Last updated: May 2026
Azure Fundamentals Beginner AZ-900 ⏱ 12 min read

IaaS vs PaaS vs SaaS

When you use the cloud, you're not always using it the same way. Sometimes you rent raw servers. Sometimes you deploy apps without managing any servers at all. Sometimes you just use software over the internet. These three patterns have names: IaaS, PaaS, and SaaS — and understanding the difference is fundamental to both cloud architecture and the AZ-900 exam.

What you'll learn What IaaS, PaaS, and SaaS mean · Real-world examples of each · The pizza analogy that makes it click · Shared responsibility in each model · When to use which · Azure examples of each service model

The Three Service Models — Overview

Cloud computing is delivered in three fundamental service models. The key difference between them is how much of the stack you manage vs how much the cloud provider manages.

ModelYou ManageProvider ManagesBest For
IaaSOS, middleware, apps, dataServers, storage, networkingMax control
PaaSApps and data onlyEverything elseDevelopers
SaaSJust your data and who uses itEverythingEnd users

The Pizza Analogy

This is the most famous analogy in cloud computing — and it makes the three models instantly clear.

Imagine you want pizza. You have four options:

OptionWhat You DoCloud Equivalent
🏠 Make at HomeBuy ingredients, make dough, bake, serveOn-Premises — you manage everything
🛒 Buy & BakeBuy a ready-made pizza, put it in your ovenIaaS — provider gives you the oven (infrastructure); you do the rest
🍕 Dine InSit at a restaurant, order, eatPaaS — provider manages the kitchen; you just bring your recipe (code)
🛵 Home DeliveryOpen the door, eatSaaS — everything is done for you; just consume

Infrastructure as a Service (IaaS)

IaaS gives you the raw building blocks of cloud computing. The provider gives you virtual machines, storage, and networking — and you manage everything on top of that.

Think of it as renting land and an empty building. You're responsible for fitting it out, decorating it, and maintaining the interior. The landlord (cloud provider) maintains the building structure and grounds.

What the Provider Manages (Microsoft)

  • Physical servers and hardware
  • Physical networking and switches
  • Physical storage
  • The data centre (power, cooling, security)
  • Virtualisation layer (Hypervisor)

What You Manage

  • Operating system (installation, patching, updates)
  • Middleware and runtime environments
  • Applications
  • Data
  • Security configuration
💡
Real Azure IaaS Example Azure Virtual Machines is the classic IaaS service. You choose the VM size, install Windows or Linux, install your software, configure firewalls, and manage OS patches yourself. Azure provides the underlying hardware and keeps it running.

When to Use IaaS

  • Migrating existing on-prem workloads to cloud (lift and shift)
  • You need full control over the OS and environment
  • Running legacy applications that need a specific OS version
  • Custom networking configurations that PaaS won't support
⚠️
The Downside of IaaS With great power comes great responsibility. You must patch the OS, handle security hardening, manage backups, and monitor the VM yourself. If you forget to apply a security patch, your VM is vulnerable — Azure won't do it for you.

Platform as a Service (PaaS)

PaaS removes the burden of managing infrastructure and operating systems. The cloud provider manages everything up to and including the runtime environment. You just bring your code and data.

Think of it as renting a fully equipped kitchen in a restaurant. The restaurant provides the stoves, ovens, utensils, and staff to clean up. You just bring your recipes and cook.

What the Provider Manages (Microsoft)

  • Everything in IaaS (hardware, networking, storage)
  • Operating system (installation and patching)
  • Middleware and runtime
  • Scaling infrastructure

What You Manage

  • Your application code
  • Your data
  • Application configuration
💡
Real Azure PaaS Example Azure App Service lets you deploy a web application by just pushing your code. Azure handles OS updates, patching, load balancing, auto-scaling, and server management. You never SSH into a server. You just deploy code and it runs.

When to Use PaaS

  • You want to focus on writing code, not managing infrastructure
  • Building web applications, APIs, or mobile backends
  • Your team is small and can't afford a dedicated infrastructure team
  • You want automatic scaling and patching without manual effort

Software as a Service (SaaS)

SaaS is complete software delivered over the internet. You don't manage any infrastructure, no OS, no platform, no application code. You just use the software through a browser or app.

