Chapter 04 — Cloud Service Types: IaaS, PaaS, SaaS

Overview

Cloud services are delivered in three main models, each offering a different level of control, flexibility, and management responsibility. These are:

IaaS  →  Infrastructure as a Service
PaaS  →  Platform as a Service
SaaS  →  Software as a Service

Understanding these models — what they include, what you manage, and when to use each — is essential for the AZ-900 exam.


The Concept: "As a Service"

In traditional IT, you manage everything yourself — hardware, OS, runtime, data, and application. Cloud computing offloads parts of that stack to the provider.

The stack from bottom to top:

┌──────────────────┐
│   Application    │  ← Your code / software
│   Data           │  ← Your databases, files
│   Runtime        │  ← Node.js, Python, .NET
│   Middleware     │  ← Message queues, APIs
│   OS             │  ← Windows, Linux
│   Virtualization │  ← Hypervisor
│   Servers        │  ← Physical CPU, RAM
│   Storage        │  ← Disks, SSDs
│   Networking     │  ← Switches, cables
└──────────────────┘

Different service models hand over different layers to the provider:

                    You Manage   │  Provider Manages
────────────────────────────────┼──────────────────
On-Premises         Everything  │  Nothing
IaaS                App+Data+OS │  Hardware + Virtualization
PaaS                App + Data  │  Everything below App
SaaS                Nothing     │  Everything

IaaS — Infrastructure as a Service

What Is It?

IaaS gives you access to raw computing infrastructure — virtual machines, storage, and networking — over the internet. You rent the hardware and manage everything else yourself.

The cloud provider manages:

  • Physical servers

  • Storage hardware

  • Networking hardware

  • Virtualization layer

You manage:

  • Operating system

  • Runtime and middleware

  • Application

  • Data

Azure IaaS Examples

Service

Description

Azure Virtual Machines

Windows/Linux VMs — you control the OS

Azure Managed Disks

Block storage for VMs

Azure Virtual Network

Private network in the cloud

Azure Load Balancer

Distribute traffic across VMs

When to Use IaaS

  • You need full control over the OS and environment

  • You're migrating existing on-premises workloads to cloud ("lift and shift")

  • You're running legacy applications that can't be modified

  • You have specific compliance requirements for the OS configuration

IaaS Analogy

IaaS is like renting a plot of land with a foundation. You get the land (hardware), but you build the house (OS, runtime, app) yourself.


PaaS — Platform as a Service

What Is It?

PaaS gives you a managed platform to build, deploy, and run applications — without managing the underlying infrastructure or OS. The cloud provider handles everything except your application and data.

The cloud provider manages:

  • Physical hardware

  • Virtualization

  • OS and patches

  • Runtime and middleware

You manage:

  • Application code

  • Data

Azure PaaS Examples

Service

Description

Azure App Service

Host web apps, APIs, mobile backends

Azure SQL Database

Managed relational database

Azure Functions

Serverless code execution

Azure Kubernetes Service (AKS)

Managed Kubernetes container orchestration

Azure Cosmos DB

Managed NoSQL database

When to Use PaaS

  • You want to focus on writing code, not managing servers

  • You're building web apps, APIs, or mobile backends

  • You want automatic OS patching and updates

  • You want built-in scaling and high availability without configuration

PaaS Analogy

PaaS is like renting a fully equipped kitchen. The stoves, ovens, and utilities are set up. You just cook (write code) and serve food (deploy your app).


SaaS — Software as a Service

What Is It?

SaaS delivers complete, ready-to-use software applications over the internet. You don't manage anything — just use the software through a browser or app.

The cloud provider manages:

  • Everything — hardware, OS, runtime, and the application itself

You manage:

  • Your data (what you enter/store in the app)

  • User access and permissions

Azure / Microsoft SaaS Examples

Service

Description

Microsoft 365

Word, Excel, Outlook, Teams — all online

Microsoft Teams

Collaboration and communication platform

Dynamics 365

Business applications (CRM, ERP)

Power BI

Business intelligence and dashboards

GitHub

Code hosting and collaboration (owned by Microsoft)

When to Use SaaS

  • You need software up and running immediately with no setup

  • You're using common productivity, collaboration, or business tools

  • You have non-technical users who just need access to an application

  • You don't want to maintain software updates, patches, or servers

SaaS Analogy

SaaS is like ordering food delivery. You don't buy ingredients, cook, or clean up — you just eat. Someone else handles everything.


Side-by-Side Comparison

Aspect

IaaS

PaaS

SaaS

Control Level

High

Medium

Low

Flexibility

Maximum

Moderate

Minimal

Setup Effort

High

Moderate

None

You Manage

OS + App + Data

App + Data

Just your data

Provider Manages

Hardware

Hardware + OS + Runtime

Everything

Best For

Lift-and-shift migration

App development

End-user productivity

Azure Example

Azure VMs

Azure App Service

Microsoft 365


Visual Model

┌───────────────────────────────────────────────────────────┐
│                        SaaS                               │
│         Provider manages EVERYTHING                       │
│         You just USE the software                         │
├───────────────────────────────────────────────────────────┤
│                        PaaS                               │
│         Provider manages infra + OS + runtime             │
│         You manage your APPLICATION + DATA                │
├───────────────────────────────────────────────────────────┤
│                        IaaS                               │
│         Provider manages physical hardware                │
│         You manage OS + middleware + app + data           │
└───────────────────────────────────────────────────────────┘

Shared Responsibility in Each Model

The more control you have, the more responsibility you carry:

On-Premises  →  IaaS  →  PaaS  →  SaaS
More control                    Less control
More work                       Less work
More flexibility                Less flexibility

Real-World Scenario Examples

Scenario 1 — A startup building a web app

Best choice: PaaS (Azure App Service)

  • Developers focus on code, not servers

  • Auto-scaling and patching handled by Azure

  • Faster time to market

Scenario 2 — A company migrating old Windows Server apps

Best choice: IaaS (Azure Virtual Machines)

  • Full control over OS (Windows Server)

  • Minimal changes to existing application

  • "Lift and shift" migration

Scenario 3 — A team using email and documents

Best choice: SaaS (Microsoft 365)

  • No setup required

  • Access from any device via browser

  • Microsoft manages everything


Quick Recap

IaaS → You manage the OS and above. Great for migration.
PaaS → You manage only your app and data. Great for development.
SaaS → You manage nothing. Great for ready-made software.

More control = More responsibility
Less control = Less work, less flexibility

Official References


Next Chapter → Chapter 05: Cloud Deployment Models — Public, Private, Hybrid