Question 1

What is the difference between DevOps as a Service and individual SaaS tools?

Accepted Answer

Individual tools solve isolated problems. DevOps as a Service provides an integrated, managed platform – including responsibility for availability, security, and the interaction of all components.

Question 2

Does DevOps as a Service replace an internal devops team?

Accepted Answer

No. Teams remain responsible for architecture, code, and the operation of their applications. DevOps aaS replaces platform operations, not expertise.

Question 3

Who is responsible if production operations fail?

Accepted Answer

Responsibility is clearly shared: platform-related issues fall to the provider, while application-related errors remain the responsibility of the team.

Question 4

How can you prevent CI/CD from becoming a security risk?

Accepted Answer

Through built-in security mechanisms, role-based access control, audit logs, and automated checks – implemented from the start.

Question 5

How complex is the migration from an existing toolchain?

Accepted Answer

The effort depends on the current maturity level, but migration can usually be implemented gradually and with low risk.

Question 6

Which signals should monitoring provide in a toolchain context?

Accepted Answer

Beyond availability, key indicators include pipeline lead times, error rates, resource utilization, and security events.

Question 7

Which question should you always ask a provider?

Accepted Answer

Who operates, patches, and takes responsibility for the platform in daily operations – including nights and weekends?

Question 8

What is a tenant?

Accepted Answer

When logging in to T Cloud Public for the first time, a tenant is assigned to the login email address. This tenant comes in the form of a long string of characters, and forms the basis of the business relationship between the user and Deutsche Telekom. In addition, it is required for invoicing processes.

Question 9

Why do I need a virtual private cloud?

Accepted Answer

The Virtual Private Cloud (VPC) is a basic functionality of T Cloud Public. In order to work in the cloud environment, users are assigned a dedicated work area within a unique internal IP range. This serves to isolate the individual user networks from one another. The VPC is a basic security function within the public cloud.

Question 10

What are quotas and why do I need them?

Accepted Answer

When setting up a tenant, a basic limit or maximum value for using T Cloud Public resources is defined in the system. These limits or maximum values are also referred to as quotas. Quotas are a simple and basic tool for limiting the costs incurred when using T Cloud Public. The quotas can be adjusted at any time by contacting our Service Desk by phone or email.

Question 11

What roles are available in T Cloud Public?

Accepted Answer

Roles regulate the rights on T Cloud Public. The commercial and technical administrators have the most extensive rights. These roles are mandatory.Commercial administratorThe commercial administrator is the contract holder and can initiate contractual changes in his role. Furthermore, the commercial administrator has access to the Financial Dashboard. This role does not have access to T Cloud Public Console as standard.Technical AdministratorThe technical administrator is the enterprise administrator and has the right to authorise further users to a tenant via Identity and Access Management (IAM) and to define granular rights management. The technical administrator does not have access to financial data, such as the financial dashboard or the billing history.

Question 12

What is the purpose of projects?

Accepted Answer

Projects enable users to “share” a tenant, making it possible to clearly distinguish between the resources of various teams working on different projects within a company. Up to 50 projects can be created within each tenant.

Question 13

How many regions or availability zones does T Cloud Public cover?

Accepted Answer

Our services need to be distributed across several Availability Zones (AZs) in order to ensure maximum reliability. T Cloud Public currently offers two regions with a total of six AZs (as of July 2021): three AZs in Magdeburg and Biere in Germany, and three AZs in Amsterdam in the Netherlands. This allows us to meet the geo-redundancy requirements of the Federal Office for Information Security (BSI).

Question 14

What role does MyWorkplace play within T Cloud Public?

Accepted Answer

MyWorkplace is a higher-level user portal for managing all cloud services offered by Deutsche Telekom. T Cloud Public is one of these services. Among other things, you can use MyWorkplace to view your invoices and your Financial Dashboard, or to create support tickets.

Question 15

How can end users access my cloud service via the internet?

Accepted Answer

If you wish to make a service publicly available on the internet, you need to release your resources within T Cloud Public. To do this, use the Elastic IP (EIP) service to assign a public IP address. This EIP is used to forward users to various resources, e.g. to an Elastic Cloud Server (ECS) in the simplest case, but also to an Elastic Load Balancer (ELB) or a NAT Gateway for accessing several resources at the same time.

Question 16

How can I access T Cloud Public?

