Cloud VM
Cloud Virtual Machine
Rented virtual machines run by a cloud provider.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- Runtime
- Containers
- OS
- HypervisorCloud VM
- Firmware
- Hardware
- Data
About
A cloud virtual machine is a server you rent from a provider such as AWS or Azure, instead of owning the hardware. The provider runs the hypervisor and the hardware beneath it, and you manage the operating system and everything above it. This split is called the shared responsibility model.
How to Spot It
These are signs that a system runs Cloud VM, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Reverse DNS (AWS)
ec2-203-0-113-10.eu-west-2.compute.amazonaws.com- DNS name (Azure, opt-in)
<label>.uksouth.cloudapp.azure.com
If It Has a Flaw
You own the risk from the operating system up, and the provider owns the hypervisor and the hardware. The metadata service, an address each virtual machine can reach that tells it about itself, is a common target because it can hand out cloud credentials.
A flaw exposes what runs on it.
- Containers
Docker
Kubernetes
- Operating System
Windows Server
Linux
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach Cloud VM.