Computer Science · 10th Grade · Network Architecture and Web Systems · Weeks 19-27

Introduction to Cloud Computing

Students explore the fundamental concepts of cloud computing, including service models (IaaS, PaaS, SaaS) and deployment models.

• Common Core State Standards
• CSTA: 3A-NI-04
• CSTA: 3A-CS-01

About This Topic

Cloud computing has shifted how individuals and organizations manage technology infrastructure, and US 10th graders are already daily users of cloud services whether they recognize it or not. The three primary service models, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS), define how much control a customer retains over the computing stack. Deployment models, public, private, hybrid, and community clouds, define who has access to the infrastructure. This topic addresses CSTA Standards 3A-NI-04 and 3A-CS-01.

Students often struggle to distinguish the service models because the boundaries are not always intuitive. A useful framing is the 'shared responsibility model': in IaaS you manage everything above the physical hardware; in PaaS the provider also manages the OS and runtime; in SaaS the provider manages everything and you only interact with the application.

Active learning is particularly effective here because students can analyze real services they use daily and debate where they fall in the taxonomy, making the classification concrete before moving to security implications and business trade-offs.

Key Questions

1. Differentiate between IaaS, PaaS, and SaaS cloud service models.
2. Analyze the benefits of cloud computing for businesses and individuals.
3. Evaluate the security implications of storing data in the cloud.

Learning Objectives

• Classify specific cloud services (e.g., Google Drive, AWS EC2, Microsoft Azure SQL Database) into IaaS, PaaS, or SaaS categories.
• Compare and contrast the shared responsibility models for IaaS, PaaS, and SaaS environments.
• Analyze the business benefits of adopting cloud computing for a small e-commerce startup.
• Evaluate potential security risks associated with storing sensitive personal data on public cloud platforms.

Before You Start

Basic Internet and Networking Concepts

Why: Students need a foundational understanding of how data travels over networks to grasp the concept of accessing resources remotely.

Client-Server Architecture

Why: Understanding how clients request services from servers is crucial for comprehending the interaction model in cloud computing.

Key Vocabulary

Infrastructure as a Service (IaaS)	A cloud service model where providers offer virtualized computing resources over the internet, allowing users to manage operating systems, middleware, and applications.
Platform as a Service (PaaS)	A cloud service model where providers offer a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure.
Software as a Service (SaaS)	A cloud service model where providers deliver software applications over the internet, on demand, typically on a subscription basis.
Public Cloud	Cloud computing resources, such as servers and storage, owned and operated by a third-party provider and delivered over the public internet.
Private Cloud	Cloud computing resources used exclusively by a single business or organization, which can be located on-premises or hosted by a third-party provider.

Watch Out for These Misconceptions

Common Misconception

Cloud computing means data is stored 'on the internet' with no physical location.

What to Teach Instead

Cloud data is stored on physical servers in geographically specific data centers owned by providers like Amazon, Microsoft, or Google. Understanding that cloud is 'someone else's computer' helps students reason about jurisdiction, latency, and physical security rather than treating the cloud as an abstract, locationless entity.

Common Misconception

SaaS means you own the software you pay for.

What to Teach Instead

With SaaS, you are licensing access to software the provider owns and maintains. You cannot modify the software, install it locally, or access it without the provider's ongoing service. This distinction has major implications for data portability, vendor lock-in, and business continuity planning.

Common Misconception

Public cloud is less secure than private cloud because it is shared.

What to Teach Instead

Major public cloud providers invest heavily in security infrastructure, certifications, and compliance that most organizations cannot replicate privately. Security depends more on how services are configured than on whether the infrastructure is shared. Misconfigured private clouds are often more vulnerable than well-managed public cloud deployments.

Active Learning Ideas

Inquiry Circle: Service Model Sorting

Groups receive cards representing 12 familiar services: AWS EC2, Google Docs, Heroku, Dropbox, Microsoft Azure VMs, Salesforce, GitHub Actions, Gmail, DigitalOcean, Zoom, Google App Engine, and Roblox. They sort these into IaaS, PaaS, and SaaS categories, annotate each with what the customer manages, and present their most debated classification to the class.

30 min·Small Groups

Formal Debate: Cloud vs. On-Premises for a School District

Split the class into a cloud advocate team and an on-premises advocate team for a scenario where a fictional school district must decide where to store 50,000 student records. Each team prepares arguments around cost, security, compliance, and control, then debates for 10 minutes with peer judges evaluating the reasoning.

30 min·Whole Class

Think-Pair-Share: Security Trade-Off Analysis

Present a data breach scenario involving a SaaS company storing educational records. Students individually list three security risks the school accepted by using a cloud provider and three they avoided. Pairs compare lists and identify the most consequential risk, then share with the class.

20 min·Pairs

Real-World Connections

• Netflix utilizes a hybrid cloud strategy, leveraging both public cloud infrastructure for scalability and private cloud components for specific services, to deliver streaming content globally.
• Software developers at companies like Spotify use PaaS offerings to deploy and manage their music streaming applications, focusing on coding rather than server maintenance.
• Small businesses often use SaaS applications like QuickBooks Online or Mailchimp for accounting and marketing, benefiting from reduced IT overhead and accessibility from any device.

Assessment Ideas

Quick Check

Present students with scenarios describing a company's IT needs. For example: 'A startup needs to host its website and database, managing the operating system and application stack.' Ask students to identify the most appropriate cloud service model (IaaS, PaaS, SaaS) and justify their choice.

Discussion Prompt

Facilitate a class discussion using the prompt: 'Imagine you are advising a local library on moving its catalog system to the cloud. What are the primary benefits they might see, and what are two major security concerns they should address before making the switch?'

Exit Ticket

Provide students with three cloud service names (e.g., Dropbox, Heroku, Amazon EC2). Ask them to write down the service model (IaaS, PaaS, SaaS) for each and briefly explain why they classified it that way.

Frequently Asked Questions

What is the difference between IaaS, PaaS, and SaaS cloud service models?

IaaS (Infrastructure as a Service) provides virtualized computing resources like servers and storage, giving users maximum control. PaaS (Platform as a Service) adds a managed runtime environment on top of infrastructure, letting developers focus on writing code. SaaS (Software as a Service) delivers a complete application over the internet, with the provider managing everything from hardware to the user interface.

What are the benefits of cloud computing for schools and businesses?

Cloud computing reduces upfront capital costs by replacing hardware purchases with monthly subscriptions. It enables scaling resources up or down based on demand, supports remote collaboration without physical infrastructure, and shifts maintenance responsibilities to the provider. For schools, this means faster access to software tools and reduced IT overhead.

What are the security implications of storing data in the cloud?

Cloud storage introduces risks around unauthorized access if credentials are compromised, data sovereignty concerns when servers are in other jurisdictions, and dependency on the provider's security practices. Mitigation strategies include strong authentication, encryption of sensitive data before upload, understanding the provider's compliance certifications, and reviewing the shared responsibility model for each service.

How does active learning help students understand cloud service models?

Sorting real, familiar services into IaaS, PaaS, and SaaS categories forces students to apply the shared responsibility framework rather than memorize definitions. Disagreements during sorting, where does GitHub Actions belong? Is Dropbox IaaS or SaaS? generate the most productive discussions and reveal where the conceptual boundaries are genuinely ambiguous.