NIST Cloud Reference Model and Architectural Layers
What is a Reference Model?
A Reference Model is a standard blueprint or conceptual diagram that explains how all the pieces of a cloud system fit together, who the key players are, and how they interact with each other.
The NIST Cloud Computing Reference Architecture (SP 500-292) is the official standard studied in university courses worldwide.
1. The 5 Major Actors in the NIST Cloud Model
The 5 Core Actors of NIST Cloud Reference Architecture
1. Cloud Consumer
The person or organization that uses cloud services
2. Cloud Provider
The company that builds and sells cloud services (AWS, Azure)
3. Cloud Auditor
Independent party verifying security, privacy, and compliance
4. Cloud Broker
Middleman managing relationships across multiple cloud vendors
5. Cloud Carrier
Telecom/network provider delivering data connectivity (Jio, Airtel)
Understanding the 5 Actors with a Simple Example:
Imagine booking a flight ticket:
- Cloud Consumer: You (the passenger who buys the ticket and takes the flight).
- Cloud Provider: Air India or IndiGo (the airline owning the airplanes and providing the flight service).
- Cloud Auditor: DGCA (Directorate General of Civil Aviation - the government inspector checking flight safety rules).
- Cloud Broker: MakeMyTrip or EaseMyTrip (the aggregator website comparing multiple airlines and getting you the best deal).
- Cloud Carrier: The airport runways and airspace navigation system enabling the plane to travel.
2. The Architectural Layers of Cloud Computing
Cloud architecture is organized into four distinct layers from bottom to top:
+-----------------------------------------------------------+
| 4. Application Layer (SaaS: Gmail, Salesforce, Office365) |
+-----------------------------------------------------------+
| 3. Platform Layer (PaaS: Java/Python runtimes, Databases) |
+-----------------------------------------------------------+
| 2. Infrastructure Layer (IaaS: VMs, Block Storage, VPC) |
+-----------------------------------------------------------+
| 1. Physical Resource Layer (Data centers, Servers, Cables)|
+-----------------------------------------------------------+- Physical Resource Layer: The actual hardware—server racks, CPUs, power supplies, fiber-optic cables, and data center cooling.
- Infrastructure Layer (IaaS): Virtualization software (Hypervisors) dividing physical hardware into virtual machines, virtual networks, and storage volumes.
- Platform Layer (PaaS): Operating systems, programming runtimes (Node.js, Java JVM), middleware, and managed database software.
- Application Layer (SaaS): The top-level software interfaces that end-users see and interact with in their web browsers.
💡 DAVV Exam Tip
Question (10 Marks): “Draw and explain the NIST Cloud Computing Reference Architecture. Explain the role of each actor.”
- Name all 5 actors: Consumer, Provider, Auditor, Broker, Carrier.
- Explain each actor with a 2-line description and a real-world analogy.
- Draw the 4-layer architecture diagram (Physical -> Infrastructure -> Platform -> Application).