Benefits of Cloud Services: An Azure AZ-900 Guide
The benefits of cloud services are the practical gains an organization gets by running its workloads on a provider's platform such as Microsoft Azure instead of in its own datacenter: high availability, scalability and elasticity, reliability, predictability, security, governance, and manageability. Each benefit solves a problem that is hard and expensive to solve alone. High availability keeps applications running, scalability and elasticity match resources to demand, reliability and predictability keep systems and budgets steady, security and governance protect and control your environment, and manageability makes it all easier to run. In this lesson you will learn to define high availability and read a service-level agreement (SLA) as allowed downtime, tell vertical scaling (scale up and down) apart from horizontal scaling (scale out and in) and know when only one of them works, and distinguish scalability from elasticity. You will also contrast fault tolerance with disaster recovery, see how much security work each service type hands to the provider, and learn the two-sided view of manageability: management of the cloud versus management in the cloud.
- Define high availability and convert an SLA uptime percentage into allowed monthly downtime
- Distinguish vertical scaling (up and down) from horizontal scaling (out and in), and recognize when only vertical scaling helps
- Explain the difference between scalability and elasticity
- Contrast fault tolerance with disaster recovery and describe the two forms of predictability
- Describe the security benefit of the cloud, how it varies across IaaS, PaaS, and SaaS, and the governance benefit
- Explain manageability as management of the cloud versus management in the cloud
High availability: keeping applications running
High availability means keeping an application up and reachable with as little downtime as possible, even when individual components fail. In the cloud it is a benefit you gain from the provider's infrastructure rather than something you must build from nothing: Microsoft Azure operates many datacenters and offers features that spread your workload so that a single failure does not take your whole application offline.
High availability comes from redundancy: running more than one copy of a component so that another copy keeps serving users if one fails. Ask what an extra copy is for: copies added because one could not carry the workload provide capacity (horizontal scaling), while a copy that stands ready to take over from a failed one provides availability. Placing copies in physically separate locations, such as different Azure availability zones, extends the same protection from the loss of one machine to the loss of a whole datacenter.
Service-level agreements (SLAs)
A service-level agreement (SLA) is the provider's formal commitment to the uptime of a service, expressed as a percentage such as 99.9%. If Microsoft misses an Azure SLA, eligible customers can claim service credits. An Azure SLA is mainly a commitment to uptime and connectivity; it is not a price guarantee or a list of datacenters. The headline percentage tells you how much downtime is allowed and nothing about how quickly the service responds. (A few SLAs add other commitments on top of availability; Azure Cosmos DB's, for example, also covers throughput, consistency and latency.)
The useful way to read an SLA is as allowed downtime. A 30-day month has 43,200 minutes, so each percentage converts to a downtime budget, and every extra nine after the decimal point divides the allowed downtime by ten:
| SLA uptime | Allowed downtime in a 30-day month |
|---|---|
| 99% | About 432 minutes (7.2 hours) |
| 99.9% | About 43 minutes |
| 99.95% | About 22 minutes |
| 99.99% | About 4 minutes |
| 99.999% | Under 1 minute (about 26 seconds) |
So a higher percentage always means a commitment to less downtime. To check whether a service fits a requirement, convert its SLA into minutes and compare: a business that can tolerate at most 30 minutes of downtime a month is covered by 99.95% (about 22 minutes) but not by 99%, which allows more than seven hours.
The benefit is that customers can reach your application without interruption, and you did not have to buy duplicate hardware or build a second datacenter to achieve it. For example, an online store on Azure can stay open through its busiest day because the platform keeps services running even when individual components fail.
Scalability: scaling up and scaling out
Scalability is the ability to add or remove resources to meet changing demand. When demand grows you add capacity; when it falls you remove capacity and stop paying for it. The benefit is that the resources you pay for match the workload you actually have, rather than being bought for the busiest moment and wasted the rest of the time.
There are two ways to scale.
Vertical scaling changes the power of an existing resource: adding CPU or memory to one virtual machine (scaling up), or reducing it (scaling down). Moving a web server to a smaller size once a seasonal promotion ends is scaling down, and it is just as much vertical scaling as making the server bigger.
