SaveMyCert
Log in
5 of 5 free questions left today·for 30 a day
Describe cloud concepts

What Is Cloud Computing? An Azure AZ-900 Guide

16 min readAZ-900 · Describe cloud conceptsUpdated

Cloud computing is the delivery of computing services — such as compute power, storage, and networking — over the internet, where you rent what you need and pay only for what you use. Instead of buying and running your own datacenter, you use resources that a cloud provider like Microsoft Azure owns and operates, turning on capacity in minutes and turning it off when you are done. This on-demand, pay-as-you-go model is the foundation of everything else on the AZ-900 exam. In this lesson you will learn a clear definition of cloud computing; the consumption-based model and how it shifts spending from capital expense to operating expense; how to compare cloud pricing models such as pay-as-you-go, reservations, savings plans and Spot capacity; what serverless computing is; the shared responsibility model that splits security duties between provider and customer; and the cloud models — public, private, hybrid and multicloud — with the situations each one suits best. Master these and you have the vocabulary that the rest of the certification builds on.

What you’ll learn
  • Define cloud computing as on-demand, pay-as-you-go delivery of compute, storage, and networking
  • Explain the consumption-based model and why you pay only for what you use
  • Contrast a capital expense (CapEx) with an operating expense (OpEx)
  • Compare pay-as-you-go pricing with reservations, savings plans and Spot capacity, and match each to a demand pattern
  • Describe serverless computing and how it differs from always-running infrastructure
  • Describe how the shared responsibility model divides duties between provider and customer across IaaS, PaaS and SaaS
  • Compare the public, private, hybrid and multicloud models, the Azure tools for mixed environments, and their use cases

What is cloud computing?

Cloud computing is the delivery of computing services over the internet, so you can rent technology instead of owning it. Those services include compute (processing power such as virtual machines), storage (space to keep files, databases, and backups), and networking (the connections that tie everything together). A cloud provider such as Microsoft Azure owns the physical datacenters, servers, and hardware, and lets you use that capacity on demand.

The word on-demand is important. You request resources when you need them and they are ready in minutes, not the weeks or months it takes to buy and install physical equipment. When you no longer need a resource, you switch it off and stop paying for it. This is very different from a traditional setup where you buy servers up front, house them in your own room, and maintain them yourself whether they are busy or idle.

Because the provider runs the underlying infrastructure, you can focus on your applications and data rather than on cables, cooling, and hardware failures. In one sentence, cloud computing is the on-demand delivery of compute, storage, and networking over the internet on a pay-as-you-go basis. That single sentence captures what every Azure service has in common.

The consumption-based model: pay for what you use

The consumption-based model means you pay only for the resources you actually use, and only for as long as you use them. There is no large payment up front and no charge for idle capacity you have not requested. If you run a virtual machine for three hours, you pay for three hours; if you store fifty gigabytes of data, you pay for fifty gigabytes. This is what people mean by pay-as-you-go.

This model brings real advantages. You stop guessing capacity: instead of buying enough hardware to survive your busiest day and letting it sit idle the rest of the year, you scale your spending up and down with real demand. You also pay for what you consume rather than for what you predict, which lowers waste. And because a resource can be created in minutes, you can experiment cheaply and delete anything that does not work out.

For example, an online shop expecting a holiday rush can add extra Azure capacity for December and remove it in January, paying only for that busy period. A traditional business would have had to buy servers for the peak and keep paying for them all year. The idea behind the phrase "pay only for what you use" is the consumption-based model. Pay-as-you-go is its default pricing, but it is not the only way to buy cloud capacity — the next sections compare it with committed options.

CapEx versus OpEx: how spending changes

Cloud computing changes not just how you buy technology but the kind of expense it is. Traditional, on-premises IT is a capital expense (CapEx): you spend a large amount of money up front to buy physical assets such as servers, storage arrays, and networking gear, plus the datacenter to house them. You own those assets and typically write off their cost over several years, whether or not you use them fully.

Cloud computing is instead an operating expense (OpEx): an ongoing cost for a service you consume, billed as you go, much like a utility bill for electricity. There is no big purchase and nothing to own or depreciate — you simply pay for the resources you used this month.

