1.3 Cloud Deployment Models (Public, Private, Hybrid)
Key Takeaways
- Public cloud services are owned and operated by a third-party provider (like Microsoft Azure) and delivered over the public internet to multiple tenants.
- Private cloud is cloud infrastructure dedicated to a single organization, either hosted on-premises or by a third party.
- Hybrid cloud combines public and private clouds, allowing data and applications to move between them.
- Multi-cloud uses services from multiple cloud providers (e.g., Azure + AWS) simultaneously.
- Azure Arc extends Azure management to on-premises, multi-cloud, and edge environments.
Cloud Deployment Models (Public, Private, Hybrid)
Quick Answer: Public cloud = shared infrastructure owned by the provider (Azure). Private cloud = dedicated infrastructure for one organization. Hybrid cloud = combination of public and private. Multi-cloud = using multiple cloud providers.
Public Cloud
A public cloud is owned and operated by a third-party cloud provider that delivers computing resources over the internet. Resources are shared across multiple organizations (tenants) in a multi-tenant architecture.
Characteristics:
- Owned and operated by Microsoft (in the case of Azure)
- Resources are shared among multiple customers via multi-tenancy
- Accessed over the public internet (or via private connections like ExpressRoute)
- Pay-as-you-go pricing — no upfront capital investment
- Virtually unlimited scale — add resources on demand
- No hardware to purchase or maintain
Advantages:
- No CapEx — no upfront hardware costs
- Agility — provision resources in minutes
- Scalability — scale to meet demand
- Global reach — deploy worldwide
- Pay-as-you-go — pay only for what you use
Disadvantages:
- Less control over security and compliance than a private cloud
- May not meet specific regulatory requirements for some industries
- Potential for "noisy neighbor" performance issues in multi-tenant environments
Azure Examples: Azure Virtual Machines, Azure Storage, Azure App Service — all public cloud services
Private Cloud
A private cloud is cloud infrastructure that is dedicated exclusively to a single organization. It can be hosted on-premises in the organization's own data center or hosted by a third party.
Characteristics:
- Dedicated to a single organization — no multi-tenancy
- Can be located on-premises or hosted by a third party
- Organization has full control over resources and security
- Requires significant CapEx and IT expertise to build and maintain (if on-premises)
- Provides cloud-like features (self-service, elasticity) within a private environment
Advantages:
- Full control over security, compliance, and data sovereignty
- Customization — configure hardware and software to specific needs
- Regulatory compliance — meets strict regulatory requirements (healthcare, government, finance)
- Legacy support — run applications that cannot be migrated to the public cloud
Disadvantages:
- Higher cost — significant CapEx for hardware and ongoing OpEx for maintenance
- Limited scalability — constrained by physical hardware capacity
- IT staffing — requires skilled staff to manage infrastructure
- Slower provisioning — hardware procurement takes time
Azure Private Cloud Solutions: Azure Stack Hub, Azure Stack HCI — bring Azure services to your on-premises data center
Hybrid Cloud
A hybrid cloud combines public and private cloud environments, allowing data and applications to be shared between them. This is the most common deployment model for enterprises.
Characteristics:
- Combines public cloud (Azure) and private cloud (on-premises or hosted)
- Data and applications can move between public and private environments
- Organizations choose which workloads run where based on requirements
- Provides the flexibility of public cloud with the control of private cloud
Advantages:
- Flexibility — run sensitive workloads on private cloud, others on public cloud
- Compliance — keep regulated data on-premises while leveraging public cloud for other workloads
- Cost optimization — use public cloud for variable workloads, private cloud for steady-state
- Business continuity — use public cloud for disaster recovery of on-premises workloads
- Gradual migration — move workloads to the cloud at your own pace
Disadvantages:
- Complexity — managing two environments increases operational complexity
- Integration challenges — connecting on-premises and cloud systems requires careful planning
- Higher skill requirements — staff needs expertise in both on-premises and cloud technologies
Azure Hybrid Solutions: Azure Arc, Azure Stack, Azure ExpressRoute, Azure VPN Gateway
Multi-Cloud
A multi-cloud approach uses services from two or more cloud providers simultaneously (e.g., Azure + AWS, or Azure + Google Cloud). This is increasingly common in enterprise environments.
Characteristics:
- Uses services from multiple cloud providers
- Avoids vendor lock-in
- Leverages best-of-breed services from each provider
- Increases complexity and management overhead
Azure Tools for Multi-Cloud: Azure Arc enables management of resources across Azure, on-premises, and other cloud providers from a single control plane.
Deployment Model Comparison
| Aspect | Public Cloud | Private Cloud | Hybrid Cloud |
|---|---|---|---|
| Ownership | Cloud provider | Organization | Both |
| CapEx | None (OpEx only) | High | Medium |
| Scalability | Virtually unlimited | Limited by hardware | Flexible |
| Control | Limited | Full | Balanced |
| Security | Provider-managed | Organization-managed | Shared |
| Compliance | Depends on provider | Full organizational control | Flexible |
| Best for | Most workloads | Regulated industries | Enterprises with mixed needs |
On the Exam: Hybrid cloud is the most commonly tested deployment model. Remember that it provides the flexibility to keep sensitive data on-premises while leveraging the scalability of the public cloud.
Azure Arc — Extending Azure to Any Infrastructure
Azure Arc is Microsoft's solution for managing resources across hybrid and multi-cloud environments. It extends Azure management and services to any infrastructure:
- Azure Arc-enabled servers: Manage Windows and Linux servers hosted outside of Azure
- Azure Arc-enabled Kubernetes: Manage Kubernetes clusters running anywhere
- Azure Arc-enabled data services: Run Azure data services (SQL Managed Instance, PostgreSQL) on any infrastructure
- Azure Arc-enabled application services: Run Azure App Service, Functions, and Logic Apps on any Kubernetes cluster
On the Exam: Azure Arc is increasingly important for AZ-900 questions about hybrid and multi-cloud management. Remember that Arc extends Azure management to on-premises, other clouds, and edge environments.
Which cloud deployment model combines on-premises infrastructure with public cloud services?
Which Azure service extends Azure management to on-premises and multi-cloud environments?
A company must keep all patient health records on-premises due to regulations but wants to use Azure for their public website. Which deployment model should they use?