cheat-sheets

What is Cloud-Computing?

Cloud computing is on-demand access to computing resources (servers, storage, databases, networking, software) over the internet with pay-as-you-go pricing. Provider comparison: Cloud-Provider Comparison. Provider sheets: Amazon Web Services, Google Cloud, Hetzner Cloud, DigitalOcean, Cloudflare, Oracle Cloud, Backblaze B2, Civo.

Service Models #

MODELYOU MANAGEPROVIDER MANAGESEXAMPLES
IaaS (Infrastructure)OS, runtime, app, dataHardware, virtualisation, networkEC2, Azure VMs, Compute Engine, Civo instances
PaaS (Platform)App and dataEverything belowHeroku, App Engine, Azure App Service, Fly.io
SaaS (Software)Your usage and dataEverythingMicrosoft 365, Gmail, Salesforce
FaaS (Functions)Function codeServers, scalingAWS Lambda, Cloud Functions, Azure Functions
CaaS (Containers)Containers and configOrchestration, nodesEKS, GKE, AKS, Civo Kubernetes

Deployment Models #

MODELDESCRIPTION
PublicShared infrastructure run by a provider
PrivateDedicated to one organisation, on-premises or hosted
HybridPublic and private connected together
Multi-cloudUsing more than one public provider

Shared Responsibility #

The provider secures the cloud (hardware, facilities, core services). You secure what you put in it: identities, data, configuration, patching of anything you run.

Key Concepts #

TERMMEANING
RegionGeographic area containing several data centres
Availability ZoneIsolated data centre (or group) within a region
ElasticityScale up and down automatically with demand
Pay-as-you-goBilled per use, usually per second, hour or GB
Reserved / Savings planDiscount for committing 1 to 3 years
Spot / PreemptibleCheap spare capacity that can be reclaimed
EgressData leaving the provider, usually the surprise cost
IaCInfrastructure as Code, see Terraform
ServerlessNo servers to manage, billed per invocation
Object storageFlat, API-accessed storage (S3 style)
Block storageDisk volumes attached to VMs
CDNEdge caching close to users
VPCYour private virtual network inside a provider

Pros and Cons #

PROSCONS
No upfront hardware spendCosts can grow unnoticed
Fast provisioning and global reachVendor lock-in
Built-in resilience and managed servicesEgress and support fees
Elastic scalingShared-responsibility mistakes (open buckets, weak IAM)

Good Habits #

  • Tag every resource for cost tracking.
  • Set budget alerts on day one.
  • Use least-privilege IAM and MFA on the root account.
  • Define infrastructure in code (Terraform) and keep it in Git.
  • Plan for a second AZ for anything important.
  • Delete what you no longer use.
Search all sheets

Tip: / or Ctrl/Cmd+K to open, Esc to close.