AspectCapital expense (CapEx)Operating expense (OpEx)
What it isUp-front purchase of assets you ownOngoing pay-as-you-go cost for a service
Typical ofOn-premises datacentersCloud computing
Payment timingLarge payment before useBilled after use, per period
Financial modelDepreciated over yearsExpensed as you consume
Capacity riskYou must predict demand up frontScale spend with real demand

The test is ownership and timing: buying and owning datacenter hardware up front is CapEx, while paying each month for cloud resources you consumed is OpEx. Moving to the cloud shifts spending from CapEx to OpEx.

Comparing cloud pricing models

Cloud pricing models differ in one trade-off: how much you commit in advance versus how much you pay per hour. Pay-as-you-go needs no commitment and costs the most per unit; committed options lower the rate in exchange for paying for a term whether you use the capacity or not; buying your own hardware is the most up-front of all. Choosing well means matching each model to a demand pattern.

Pay-as-you-go is the default cloud model: you are billed only for what you consume, for as long as it runs, with no term and no fixed fee. You can resize or delete a resource at any time. Be precise about what "stops" means: a virtual machine that is deallocated (stopped from the portal) stops accruing compute charges, but its managed disks keep billing for the storage they hold, and so does a static public IP address. Only deleting a resource ends all of its charges.

Fixed or up-front capacity is the traditional alternative: you buy (or lease on a fixed contract) enough capacity for your peak and pay for it every day, busy or idle. If demand drops, you keep paying; if it grows past your purchase, you must buy more and wait.

Azure also offers ways to pay less than pay-as-you-go in return for a commitment or for accepting interruptions:

ModelWhat you agree toWhat you getBest for
Pay-as-you-goNothing — no termFull flexibility; billed only while resources exist or runUnpredictable, short-lived or new workloads; peaks
Azure reservationA one- or three-year term for a specific resource in a specific region (for virtual machines, a VM series in a region, with limited size flexibility within that series)A deeper discount than pay-as-you-go; the term is billed whether or not you use the capacityStable, always-on usage that will stay in the same region and VM family
Azure savings plan for computeA fixed hourly spend on compute for one or three yearsA discount that applies automatically across VM sizes, regions and eligible compute services; usually a smaller discount than a matching reservationSteady total spend whose sizes or regions change over time
Azure Spot Virtual MachinesAzure may evict the VM when it needs the capacity backUnused Azure capacity at a deep discountInterruptible work such as batch jobs and testing — never an always-on system
Buying hardwareUp-front purchase you own (CapEx)Full control; cost is fixed whether used or notNot a cloud pricing model — the baseline cloud is compared against

Matching the model to the demand

Most real workloads have a steady baseline plus peaks. Commit only to what you are sure to use: cover the always-on baseline with a reservation (or a savings plan if its sizes and regions will shift), and run the peaks on pay-as-you-go so the extra capacity costs nothing when it is not running. Reserving for the peak pays for idle capacity all year; running the baseline on pay-as-you-go gives up a discount you could have had. When the deciding factor is "no commitment at all", only pay-as-you-go fits.

Between the two commitments, the distinction is flexibility versus depth of discount: a reservation is the better buy when the VM family and region are fixed for the whole term, while a savings plan trades some of that discount for the freedom to change VM sizes, regions or compute services.

What is serverless computing?

Serverless computing is a cloud model in which the provider runs and scales all of the servers for you, and your code runs only when an event triggers it — so you pay for the executions and resources your code actually consumes, with little or no charge while it is idle. It is the consumption-based model taken to its furthest point: you do not provision, size or patch any server.

"Serverless" does not mean there are no servers. The code still runs on servers in Microsoft's datacenters; the name means the servers are invisible to you because the provider manages them. Four traits define it:

  • No server management — no operating system, patching or capacity planning on your side.
  • Event-driven execution — code starts in response to an event, such as a file upload, a message on a queue, an HTTP request or a timer, and does not keep running between events.
  • Automatic scaling — the platform adds instances as events arrive and scales back down, often to zero, when they stop.
  • Pay per execution — billing follows the executions and resources consumed rather than reserved capacity, so idle time costs little or nothing.

In Azure, Azure Functions (run code on events) and Azure Logic Apps (run workflows on events) are the classic serverless services when they are hosted on a consumption-based plan. They are covered in more depth in Domain 2.

