Service Models

Cloud service models-like Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (laaS) —outline how users access and utilize cloud services.

Organizations often leverage services from multiple cloud providers to create customized solutions that meet their specific needs.

The National Institute of Standards and Technology (NIST) and International Organization for Standardization (ISO)/ International Electrotechnical Commission (IEC) Standards publish guidance on the service models. NIST identifies three service models, and ISO/IEC 17789 identifies four service categories representing different types of cloud services available.

The first three are the same with both standards:

SaaS

PaaS

In SaaS, the consumer uses the In PaaS, the consumer deploys provider's applications running onto the cloud infrastructure on a cloud infrastructure.

consumer-created or acquired applications created using

The applications are accessible from various programming languages, client devices through either a thin client libraries, services, and tools interface, such as a web browser (e.g., websupported by the provider.

based email) or program interface. The consumer does not manage or control the

The consumer does not manage or control underlying cloud infrastructure, including the underlying cloud infrastructure, network, servers, operating systems, including network, servers, operating storage, or even individual application

systems, or storage but has control over

capabilities, apart from limited user-specific the deployed applications and possibly application configuration settings. configuration settings for the applicationhosting environment.

laas

In laaS, the consumer can use the provider's capabilities to provision processing, storage, networks, and other computing resources so the consumer can deploy and run arbitrary software, which can include operating systems and applications.

The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications and possibly limited control of select networking components (e.g., host firewalls).

Network as a Service (NaaS)

ISO/IEC 17789 adds NaaS as an additional service category. NaaS provides its consumers with virtualized transport, connectivity, and network management capabilities.

Along with SaaS, PaaS, laaS, and NaaS, service providers may also offer as-a-service models such as Identity as a Service (IDaaS) and Security as a Service (SECaaS). IDaaS provides organizations with a single sign-on (SSO) solution for use in a web-based environment. This service is usually cloud-based and a pay-for-use model. SECaaS provides a subscription-based security solution that does not require hardware to be run on an organization's premises. It is based on the SaaS concept.

ISO/IEC 17788 adds the following service categories: Communications as a Service (CaaS), Compute as a Service (CompaaS), and Data Storage as a Service (DSaaS).