Cloud Service Providers (Csps) Explained

The cloud was initially looked at with scepticism over the risk of handing over control to another party. Today’s digital age, however, is firmly anchored in a cloud-first approach.

In particular, startups are innovatively disrupting incumbents due to their ability to quickly set up on public clouds without the upfront capital required to set up the IT infrastructure by themselves. And with the global pandemic heightening the need for remote working, being cloud native is fast becoming a key differentiator for corporate success.

Gartner forecasts that worldwide end-user spending on public cloud services will grow by 23.1% in 2021 to total $332.3 billion. Cloud capabilities are extremely useful for leveraging new technologies—artificial intelligence, containerization, and IoT—while providing the flexibility that agile and DevOps approaches prefer.

Who are cloud service providers?

For your company to access public cloud services, you need to engage a cloud service provider (CSP). In simple terms, the CSP makes cloud services available to consumers.

According to the NIST Cloud Computing Reference Architecture, NIST SP 500-292, a CSP:

• Acquires and manages the cloud computing infrastructure
• Runs the cloud software that provides the services
• Makes arrangements to deliver the cloud services to consumers through network access

The main advantages that CSPs offer over traditional hosting services include:

• Immediate access to more services. A wide variety of capabilities and integrations.
• Usage-based pricing. Billing based on time use or capacity.
• Global scale. Coverage across most of the developed world.

There are 5 major players in the public cloud infrastructure space who command over 80% market revenue share, per Gartner in 2020:

The rest of the pie is shared among some international and local-based players. While some were dedicated cloud service providers from the start, others originated from internet service providers who simply saw the gap in providing data centre services which evolved into cloud services. Others who exploited the same gap evolved from web hosting providers and computing hardware providers.

(View availability regions & zones for major CSPs.)

What do CSPs provide?

CSP service offerings are broadly grouped into three main categories:

• Infrastructure as a Service (IaaS). This includes the physical computing resources underlying the service, including the servers, networks, storage, and hosting infrastructure, that are through a set of service interfaces and computing resource abstractions such as virtual machines. The customer makes selections based on desired computing resources such as processing, memory, capacity, and bandwidth, and manages the upper layers themselves.
• Platform as a Service (PaaS). This includes the computing infrastructure for the platform and runs the cloud software that provides the components of the platform, such as the runtime software execution stack, databases, and other middleware components. The customer makes selections based on the requirements of the applications they intend to install and manage by themselves.
• Software as a Service (SaaS). Here, the CSP deploys, configures, maintains, and updates the operation of the software applications on a cloud infrastructure, and provides an interface for the customer to access the applications. The customer only has some limited administrative control and customization capabilities.

(Read our full IaaS, PaaS, SaaS explainer.)

However, these groupings do not adequately capture many of the capabilities that CSPs are currently providing, including containers (CaaS), serverless computing (FaaS), storage, edge computing, private cloud, and AI/ML platforms.

The table below outlines a sample of the many offerings from some of the major providers:

NIST SP 500-292 defines 5 major activities that CSPs perform:

• Service deployment. The operation of cloud infrastructure by the CSP on behalf of the consumer based on the following deployment models: public cloud, private cloud, hybrid cloud, or community cloud.
• Service orchestration. The activities involved in the arrangement, coordination, and management of computing resources through the composition of system components to provide cloud services to consumers.
• Cloud service management. The service-related functions that are necessary for the management and operation of those services required by or proposed for cloud consumers, including business support, provisioning and configuration, and facilitating data portability and interoperability.
• Security. Implementing security controls across the entire cloud service architecture and working with consumers and third parties to reduce attack surfaces, tackle vulnerabilities, and limit the impact of threats.
• Privacy. Protecting the assured, proper, and consistent collection, processing, communication, use, and disposition of consumer personal information (PI) and personally identifiable information (PII) stored in the cloud.