Serverless versus always-running services

Platform as a service already removes OS management, so the difference from serverless is how the service runs and bills, not who patches it:

AspectVirtual machine (IaaS)App Service web app (PaaS)Serverless function
Who manages the OSYouMicrosoftMicrosoft
How it runsContinuously, until you stop itContinuously, on the instances of its App Service planOnly when an event triggers it
ScalingYou add or resize VMs (or configure autoscale)You scale the plan (or configure autoscale)Automatic, per event
Cost while idleCompute billed while runningThe plan is billed whether or not requests arriveLittle or none

So serverless suits work that happens in bursts or occasionally — resizing an image when one is uploaded, processing a message, running a nightly clean-up — where an always-on server would sit idle most of the time.

The shared responsibility model

The shared responsibility model describes how security and management duties are divided between the cloud provider and you, the customer. Moving to the cloud never makes everything the provider's job, and it never leaves everything to you. In your own on-premises datacenter you own every layer; in the cloud, each side owns part of the stack, and where the line sits depends on the service type.

Three responsibilities always stay with you, whatever service you use:

  • Information and data — what you store and who may see it.
  • Devices — the phones and PCs that are allowed to connect to your cloud resources.
  • Accounts and identities — the people, service accounts and credentials that access your environment.

Three responsibilities always belong to the provider: the physical datacenter, the physical network and the physical hosts. Microsoft secures the buildings, the servers and the cabling — you can never manage those.

Everything in between varies by service type: the operating system, network controls, applications, and identity and directory infrastructure. The more of the stack the provider runs for you, the more of these move to the provider.

ResponsibilityIaaSPaaSSaaS
Information and dataCustomerCustomerCustomer
Devices (mobile and PCs)CustomerCustomerCustomer
Accounts and identitiesCustomerCustomerCustomer
Identity and directory infrastructureCustomerSharedShared
ApplicationsCustomerSharedMicrosoft
Network controlsCustomerSharedMicrosoft
Operating systemCustomerMicrosoftMicrosoft
Physical hosts, network and datacenterMicrosoftMicrosoftMicrosoft

Read the table as a slider. With IaaS (for example, Azure virtual machines) you patch and secure the guest operating system yourself. Move the same workload to PaaS — say, a web application moved from a VM to Azure App Service — and the operating system and runtime become Microsoft's to maintain, while the information, the accounts and the access you grant remain yours. With SaaS (for example, Microsoft 365) Microsoft runs the application itself, yet you are still responsible for your data, the devices that connect and your users' identities. Note the difference between accounts and identities (always yours) and identity and directory infrastructure (the identity platform itself, which shifts toward shared).

Cloud deployment models: public, private, and hybrid

A cloud model describes who can use the cloud resources and where they run. The three core models are public, private and hybrid; Microsoft also describes multicloud, and Azure offers tools for running across mixed environments.

A public cloud is built, controlled and maintained by a third-party provider such as Microsoft Azure, and anyone who wants to buy cloud services can use it. That general public availability is the key difference from a private cloud. Many customers share the provider's hardware, with their resources logically isolated from one another. There is no capital expense to scale up, applications can be provisioned and removed quickly, and you pay only for what you use — but you do not have complete control over the resources and their security.

A private cloud is a cloud used by a single entity. It may be hosted in your own onsite datacenter, or in a dedicated datacenter offsite — even one run by a third party that has dedicated that hardware to you. What makes it private is single-entity use, not its location. It gives the most control over resources and security, but you must buy the hardware and are responsible for its maintenance and updates.

A hybrid cloud uses public and private clouds in one interconnected environment. It can let a private cloud surge into the public cloud for increased, temporary demand, and it lets you decide where each application runs — keeping regulated data private while using the public cloud for the rest. It offers the most flexibility.

Multicloud means using two or more public cloud providers at once — for example, a team that uses one provider's AI service while the rest of its estate runs on Azure — which means governing resources, identities and costs in more than one cloud. It differs from hybrid, which combines public with private.

AspectPublicPrivateHybridMulticloud
Who can use itAnyone who buys servicesOne organization onlyPrivate part dedicated; public part openAnyone (all parts are public clouds)
Made ofOne provider's cloudDedicated infrastructure, onsite or offsitePrivate + public, interconnectedTwo or more public providers
Up-front costNone to scale upHighest (buy hardware)MediumNone to scale up
ControlLeastCompleteYou choose where each workload runsSplit across providers
ScalabilityVery highLimited by your hardwareHigh (surge to public)Very high

Azure tools for mixed environments: Azure Arc and Azure VMware Solution

Two Azure offerings come up with hybrid and multicloud setups, and they solve different problems:

Azure ArcAzure VMware Solution
What it doesExtends Azure management and governance to resources outside AzureRuns your VMware workloads in Azure
Where the workload runsWhere it already is — on-premises, at the edge or in another cloud (including VMware vSphere estates)In Azure, on dedicated Azure hosts
Does it move workloads?No — it manages them in placeYes — you migrate VMware workloads into Azure and keep using VMware tools and skills

Azure Arc itself is covered in more depth with the other management tools in Domain 3.

