# Zadara Cloud Services Overview

Zadara Cloud Services is a full stack of cloud services: Compute,
Networking and Storage. It is protected by Zadara security controls and
provisioned as a managed service, giving any MSP the ability to run an
AWS-compatible private or public cloud within its own data center.

## Cloud Services Administration

Each customer that orders Cloud Services from the Zadara Provisioning
Portal gets an account on a specific cloud in the requested location.
The account contains one Project by default, but additional projects can
be created. A Project is similar to an AWS project or VMware folder,
and is basically a container of resources (VPCs, VMs, ELB, etc.).
Definition of different projects allows separation of resources to different
application groups or environments. The Tenant Admin can assign
roles and policies to users per project.

## Users and Roles

Users are defined with one of two roles: **Account Member**, who can
create, view, modify and delete virtual resources within assigned
projects, or **Tenant Admin**, who additionally manages projects and
users within the account.

**The following services are available for regular users (account
members):**

## Compute

![intro-image1](media/intro-image7.png)

Virtual machines, snapshots, key pairs, and auto scaling groups are all
part of the compute layer. See [Compute Project Overview](compute-project-overview.md) to get
started, or jump directly to [Instance Types](instance-type.md), [Snapshots](snapshots.md),
[Key Pairs](key-pair.md), or [Auto-Scaling Groups](auto-scaling-groups.md).

## Networking

![intro-image2](media/intro-image4.png)

VPCs, subnets, route tables, security groups, and related networking
resources let you build your own private data center within the cloud.
See [Virtual Private Cloud (VPC)](networking-vpc.md#networking-vpc) or [Distributed Virtual Switch (DVS)](networking-dvs.md#networking-dvs).

## Storage

![intro-image3](media/intro-image2.png)

Block storage (EBS-compatible) and file share services are provided via
Zadara VPSA. See the
[VPSA Storage Array guide](http://guides.zadarastorage.com/vpsa-storage-array/)
and [VPSA Object Storage guide](http://guides.zadarastorage.com/vpsa-object-storage/)
for details.

## Load Balancing

![intro-image4](media/intro-image6.png)

The Managed Load Balancer service supports AWS ELB-compatible load
balancers, target groups, and listeners. See [Load Balancing](setup-lb.md).

## Machine Images

![intro-image5](media/intro-image3.png)

VM images can be used as-is from the Images Marketplace, or customized
and imported. See [Machine Images](machine-images.md).

## Monitoring

![intro-image6](media/intro-image8.png)

Events, alarms, and visualized metrics for CPU, memory, storage, and
network usage are available across the system, per-instance, and
per-volume. See [Monitoring zCompute Events](monitoring-compute-events.md).

## Certificates

To secure your cloud domain name, import an SSL certificate from a
trusted Certificate Authority. See [Certificates](ssl-certificates.md).

## Protection

A Protection Group is a backup policy that defines the backup window,
recurring schedule, and retention period for a project. See
[Data Protection using Protection Groups](protection-groups.md).

**In addition to the member services above, the following services are
available for Tenant Admins:**

## Identity and Access

![intro-image8](media/intro-image1.png)

Tenant Admins manage account state, projects, users, access keys, AWS
roles, and API policies. See [Introduction to Identity and Access](iam-introduction.md).