The Four Deployment Models
A hospital needs to process patient data that must stay within the country due to healthcare regulations. At the same time, it wants to run a public-facing marketing website with global reach. A bank requires absolute control over its core transaction processing but wants to use AI services from a public cloud provider. Each organization has different constraints that dictate how they deploy cloud resources.
Public cloud means computing resources are owned and operated by a third-party provider, delivered over the public internet, and shared across multiple organizations (tenants). AWS, Microsoft Azure, and Google Cloud Platform are public cloud providers. You rent infrastructure from them with no capital expenditure for hardware, no physical facility to maintain, and no data center staff to employ. The provider handles everything from physical security to hypervisor management. Public cloud is the most common deployment model for startups, SaaS companies, and organizations without strict data residency requirements.
Private cloud means computing resources are dedicated to a single organization. This can be physically located on-premises in your own data center or hosted by a third party. The key distinction is exclusivity: no other tenant shares your infrastructure. VMware vSphere, OpenStack, and platform-specific private clouds like AWS Outposts provide private cloud capabilities. Private cloud offers maximum control and customization. You configure every layer of the stack, from hardware to networking to security policies. The tradeoff is cost and complexity. You pay for capacity whether you use it or not, and your team manages everything.
Hybrid cloud combines public and private clouds, allowing data and applications to move between them. Think of a retail company that runs its transaction processing database on-premises for compliance reasons but uses AWS for its customer-facing website and analytics workloads. AWS Outposts, Azure Arc, and Google Anthos enable hybrid deployments by extending cloud management planes to on-premises infrastructure. Hybrid cloud lets you keep sensitive workloads private while leveraging public cloud scale and services for everything else.
Multi-cloud means using services from multiple public cloud providers simultaneously. A company might use AWS for compute and storage, Azure for its Microsoft integration ecosystem, and Google Cloud for its BigQuery analytics platform. Multi-cloud avoids vendor lock-in and lets you choose best-of-breed services from each provider. The complexity cost is significant: you need expertise across multiple platforms, manage multiple billing relationships, and integrate services that were not designed to work together.
Tradeoffs Across Deployment Models
Every deployment model forces tradeoffs across four dimensions: cost, control, compliance, and operational complexity.
Cost varies dramatically. Public cloud has the lowest barrier to entry with pay-as-you-go pricing and no upfront investment. Private cloud requires significant capital expenditure: hardware, facility, cooling, power, and staff. AWS estimates that the total cost of ownership for a typical enterprise workload is 3-5x higher on-premises than in public cloud when accounting for staff, facilities, and depreciation. Hybrid cloud sits in the middle, with costs depending on how much infrastructure you keep private. Multi-cloud adds operational overhead through duplicated tooling and training.
Control is inversely correlated with cost savings. Public cloud gives you the least control: you cannot modify the hypervisor, choose specific hardware, or configure physical network paths. Private cloud gives you complete control over every layer. Hybrid cloud lets you choose control level per workload. If your database requires specific hardware configurations, run it privately. If your web application is standard, deploy it publicly.
Compliance often dictates deployment model. GDPR requires that EU citizen data remain within the EU. HIPAA mandates specific security controls for healthcare data. Financial regulations in many countries require data sovereignty where data must stay within national borders. Private cloud or on-premises deployments give you physical control over data location. Public cloud providers offer regional deployment options, but the data still resides on shared infrastructure.
Operational complexity increases with each model beyond public cloud. Public cloud is the simplest to operate. Private cloud requires a full operations team. Hybrid cloud requires managing two environments and the integration between them. Multi-cloud multiplies this complexity further, requiring expertise across multiple providers and integration layers. Most organizations underestimate the operational cost of hybrid and multi-cloud.
Real-World Deployment Scenarios
Understanding deployment models is abstract until you see how organizations actually use them.
Public cloud success story: Netflix. Netflix runs its entire streaming platform on AWS. They use over 100,000 EC2 instances, manage petabytes of data in S3, and leverage Lambda for serverless processing. Netflix chose public cloud because they needed global scale, rapid iteration, and the ability to handle massive traffic spikes during new content releases.
Private cloud use case: JPMorgan Chase. The bank processes trillions of dollars in transactions annually. Regulatory requirements demand absolute control over data processing infrastructure. JPMorgan maintains private cloud infrastructure for core banking operations while using public cloud for less sensitive workloads like internal tools and analytics.
Hybrid cloud scenario: General Electric. GE operates manufacturing facilities worldwide with industrial equipment that generates massive data volumes. They use a hybrid approach: on-premises private cloud for real-time manufacturing data processing that requires ultra-low latency, and AWS for analytics, machine learning, and global collaboration tools.
Practical guidance for choosing. Start with public cloud unless you have a specific reason not to. Public cloud is the default for good reason: lowest cost, fastest deployment, least operational burden. Only move to private when compliance or performance requirements demand it. Hybrid makes sense when you have existing on-premises investments and cannot migrate everything at once. Multi-cloud is rarely a starting strategy; it usually emerges organically as organizations grow.
Quiz
1. Which deployment model provides computing resources dedicated to a single organization, either on-premises or hosted?
2. A healthcare startup processes EU patient data under GDPR and also needs to run a global marketing website. Which deployment model best addresses both requirements?
3. What is the primary operational tradeoff of multi-cloud?
4. Which deployment model has the lowest upfront cost?
Flashcards
Question
What is public cloud?
Click to reveal answer
Answer
Computing resources owned by a third-party provider, shared across multiple tenants, delivered over the internet. Examples: AWS, Azure, GCP. Lowest cost, least control.
Question
What is private cloud?
Click to reveal answer
Answer
Computing resources dedicated to a single organization. Can be on-premises or hosted. Maximum control and customization, but higher cost and operational complexity.
Question
What is hybrid cloud?
Click to reveal answer
Answer
A combination of public and private clouds that allows data and applications to move between them. Useful for keeping sensitive workloads private while leveraging public cloud scale.
Question
What is multi-cloud?
Click to reveal answer
Answer
Using services from multiple public cloud providers simultaneously. Avoids vendor lock-in but increases operational complexity.
Revision Notes
Key Takeaways
- 1. Public cloud is the default choice for most workloads: lowest cost, fastest deployment, least operational burden
- 2. Private cloud provides maximum control but requires significant capital expenditure and operations staff
- 3. Hybrid cloud balances public and private, ideal for organizations with compliance requirements
- 4. Multi-cloud avoids vendor lock-in but creates significant operational complexity
- 5. Compliance regulations (GDPR, HIPAA) often dictate which deployment model is required
Interview Tips
- • Compare all four deployment models with specific tradeoffs in cost, control, and complexity
- • Give real-world examples: Netflix for public cloud, JPMorgan for private cloud, GE for hybrid
- • Explain why most organizations start with public cloud and only add complexity when needed
- • Discuss how compliance requirements (GDPR, HIPAA, data sovereignty) constrain deployment choices
Cheat Sheet
Public = shared, cheapest, least control. Private = dedicated, most expensive, full control. Hybrid = public + private. Multi-cloud = multiple providers, no lock-in, high complexity.