Horizontal scaling changes the number of resources: adding identical machines to share the load, usually behind a load balancer (scaling out), or removing some (scaling in). You add or remove copies rather than resizing one.
| Aspect | Vertical scaling | Horizontal scaling |
|---|---|---|
| Also called | Scale up / scale down | Scale out / scale in |
| What changes | Power of one resource (CPU, memory) | Number of resources (instances) |
| Example | Resize a VM to a larger or smaller size | Add three more identical VMs, or remove two |
| Needs an app that can | Run on one machine | Split its work across several machines |
| Limit | The largest size available for that resource | Practically very high |
When only vertical scaling helps
Horizontal scaling works only if the application can spread its work across several servers. Some applications were written to run on exactly one server, for example because they keep the information they need between requests on that server. Extra copies cannot help them: a new copy would not hold that information, so work cannot be shared. Until the code is redesigned, the only way to give such an application more capacity is to scale up. Any method that adds instances, whether by hand or automatically, is horizontal scaling and depends on the application being able to share its work. Vertical scaling has a ceiling (the biggest size on offer), which is one reason new applications are usually designed to scale out.
In short: making one machine bigger or smaller is vertical scaling; changing how many identical machines share the work is horizontal scaling.
Elasticity versus scalability
Scalability is the ability to add or remove resources; elasticity is doing it automatically in response to real-time demand. Scalability is the capacity to grow and shrink; elasticity is the system growing and shrinking on its own without someone pressing a button.
With elasticity, resources are added when demand rises and removed when it falls, so the application has enough capacity and you do not pay for much idle capacity. In Azure, elasticity is typically delivered by autoscale rules that watch a metric such as CPU usage or request count and add or remove instances when it crosses a threshold.
A concrete example: a news website publishes a story that suddenly goes viral. With autoscale configured, the platform adds instances to handle the flood of visitors, then removes them once traffic returns to normal, and no engineer has to watch the traffic and react. The site stays fast, and the bill reflects only the brief surge.
Scaling by hand is scalability, not elasticity: a person decides when to add or remove capacity, which works for growth you can plan for but depends on someone noticing. Azure Autoscale can also follow a schedule, adding instances at set times with no one involved; that is automatic, but it follows the clock rather than demand, so it cannot catch a surge that arrives at an unexpected time. Elasticity in the full sense is capacity that tracks measured demand, which is what metric-based autoscale rules provide.
| Aspect | Scalability | Elasticity |
|---|---|---|
| Meaning | Ability to add or remove resources | Automatic scaling to match demand |
| Triggered by | A person, or a planned change made in advance | The system, reacting to measured demand |
| Best for | Known, planned growth | Unpredictable, changing demand |
Reliability and predictability
Reliability is the ability of a system to recover from failures and continue to function; it is also one of the pillars of the Microsoft Azure Well-Architected Framework. The cloud improves reliability through two capabilities that differ in when they act.
Fault tolerance means a redundant component takes over the moment one fails, so users see no outage at all. Disaster recovery means restoring service after an outage has already happened, for example by bringing an application back online in a second Azure region from data that was replicated there. Because Azure spans many regions worldwide, you can design for both: survive the loss of a single component without interruption, and recover even from the loss of a whole location.
| Aspect | Fault tolerance | Disaster recovery |
|---|---|---|
| When it acts | During the failure, before users notice | After an outage has happened |
| User experience | No outage | An outage, then service is restored |
| Typical mechanism | Redundant components that take over automatically | Backups or data replicated to another region, then a restore or failover |
| Example | One of two VMs fails and the other keeps serving | A region is down for hours and the app is brought back in a second region |
Predictability lets you trust what will happen with both performance and cost, and it comes in two forms.
Performance predictability means the application keeps performing consistently as demand changes, because autoscaling, load balancing, and high availability add capacity and spread the load when needed.
Cost predictability means you can forecast and track what you will spend. Because cloud billing is based on measured consumption, you can use the Azure pricing calculator and the Total Cost of Ownership (TCO) calculator to estimate costs in advance, then track actual spending against the estimate with cost-management tools.
Together, reliability and predictability let you promise a dependable service and a dependable budget.
Security and governance benefits
The security benefit of the cloud is that you build on protection the provider maintains, at a scale few organizations could afford alone; the governance benefit is that you can set, enforce, and audit rules consistently across every resource.
Security
Microsoft Azure provides physical security for its datacenters (guards, controlled and biometric entry), protection of its global network, encryption options for data, and tools that detect and respond to threats. Every customer, whatever its size, builds on that foundation without having to staff or fund it.
