A security architect is establishing cloud governance standards for a financial enterprise's new data analytics project. The selected cloud service architecture requires the cloud vendor to maintain physical server hardware, hypervisors, operating system patching, runtime environment updates, and database engine software. However, the organization's internal development team must maintain exclusive control over application code deployment, database schema configurations, API logic, and access permissions. The organization strictly forbids managing host operating system kernels or underlying virtual machine instances. Which cloud service model satisfies all of these administrative constraints?
- Platform as a Service (PaaS)Answer
- BInfrastructure as a Service (IaaS)
- CSoftware as a Service (SaaS)
- DDesktop as a Service (DaaS)
Answer
Platform as a Service (PaaS) is the correct service model because the vendor manages infrastructure hardware, hypervisors, operating systems, and runtime engines, while the customer manages application code and data.
Platform as a Service (PaaS) delivers hardware, virtual hypervisors, operating systems, and execution runtimes (such as database engines or application environments) as a managed service. This matches the scenario criteria by leaving application development and data management to the customer while preventing direct access to or maintenance of the underlying OS and server infrastructure.
Step-by-Step Solution
Key Concept
Cloud Shared Responsibility Model (IaaS vs PaaS vs SaaS)