cloud
For two decades the trend was to centralise computing in vast distant data centres. Edge computing pushes some of it back out…
Get Cubed News in your inbox
Daily premium coverage, free. Independent · Source-cited.