Accepted Answer

The public cloud version of T Cloud Public can be accessed via the internet. To this end, you can use a Virtual Private Network (VPN) to establish an encrypted connection between your own data center and a Virtual Private Cloud (VPC) in T Cloud Public. For professional use, T Cloud Public also allows users to establish dedicated network connections. For internal connections to T Cloud Public, you need to use the Direct Connect (DC) service.

Question 17

What login options are available?

Accepted Answer

As a general rule, there are three options for logging in to T Cloud Public.For logging in manually, click “T Cloud Public Console“ in the footer of T Cloud Public website. You are directed to a page where you need to enter your user name and password. The login can also be configured to use two-factor authentication.Also in the footer of the website there is a link to MyWorkplace: This is the recommended method for the initial login of the tenant admin. However, it is only available to a limited number of users.You can also set up automated access options via API.

Question 18

Which resources can be encrypted?

Accepted Answer

A broad range of services offer encryption capabilities, e.g. Object Storage Service (OBS), Elastic Volume Service (EVS), Image Management Service (IMS), Scalable File Service (SFS) and Relational Database Service (RDS).. Encrypted Elastic Cloud Server (ECS) can only be created by choosing a private image previously created/shared/migrated by customer. The customer master keys are stored in the Key Management Service (KMS)  of T Cloud Public.  The KMS also includes the option of configuring your own key (bring your own key). T Cloud Public uses a hardware security module that creates high-entropy keys. Using third-party tools, keys can also be stored on local hard drives.

Question 19

What technical security measures does T Cloud Public offer?

Accepted Answer

T Cloud Public is operated in certified high-security data centers located in Germany. Basic security measures include setting up a Virtual Private Cloud (VPC) for different users, establishing Security Groups, ensuring the availability of Web Application Firewalls (WAF) and providing Anti-DDoS in the cloud. In addition, the data in the various storage services can be encrypted. Deutsche Telekom has also implemented comprehensive technical and organizational measures to protect T Cloud Public. These measures are described in detail in “Ergänzende Bedingungen Auftragsverarbeitung (ErgB-AV) für T Cloud Public” (only available in German).

Question 20

What certifications does T Cloud Public offer?

Accepted Answer

T Cloud Public offers various certifications  that cover IT operations in general and cloud environments. Here you will find an overview of all recent certifications.

Question 21

How does the VPC of T Cloud Public work?

Accepted Answer

T Cloud Public's VPC separates the virtual resources of the various users from one another in several ways:Reserved IP address range: An IP range reserved exclusively for each user prevents unauthorized access. Connection options such as IP VPN or Elastic IP allow resources to be released in a targeted manner.Software Defined Networking (SDN): Virtual network resources are completely decoupled from the underlying hardware and offer maximum flexibility and security.Multi-dimensional access protection: Users can additionally restrict access to their own VPC with security groups and firewalls.

Question 22

What connection options are there?

Accepted Answer

Effective use of the VPC requires a fast and stable network connection. T Cloud Public offers various options:Direct Connect: Dedicated connection with bandwidths from 1 MBit to 10 Gbit/s for maximum stability.VPC-Endpoints: Efficient connection between resources within the cloud, without additional gateways or internet costs.

Question 23

How can I run my applications in T Cloud Public?

Accepted Answer

As a general rule, all applications can be used in T Cloud Public. The ideal option would be to use cloud-native applications. Such applications are capable of unlocking the full potential of cloud environments, such as automatic scaling. But conventional applications can also be operated on cloud servers. This works in a similar manner as with physical servers: Select a flavor with the appropriate size and install an image of your application on the server. The running application can then be stored as a private image in your Virtual Private Cloud (VPC). Please observe any licensing issues. T Cloud Public also offers dedicated hardware solutions such as Bare Metal Server (BMS), which can be used for high-performance computing and other scenarios.

Question 24

What do I have to consider in terms of software licenses?

Accepted Answer

Contact the software (or database) provider to clarify the rights of use you have acquired. Many providers allow the software to be used in various infrastructures. However, licensing fees may change, for example when using the software on several virtual servers. The type of server on which the software runs can also influence licensing fees. Dedicated Hosts (DeH), Bare Metal Server (BMS) and other solutions can help to resolve some licensing issues. Make sure that your licensing model covers the intended scope of the application (including any potential scaling). Open-source software can generally be used without any problems.