How much of the remaining security work you hand off depends on the service type, which forms a gradient:
| Service type | Who patches the operating system | Your access to the OS |
|---|---|---|
| On-premises | You (and you secure the building too) | Full |
| IaaS (for example, Azure virtual machines) | You | Full administrator access |
| PaaS and serverless (for example, a managed web app platform or Azure Functions) | Microsoft | None; you manage your code and settings |
| SaaS (for example, a finished email service) | Microsoft or the vendor | None; you manage your data and users |
This is a trade-off, not a free gain. Handing off OS patching to PaaS, serverless, or SaaS also means giving up administrator access to the operating system. The further along the gradient you move, the more maintenance the provider carries, with SaaS handing off the most. Anything that needs control of the operating system itself, such as a particular OS configuration or software that must run with administrator rights on the machine, is possible only with IaaS, and you keep the patching work that comes with it. Whatever the model, protecting your data and deciding who can access it stays with you. The shared responsibility model and the IaaS, PaaS, and SaaS lesson cover the split in detail.
Governance
Governance is setting and enforcing rules and standards, then auditing whether they are followed: requiring that resources carry tags such as a cost center, allowing deployments only in approved regions, enforcing a naming standard, or requiring deployment from approved templates. Cloud platforms apply these rules automatically across many resources and report on compliance (in Azure, mainly through Azure Policy), which helps you meet company policies and regulations. Depending on your service type, software patches and updates may also be applied automatically, which helps both governance and security.
For example, an organization can require every new resource to carry a cost-center tag and block deployments that break the rule, keeping the whole estate tidy and compliant.
Manageability: management of and in the cloud
Manageability is the benefit of being able to run your resources with less manual effort, and it has two sides: management of the cloud and management in the cloud.
Management of the cloud is about managing your resources themselves, largely automatically. Microsoft describes it as being able to automatically scale resource deployment based on need, deploy resources from a preconfigured template so an environment is recreated the same way every time, monitor the health of resources and automatically replace failing ones, and receive automatic alerts based on configured metrics, so you know about performance in real time. A rule that notifies the on-call engineer when a database's storage passes 80% full is management of the cloud: the platform watches the metric and acts on a rule you set once.
Management in the cloud is about how you interact with and control your resources: through the web-based Azure portal, a command-line interface (Azure CLI), Azure PowerShell and scripts, or application programming interfaces (APIs) called from code. Whenever a person or their code issues the instruction, through any of these tools, that is management in the cloud, even when what they are looking at is a metric.
| Management OF the cloud | Management IN the cloud |
|---|---|
| Automatic scaling based on need | The Azure portal (web) |
| Deploying from preconfigured templates | A command-line interface |
| Monitoring health and automatically replacing failing resources | Azure PowerShell and scripts |
| Automatic alerts based on configured metrics | APIs called from code |
The overall benefit is less manual effort: routine work is automated, and when you do step in, you have flexible ways to do it.
The benefits at a glance
Bringing the benefits together helps you answer questions quickly. Each benefit solves a problem that was hard and expensive to solve with your own datacenter.
| Benefit | What it gives you |
|---|---|
| High availability | Applications stay running with minimal downtime, backed by SLAs |
| Scalability | Add or remove resources to meet demand (up/down or out/in) |
| Elasticity | Automatic scaling to match demand in real time |
| Reliability | Recover from failures: fault tolerance (no outage) and disaster recovery (restore after an outage) |
| Predictability | Forecast performance and cost with confidence |
| Security | Build on a provider-maintained foundation; hand off more work with PaaS and SaaS |
| Governance | Enforce rules and standards across resources automatically |
| Manageability | Automate management of the cloud and use flexible ways to manage in it |
Matching the situation to the benefit is the core skill. Minimal downtime when a component fails is high availability. More identical servers sharing the work is horizontal scaling; a bigger or smaller single server is vertical scaling. Capacity that follows demand with no one stepping in is elasticity. Carrying on through a failure is fault tolerance, and restoring service after an outage is disaster recovery. Forecasting the monthly bill is cost predictability, enforcing tags or approved regions is governance, and an alert the platform raises from a configured metric is management of the cloud.
Tip. Benefits questions describe a situation and ask which benefit or mechanism it shows. High availability questions turn on redundancy and on reading SLAs as allowed monthly downtime and comparing services with a requirement. Scaling questions separate vertical (resize one machine) from horizontal (change the number of machines), including applications that cannot share their work, and separate scalability from elasticity. Reliability questions contrast fault tolerance with disaster recovery; predictability splits into performance and cost. Security questions test the provider's physical and network protection and how IaaS, PaaS, and SaaS trade OS patching for OS access; governance covers enforcing and auditing rules and standards. Manageability separates management of the cloud from management in the cloud.