Choosing a deployment model: use cases

Each cloud model suits different situations; match the scenario's deciding requirement to the model built for it.

Choose a public cloud when you want low up-front cost, fast setup, and the ability to scale to very large workloads without buying hardware. A startup launching a new web application, or any team that wants to experiment and grow quickly, is a natural fit. You accept less control over the underlying hardware in exchange for speed and flexibility.

Choose a private cloud when you need maximum control or must meet strict compliance, security, or data-residency requirements that call for dedicated, single-tenant hardware. A bank or a government agency with rules about exactly where and how data is held may prefer a private cloud, accepting higher cost and more management in return. The hardware can still sit in a third party's facility, as long as it is dedicated to that one organization.

Choose a hybrid cloud when you want the strengths of both. A common example is a hospital that keeps confidential patient records in a private cloud for compliance while running its public-facing website and appointment booking in the public cloud. Another is a business that runs day to day on private infrastructure but bursts into the public cloud to handle seasonal spikes. Keeping some systems private while using the public cloud for the rest — or surging a private environment into public capacity for a temporary peak — is the defining hybrid pattern.

Choose multicloud when you deliberately use more than one public provider — for example, to use a service only one provider offers, or because different teams already run on different clouds. If you also want one place to manage and govern those resources where they run, that is the role of Azure Arc; if you instead want to move VMware workloads into Azure without retooling, that is Azure VMware Solution.

Putting it together: a worked example

Let us tie the ideas together with one story. Imagine a small company, Contoso, that currently runs its accounting software on a few aging servers in a cupboard. Those servers were a capital expense: bought up front, owned by Contoso, and maintained by its own staff whether busy or idle.

Contoso decides to move to Microsoft Azure. Now it rents virtual machines and storage on demand over the internet and pays only for what it uses each month — its spending has shifted from CapEx to an ongoing operating expense. Under the shared responsibility model, Microsoft secures the physical datacenter and hardware, while Contoso stays responsible for its own data, user accounts, and access.

Because Contoso must keep some financial records on dedicated hardware for compliance, it keeps those in a private cloud and runs everything else in the public cloud — a hybrid arrangement. Its accounting servers run all day, every day, at the same size, so it covers them with an Azure reservation for a lower rate. When the busy end-of-year period arrives, it adds pay-as-you-go capacity for a few weeks and removes it afterward, paying only for that peak thanks to the consumption-based model. And a small piece of code that converts each uploaded invoice to PDF runs as a serverless function, costing nothing between uploads.

That single example uses every idea in this lesson: on-demand delivery over the internet, pay-as-you-go, CapEx versus OpEx, pricing models, serverless, shared responsibility, and the public, private, and hybrid cloud models. If you can explain Contoso's move, you understand what cloud computing is.

Tip. Expect definition and short scenario questions. Pay only for what you use with no up-front cost is the consumption-based model and an operating expense; buying and owning hardware is a capital expense. Pricing questions turn on the demand pattern: no commitment or unpredictable peaks favour pay-as-you-go, steady fixed-size use favours a reservation, changing sizes or regions favour a savings plan, and interruptible work suits Spot. Serverless questions test that the provider still runs servers, code is event-driven, and idle time costs little or nothing. Shared responsibility questions ask which duties never move (data, devices, accounts and identities; physical datacenter) and which shift from IaaS to PaaS to SaaS. Cloud model questions hinge on who can use the resources: anyone (public), one entity wherever hosted (private), interconnected public and private (hybrid), or several public providers (multicloud).

