The NIST Cloud Computing Reference Architecture defines the core components and actors in cloud computing, including cloud consumers, providers, carriers, auditors, and brokers. It serves as a structured framework to facilitate the design, deployment, and management of cloud services, ensuring clarity and consistency. Each actor plays a distinct role, from consumers who utilize services to auditors who assess performance and security.

1. NIST Cloud Computing
Reference Architecture

2. NIST Cloud Computing Reference
Architecture
• In September 2011, NIST released Special
Publication (SP) 500-292, titled "NIST Cloud
Computing Reference Architecture."
• NIST SP 500-292 provides a structured framework
that defines the basic building blocks of cloud
computing, offering clarity and consistency in
understanding and implementing cloud solutions.
• It serves as a reference point for designing,
deploying, and managing cloud-based systems.

4. NIST cloud computing reference architecture defines
five major actors:
• Cloud consumer,
• Cloud provider,
• Cloud carrier,
• Cloud auditor and
• Cloud broker.
Each actor is an entity (a person or an organization)
that participates in a transaction or process and/or
performs tasks in cloud computing.

5. • Cloud Consumer - A person or organization that maintains a business
relationship with, and uses service from, Cloud Providers.
• Cloud Provider - A person, organization, or entity responsible for making a
service available to interested parties.
• Cloud Auditor - A party that can conduct independent assessment of cloud
services, information system operations, performance and security of the
cloud implementation.
• Cloud Broker - An entity that manages the use, performance and delivery
of cloud services, and negotiates relationships between Cloud Providers
and Cloud Consumers.
• Cloud Carrier - An intermediary that provides connectivity and transport of
cloud services from Cloud Providers to Cloud Consumers.

7. Cloud Consumer:
• Definition: A cloud consumer is an individual or organization that uses services
provided by cloud providers. This role maintains a business relationship with the
provider and utilizes their cloud services.
• Example: A company using cloud-based storage for its data or a software
application hosted on a cloud platform.
Cloud Provider:
• Definition: A cloud provider is an entity responsible for offering cloud services to
users. Providers manage the infrastructure, platforms, or software that consumers
use.
• Example: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform
(GCP).
Cloud Auditor:
• Definition: A cloud auditor is an independent entity that assesses cloud services
to ensure they meet certain standards for performance, security, and compliance.
• Example: A third-party security firm that performs security audits of cloud service
implementations.

8. Cloud Broker:
• Definition: A cloud broker manages the delivery and performance
of cloud services, often negotiating between cloud consumers and
providers. They might aggregate, integrate, or customize services.
• Example: A company that provides a marketplace where
businesses can compare and purchase cloud services from
different providers.
Cloud Carrier:
• Definition: A cloud carrier provides the connectivity and transport
necessary for delivering cloud services from providers to
consumers. They manage the network infrastructure and ens
• ure reliable communication.
• Example: An Internet Service Provider (ISP) that offers the
network connection through which cloud services are accessed.

9. Cloud Consumer
• A cloud consumer represents a person or organization that
maintains a business relationship with, and uses the service from
a cloud provider.
• A cloud consumer browses the service catalog from a cloud
provider, requests the appropriate service, sets up service
contracts with the cloud provider, and uses the service.
• The cloud consumer may be billed for the service provisioned,
and needs to arrange payments accordingly.
• Cloud consumers need SLAs to specify the technical performance
requirements fulfilled by a cloud provider.
• SLAs(Service Level Agreement) can cover terms regarding the
quality of service, security, remedies for performance failures.

11. Cloud Provider
• A cloud provider is a person, an organization; it
is the entity responsible for making a service
available to interested parties.
• A Cloud Provider acquires and manages the
computing infrastructure required for providing
the services, runs the cloud software that
provides the services, and makes arrangement
to deliver the cloud services to the Cloud
Consumers through network access

12. Cloud Provider - Major Activities

13. Service Deployment
Private Cloud-On-Site Private Cloud-he cloud infrastructure is located
within the organization’s premises. The organization manages and
maintains the hardware and software.
Outsourced Private Cloud-the infrastructure is hosted at a third-party
data center, but the cloud environment remains dedicated to the
organization.
Public Cloud - In a public cloud model, the cloud infrastructure and
computing resources are made available to the general public over a
public network.
Hybrid Cloud-A hybrid cloud is a cloud deployment model that combines
two or more distinct cloud environments—such as public clouds,
private clouds, and community clouds—into a single, unified system.
Community Cloud- A community cloud serves a group of Cloud
Consumers which have shared

16. Service Orchestration
• Service Orchestration refers to the composition of system
components to support the Cloud Providers activities in
arrangement, coordination and management of computing
resources in order to provide cloud services to Cloud
Consumers.
• Three Layer:Service, resource abstraction and control layer,
physical resource layer
• Service Layer
SaaS
PaaS
IaaS

17. • Resource abstraction and Control involves creating
virtual representations of physical computing
resources. This enables cloud consumers to manage the
recourses and interact with virtualized resources rather
than directly managing physical hardware.
• Physical resource layer, which includes all the physical
computing resources
• Hardware resource-CPU,Memory, Network
(routers, firewalls, switches, network links and
interfaces), storage components (hard disks)etc
• Facility Resource- heating, ventilation
• and air conditioning (HVAC), power,
communications,

18. Cloud Service Management
Cloud Service Management includes all of the
service-related functions that are necessary for
the management and operation of those
services required by or proposed to cloud
consumers
Eg Configuring and deploying cloud services
according to the requirements of the cloud
consumers.
Assigning and configuring physical or virtual
resources needed to deliver the service.

20. • Security- To protect data and systems from
unauthorized access, attacks, and other
threats, ensuring that data is safe from
breaches and loss.
• Privacy- To ensure that individuals' personal
information is handled according to their
preferences and legal requirements,
safeguarding against misuse or unauthorized
access.

21. Cloud Auditor
• Security audit-Assessing whether security
controls (management, operational, and
technical) are properly implemented according
to the defined policies and standards.
• Privacy impact audit-To ensure that personal
information is protected according to privacy
laws and regulations, and that privacy risks are
managed appropriately.
• Performance audit-

22. Cloud Broker
• A cloud broker acts as an intermediary between cloud service
providers and cloud consumers. They manage and optimize the
use, performance, and delivery of cloud services, facilitating
relationships and transactions between the two parties.
Categories of Cloud Broker Services
Service Intermediation-Enhancing existing cloud services by
adding value through various capabilities.
Service Aggregation-Combining and integrating multiple cloud
services into unified offerings.
Service Arbitrage-Flexibly choosing and managing services from
various providers to meet specific needs.