Question 25

What backup options does T Cloud Public offer?

Accepted Answer

T Cloud Public includes various disaster recovery and backup functions. The Volume Backup Service (VBS) allows you to create manual or automatic backups of individual Elastic Volume Services (EVS) – complete backups or snapshots – in intervals of up to one hour. The Cloud Server Backup Service (CSBS) enables you to create full backups of several EVS used by one server. Backup software from third parties can also be used with T Cloud Public.

Question 26

What backup software is compatible with T Cloud Public?

Accepted Answer

All backup software solutions that allow the use of cloud storage can also be run on T Cloud Public. In most cases, software providers certify or approve their use in cloud environments. We specifically recommend the offers by Commvault, IBM, Rubrik and Veeam, which have already been tested with T Cloud Public. If you wish to use a different software solution, please contact the corresponding provider in case you have any doubts.

Question 27

How do I migrate data to T Cloud Public?

Accepted Answer

The OBS Browser is a convenient solution for copying even larger quantities of data into the Object Storage Service (OBS) of T Cloud Public.

Question 28

Can containers and orchestration software be used in T Cloud Public?

Accepted Answer

Yes. The Cloud Container Engine (CCE) in T Cloud Public is a state-of-the-art Kubernetes variant with a GUI that enables the use of containers. In addition, the platform supports the Infrastructure-as-Code approach. Users can choose between several Infrastructure-as-Code (IaC) tools, such as Ansible and Terraform – the latter is officially verified for use with T Cloud Public.

Question 29

Is it possible to send emails via T Cloud Public?

Accepted Answer

Yes. If you want to run your own mail server in T Cloud Public, you need certain open ports to send through the firewall. Mail BGP makes these available to you. In addition, you can protect yourself from blacklisting with the Secure Mail Gateway.Furthermore, there is the E-Mail Protect Pro mailing service from T-Systems, which can also be used as part of T Cloud Public.T Cloud Public service Simple Message Notification (SMN) also allows you to send mails.

Question 30

Can several servers be assigned to one IP address?

Accepted Answer

The NAT Gateway with its source/destination NAT (SNAT/DNAT) allows you to map multiple virtual servers to a single IP address.

Question 31

Does IAM manage all access in T Cloud Public landscape?

Accepted Answer

IAM is an integral part of the cloud landscape and is used to control access to services. However, it is used to control the management of products via the management console or API. For example, IAM does not manage access to the operating system of an ECS instance or the root account of an RDS instance.

Question 32

What standard IAM permissions are available?

Accepted Answer

Permissions are described in the Help Center.

Question 33

How can I create custom IAM policies according to my needs?

Accepted Answer

This is described in the Help Center. In addition, this blog article gives an overview of the supported actions per service.

Question 34

How do I order T Cloud Public services?

Accepted Answer

The best way to order services is via the eShop. Please bear in mind that T Cloud Public is only offered to business users in Europe. If you have a personal sales contact, you can also order services through them.

Question 35

Where can I change my contract data?

Accepted Answer

You can change your contract data in the eShop. This includes all invoicing arrangements such as method of payment, invoice address and sending of invoices. You can also subsequently change the modalities of your tenant and switch to a reserved package, for example.

Question 36

Can I test T Cloud Public services free of charge?

Accepted Answer

Yes. Simply use the voucher code 4UTCP250 and claim a starting credit of €250, enabling you to try all functions of T Cloud Public for two months.

Question 37

What are reserved packages?

Accepted Answer

Public cloud resources are usually offered as part of pay-as-you-use models. T Cloud Public also offers such models, as well as “reserved” packages with considerable discounts for the continuous use of resources. An overview of these discounts can be found in the Price calculator. Reserved packages are available for 12, 24, or 36 months, and can be paid via a monthly partial fee or settled in full in advance (additional discount). The booked resources can be used for various application scenarios.

Question 38

How can I order reserved packages?

Accepted Answer

Like all T Cloud Public services, reserved packages can be ordered from the eShop or via direct sales.

Question 39

Are reserved packages renewed automatically at the end of the term?

Accepted Answer

No. Reserved Packages are not renewed automatically. If you do not place a follow-up order and continue to use the resources after the contract term has expired, the resources are billed in accordance with the pay-as-you-use model.

Question 40

Can the reserved packages be used flexibly?