- High availability keeps applications running with minimal downtime through redundancy; an SLA states the provider's uptime commitment.
- Read an SLA as allowed downtime: in a 30-day month 99.9% allows about 43 minutes, 99.95% about 22, and 99.99% about 4; each extra nine divides downtime by ten.
- Vertical scaling changes one resource's power (scale up/down); horizontal scaling changes the number of resources (scale out/in).
- An application that cannot spread its work across several servers cannot use extra instances; until it is redesigned, it can only scale up.
- Scaling by hand is scalability; capacity that follows measured demand automatically is elasticity.
- Fault tolerance keeps the service running through a failure with no outage; disaster recovery restores service after an outage has happened.
- Predictability covers performance (consistent response as demand changes) and cost (forecasting and tracking spend).
- PaaS, serverless, and SaaS hand OS patching to the provider but give up OS administrator access; OS-level requirements keep you on IaaS.
- Governance sets, enforces, and audits rules such as tags, approved regions, and naming standards.
- Management of the cloud is automation (autoscale, templates, auto-replacing failed resources, metric alerts); management in the cloud is the portal, CLI, PowerShell, and APIs.
Frequently asked questions
What is the difference between vertical and horizontal scaling?
Vertical scaling changes the power of a single resource — for example, adding more CPU or memory to one virtual machine (scaling up) or reducing it (scaling down). Horizontal scaling changes the number of resources — adding more identical machines to share the load (scaling out) or removing some (scaling in). A quick test: making one machine bigger is vertical; adding more identical machines is horizontal.
What is the difference between scalability and elasticity?
Scalability is the ability to add or remove resources to meet demand, often as a planned change made by a person. Elasticity is scaling automatically as demand rises and falls, usually through autoscale rules that react to a metric such as CPU usage, without anyone stepping in. A schedule-based rule is automatic too, but it follows the clock rather than demand, so it cannot respond to a surge that arrives at an unexpected time.
How much downtime does a 99.9% SLA allow?
A 99.9% uptime SLA allows about 43 minutes of downtime in a 30-day month, because a 30-day month has 43,200 minutes and 0.1% of that is 43.2 minutes. A 99.95% SLA allows about 22 minutes and a 99.99% SLA about 4 minutes; each extra nine divides the allowed downtime by ten. A higher SLA percentage therefore always means a commitment to less downtime, though it says nothing about how fast the service responds.
What is high availability in the cloud?
High availability means keeping an application running and reachable with as little downtime as possible, even when individual components fail. It comes from redundancy: extra copies of components, often spread across separate datacenters, that keep serving users when one fails. Providers publish service-level agreements (SLAs) that state the uptime they commit to for each service, as a percentage such as 99.9 percent.
What is the difference between management of the cloud and management in the cloud?
Management of the cloud is managing the resources themselves, largely automatically: scaling based on need, deploying from templates, monitoring health and replacing failing resources, and sending automatic alerts based on configured metrics. Management in the cloud is how you interact with your resources: the Azure portal, a command-line interface, Azure PowerShell and scripts, or APIs called from code. Automation the platform runs for you is management of the cloud; the tools you use to give instructions are management in the cloud.
What are reliability and predictability in the cloud?
Reliability is a system's ability to recover from failures and continue to function, achieved through fault tolerance (a redundant component takes over so users see no outage) and disaster recovery (restoring service after an outage, for example from data replicated to another region). Predictability means you can trust both performance (consistent response times as demand changes, through autoscaling and load balancing) and cost (forecasting with pricing and TCO calculators and tracking actual spend).
What is the difference between fault tolerance and disaster recovery?
Fault tolerance and disaster recovery are both parts of reliability, but they act at different times. Fault tolerance means a redundant component takes over the moment one fails, so users see no outage. Disaster recovery means restoring service after an outage has already happened, for example by bringing an application back online in a second Azure region from data replicated there.
Does moving to PaaS or SaaS improve security in the cloud?
PaaS and SaaS hand more security work to the provider than IaaS does: the provider patches and maintains the operating system, and with SaaS the whole application. The trade-off is that you give up administrator access to the operating system, so any requirement that needs control of the OS itself can only be met with IaaS virtual machines. In every model you still protect your own data and decide who has access to it.
Source
This lesson covers the "Describe cloud concepts" domain of the official AZ-900 exam guide. Vendors revise their guides — check the source for the current version.
- Microsoft AZ-900 study guide — Microsoft Learn
Sign up free to mark lessons complete, bookmark topics and track your exam readiness.