Think of it as ordering food delivery. You don't cook, don't clean, don't even leave your house. Someone else handles absolutely everything — you just eat.

What the Provider Manages (Microsoft)

  • Everything — hardware, OS, platform, application, updates, security, scaling

What You Manage

  • Your data inside the application
  • Who has access (user management)
  • Application configuration settings
💡
Real Azure SaaS Example Microsoft 365 (formerly Office 365) is SaaS. You open Word, Excel, or Outlook in a browser. Microsoft handles all the servers, updates, security patches, and infrastructure. You just use the software and manage your documents.

Common SaaS Examples

  • Microsoft 365 — Word, Excel, Teams, Outlook
  • Gmail — Email service
  • Salesforce — CRM platform
  • Zoom — Video conferencing
  • Dropbox — File storage and sharing

Side-by-Side Comparison

ComponentOn-PremisesIaaSPaaSSaaS
Physical hardwareYouMicrosoftMicrosoftMicrosoft
NetworkingYouMicrosoftMicrosoftMicrosoft
VirtualisationYouMicrosoftMicrosoftMicrosoft
Operating systemYouYouMicrosoftMicrosoft
Middleware / RuntimeYouYouMicrosoftMicrosoft
ApplicationYouYouYouMicrosoft
DataYouYouYouYou
ℹ️
Pattern to Remember As you move from IaaS → PaaS → SaaS, you manage less and less. The provider takes on more responsibility. But you also have less control and flexibility. Choose based on how much control you need vs how much you want to manage.

When to Use Which?

ScenarioBest ModelWhy
Migrate existing app with no code changesIaaSLift-and-shift — you need full OS control
Deploy a new web app quicklyPaaSFocus on code, not infrastructure
Give employees email and Office toolsSaaSNo management needed — just use it
Run a custom database with specific configIaaSNeed full control over DB engine and OS
Build and deploy a REST APIPaaSAzure App Service handles everything except your code
Video meetings for your teamSaaSJust use Teams or Zoom — no setup needed

Azure Examples of Each Model

Azure IaaS Services

  • Azure Virtual Machines — Windows or Linux VMs, full OS control
  • Azure Virtual Network — Custom network configuration
  • Azure Managed Disks — Block storage for VMs
  • Azure Blob Storage — Raw object storage

Azure PaaS Services

  • Azure App Service — Host web apps and APIs without managing servers
  • Azure SQL Database — Fully managed relational database
  • Azure Functions — Serverless compute — just write functions
  • Azure Kubernetes Service (AKS) — Managed Kubernetes cluster
  • Azure Cosmos DB — Fully managed NoSQL database

Azure SaaS Services

  • Microsoft 365 — Word, Excel, Teams, Outlook, SharePoint
  • Microsoft Dynamics 365 — CRM and ERP platform
  • Microsoft Intune — Device management
  • Microsoft Defender — Security as a service
💡
AZ-900 Exam Tip The exam often gives you a scenario and asks which service model applies. The key question to ask is: "Who manages the operating system?" If the customer manages the OS → IaaS. If Microsoft manages the OS → PaaS or SaaS. If it's complete software you just use → SaaS.
📝 Practice Questions
Click an option to check your answer. AZ-900 style questions.
Q1. A company is using Microsoft 365 for email and productivity tools. Which cloud service model does this represent?
A IaaS
B PaaS
C SaaS
D On-premises
Q2. A developer wants to deploy a web application without worrying about OS patching, server maintenance, or scaling infrastructure. Which service model should they use?
A IaaS
B PaaS
C SaaS
D On-premises
Q3. A company wants to migrate their existing on-premises application to Azure with minimal code changes and needs full control over the operating system. Which service model is most appropriate?
A IaaS
B PaaS
C SaaS
D On-premises
Q4. In which cloud service model is the customer responsible for managing the operating system?
A IaaS only
B PaaS only
C SaaS only
D Both IaaS and PaaS
Q5. Which of the following Azure services is an example of PaaS?
A Azure Virtual Machines
B Microsoft 365
C Azure App Service
D Azure Blob Storage
Comments
Disclaimer: RedKite Cloud is an independent educational resource and is not affiliated with, endorsed by, or officially connected to Microsoft Corporation. All product names, logos, and trademarks are property of their respective owners. Content is written independently for educational purposes only.