Key takeaways
  • Cloud computing is the on-demand delivery of compute, storage, and networking over the internet, paid for on a pay-as-you-go basis.
  • The consumption-based model means you pay only for the resources you use, with no large up-front purchase and no charge for capacity you have not requested.
  • Cloud shifts spending from a capital expense (CapEx — buying and owning datacenter hardware) to an operating expense (OpEx — paying for a service as you consume it).
  • Pay-as-you-go has no commitment and the highest rate; a reservation (a VM series in one region, one or three years) gives a deeper discount but is billed whether used or not; a savings plan discounts committed spend across changing sizes and regions; Spot VMs are cheapest but can be evicted.
  • Reserve the steady baseline and use pay-as-you-go for peaks. A deallocated VM stops compute charges, but its managed disks keep billing.
  • Serverless still runs on servers — the provider manages them; code runs on events, scales automatically and is billed per execution, with little or no idle cost (unlike an App Service plan, which bills while idle).
  • You always own your information and data, devices, and accounts and identities; the provider always owns the physical datacenter, network and hosts; the OS, network controls, applications and directory infrastructure shift with IaaS, PaaS and SaaS.
  • Public clouds are open to anyone who buys services (low cost, fast scale); a private cloud serves a single entity, onsite or offsite (maximum control and strict compliance); hybrid interconnects the two (for example, to surge for temporary demand); multicloud uses two or more public providers.
  • Azure Arc manages resources where they already run; Azure VMware Solution runs VMware workloads in Azure.

Frequently asked questions

What is cloud computing in simple terms?

Cloud computing is renting computing services — compute power, storage, and networking — over the internet instead of buying and running your own hardware. A provider like Microsoft Azure owns the datacenters and lets you use capacity on demand, and you pay only for what you use. It is the on-demand, pay-as-you-go delivery of technology, which lets you turn resources on in minutes and off again when you are done.

What is the consumption-based model?

The consumption-based model means you pay only for the cloud resources you actually use, and only for as long as you use them — there is no large up-front purchase and no charge for idle capacity. If you run a virtual machine for a few hours or store a certain amount of data, you pay for exactly that. This pay-as-you-go approach lets you scale spending up and down with real demand.

What is the difference between CapEx and OpEx in the cloud?

A capital expense (CapEx) is a large up-front purchase of assets you own, such as servers and datacenter equipment in a traditional on-premises setup. An operating expense (OpEx) is an ongoing cost for a service you consume, billed as you go — which is how cloud computing works. Moving to the cloud generally shifts spending from CapEx to OpEx, so you pay monthly for what you used rather than buying hardware in advance.

What is the shared responsibility model?

The shared responsibility model describes how security and management duties are split between the cloud provider and the customer. The provider is always responsible for the physical datacenter, physical network and physical hosts. The customer is always responsible for its information and data, the devices allowed to connect, and its accounts and identities. The operating system, network controls, applications, and identity and directory infrastructure shift with the service type: IaaS leaves most of them with the customer, PaaS shares them, and SaaS moves most of them to the provider.

What are the public, private, hybrid and multicloud models?

A public cloud is built and run by a provider such as Microsoft Azure and is available to anyone who wants to buy services, with no capital expense to scale. A private cloud is used by a single organization, whether hosted in its own datacenter or in a dedicated offsite facility, giving the most control at the cost of buying and maintaining hardware. A hybrid cloud interconnects public and private clouds, for example so a private cloud can surge into public capacity for temporary demand. Multicloud means using two or more public cloud providers.

What is the difference between pay-as-you-go and an Azure reservation?

Pay-as-you-go has no commitment: you are billed only for what you use, at the standard rate, and you can resize or delete resources at any time. An Azure reservation commits you to a specific resource, such as a VM series in a region, for one or three years in exchange for a lower rate, and you pay for the term whether or not you use it. Reservations suit steady, always-on usage; pay-as-you-go suits unpredictable demand and peaks. An Azure savings plan for compute sits between them, discounting a committed hourly spend across changing VM sizes and regions.

What is serverless computing?

Serverless computing is a cloud model where the provider manages and scales all the servers, and your code runs only when an event triggers it, such as a file upload or a queue message. You are billed for executions and the resources they consume, so there is little or no cost while the code is idle. It does not mean there are no servers — they exist, but the provider runs them. In Azure, Azure Functions and Azure Logic Apps are common serverless services.

What is the difference between Azure Arc and Azure VMware Solution?

Azure Arc extends Azure management and governance to resources that stay where they already run — on-premises, at the edge or in other clouds, including VMware vSphere environments — without moving them. Azure VMware Solution runs VMware workloads in Azure itself, so an organization can move its VMware estate to Azure while keeping its VMware tools and skills.

Source

This lesson covers the "Describe cloud concepts" domain of the official AZ-900 exam guide. Vendors revise their guides — check the source for the current version.

Test yourself on this topic
Practice now

Sign up free to mark lessons complete, bookmark topics and track your exam readiness.

Spotted a mistake in this lesson?