Accepted Answer

The reserved packages are tied to a specific type of flavor. While you can use several different flavors at the same time, this also means that the available quota will be exhausted more quickly. You can also opt for larger flavors, but this must be coordinated with customer support.

Question 41

What options are available for monitoring the use of resources and incurred costs?

Accepted Answer

Using the basic functions of Cloud Eye (CES) and Price Online Display (POD), financial managers can gain easily understandable insights into usage and budget consumption for cloud usage. Quotas can be used to set a cost limit. Cloud Trace (CTS) serves as a monitoring tool and provides an overview of who has accessed which resources and when. Comprehensive information on resource usage and a detailed cost overview is provided by the Financial Dashboard.

Question 42

What are tags and what are they used for?

Accepted Answer

Tags are used to mark and identify individual resources in T Cloud Public with the help of the Tag Management Service (TMS). Up to 10 of these tags can be assigned to nearly all services, enabling you to allocate resources internally. The tags can also be displayed in the Financial Dashboard, which allows you to both identify the used resources and assign them to internal cost centers, for example.

Question 43

Who can I contact if I have questions about T Cloud Public?

Accepted Answer

You can contact our Service Desk 24/7 at 0800 3304477 (Germany) or +800 33044770 (International). Alternatively, you can contact us via the contact sheet or ask your question directly in the T Cloud Public Community.

Question 44

Where can I inform myself if I have questions about T Cloud Public?

Accepted Answer

Visit our support page to find videos, screencasts and tutorials with detailed and informative descriptions of the functions of T Cloud Public. Helpful user guides and technical specifications for all services can be found in the Help Center. Another great source of information is our content in T Cloud Public Community like the blog.

Question 45

Where can I get dedicated technical support for my plan/project on T Cloud Public?

Accepted Answer

We are happy to support you and respond to your specific requirements and questions. Cloud architects, IT specialists and service delivery managers are available for this purpose. You can find out more about our expert support and Enterprise Agreements here.

Question 46

Where can I turn to for training courses on T Cloud Public?

Accepted Answer

We offer training courses for individual users and teams. Split into four modules, the course can be held online or directly on site and offers practical insights into T Cloud Public. Participants can be certified after completing the training course.

Question 47

Where can I find information about switching cloud providers in accordance with the Data Act?

Accepted Answer

We have summarized all information about switching cloud providers in accordance with the Data Act on the following page. You will also find the application form there: Switch of cloud provider

Question 48

Why isn't a single European data center location enough?

Accepted Answer

In addition to location, jurisdiction, operator structure, and governance are also relevant. The whitepaper categorizes these factors and outlines proven criteria for selection.

Question 49

What sets European cloud providers apart in practice?

Accepted Answer

According to the white paper, the key factors are IAM maturity, integration with identity services (e.g., Microsoft Entra ID), managed service maturity, and support for infrastructure as code (Terraform).

Question 50

How up-to-date is the white paper?

Accepted Answer

The study was conducted in October 2025 and provides a snapshot of the market. The market is evolving rapidly; regular reevaluation is recommended.

Question 51

Who is this white paper particularly relevant for?

Accepted Answer

For IT decision-makers, CIOs, cloud architects, and organizations with high standards for compliance, governance, and data sovereignty.

Question 52

How is T Cloud Public rated by external sources?

Accepted Answer

For an overview of analyst and media awards, including sources, see: Awards

Question 53

What is Disaster Recovery?

Accepted Answer

Disaster recovery is all about preparing for incidents that hinder or completely shut down a company's operations. These can be high-profile disasters such as floods, fires or terrorist attacks, but also minor accidents that don't appear on TV such as burst pipes, cable fires, infection by ransomware or simply unintentional deletion of data. Such disasters result in buildings, machines and IT equipment being damaged and unusable. But they also affect companies indirectly: for example, when power, water or communication facilities fail, or employees cannot show up for work because their means of transportation are unavailable. Even a few days of business interruption cause companies to lose customers. They threaten the very existence of the company. The goal of disaster recovery is to ensure operations despite unpredictable events and to minimize any negative impact on a company or organization. To do this, management creates a disaster recovery plan that outlines how emergency teams will be assembled and servers, networks, phone systems or data storage will be restored after a disaster. Preparing for potential disasters is not only smart, but often a prerequisite for doing business: That's because disaster recovery is often a requirement for companies that provide IT services. For example, many customers require an ISO 27001 certification for disaster recovery from their service providers.

Question 54

What is a Disaster Recovery Plan?

Accepted Answer

The Disaster Recovery Plan provides measures, procedures and guidelines on how to react in the event of a failure in order to minimize the impact on the company. Its goal is to keep IT system downtime to a minimum in the event of an emergency so that the company can resume operations as quickly as possible. Therefore, it lists step by step the measures that the IT emergency team should implement in the event of a disaster. It also defines information channels, escalation levels and responsibilities.

Question 55

What is the role of the key indicators RTO and RPO?

Accepted Answer

In simple terms, the two parameters RTO (Recovery Time Objective) and RPO (Recovery Point Objective) show a company how long its operations may be interrupted and how much data it can lose without suffering significant damage.The RTO is the time between the occurrence of an incident and the resumption of operations. The time period can range from a few seconds to several days or weeks. The RPO, on the other hand, defines how old the data of the most recent backup may be. The key figure thus describes the maximum amount of data loss that can be tolerated by the company.RPO and RTO are crucial elements of a DR plan because they define its goals in concrete key figures. Companies must define them separately for each IT system.

Question 56

What is the difference between business continuity and disaster recovery?

Accepted Answer

The terms disaster recovery (DR) and business continuity (BC) are often used as synonyms. Both are about restoring business operations as quickly and as close to normal operations as possible in the event of a disaster. Often, the same team in an organization is involved with both BC and DR.However, BC is broader because it is concerned not only with the recovery of IT services, but with the stability of all critical operations. It generally refers to the processes and procedures an organization must implement to ensure that mission-critical functions can continue during and after an incident. A DR plan, on the other hand, focuses on technical systems and includes specific steps an organization takes to resume IT operations after an incident.

Question 57

What role does georedundancy play in disaster recovery?

Accepted Answer

Even if a company operates a highly available disaster recovery site in addition to its production systems, events affecting entire regions can cause both systems to fail if they are set up too close together. For example, this could be flooding or severe weather, damage to power lines, or incidents at chemical plants or nuclear power stations that lead to the evacuation of entire regions.In December 2018, the German Federal Office for Information Security (BSI) therefore set out requirements for the locations of redundant data centers in its “Criteria for the siting of highly available and geo-redundant data centers“. Accordingly, these must be at least 200 kilometers apart.Operators of critical infrastructures (Kritis) – such as waterworks or electricity suppliers – are bound by these requirements.The office also recommends georedundancy for emergency preparedness to authorities and companies with high or very high availability requirements. Numerous industry associations also recommend that their members comply with the BSI's recommendations. T Cloud Public enables users with their sites in Germany and the Netherlands to fulfill these requirements with ready-made services that are easy to implement.

Question 58

What does disaster recovery in the cloud mean?

Accepted Answer

To keep their IT-systems running after unforeseen events, companies usually build a disaster recovery site. This is a complete copy of a data center at a location remote from the original, which takes over its functions in the event of an emergency. As such, it incurs the same costs as the original for staff, rent, hardware, building protection, electricity and insurance. In addition, a skilled IT team must maintain and service the additional site, which is a challenge for many companies in these times of skills shortages. This is often beyond the capabilities of small and medium-sized businesses. Disaster recovery in the cloud offers a solution here: It allows companies to store data as a backup with a cloud provider such as T Cloud Public and restore it in an emergency. The cloud can completely take over the function of a classic disaster recovery site with the help of virtual servers. This has many advantages: Users only pay for the resources they actually use on a pay-as-you-go basis.Since users rent the cloud resources, they set up a disaster recovery solution without a high initial investment.Providing resources from the cloud relieves your IT from maintaining redundant systems.Deutsche Telekom offers a higher level of security in its state-of-the-art data centers than is possible for most companies themselves.You can distribute your disaster recovery systems across geographically distant locations with little effort.

Question 59

Do I need another service to use Enterprise Switch?

Accepted Answer

Enterprise Switch equires either Enterprise VPN or Direct Connect as the underlying connection. These services initially provide a Layer 3 connection between the on-premises data center and T Cloud Public. Enterprise Switch then enables this Layer 3 connection to be extended to Layer 2, allowing on-premises networks to appear as though they are directly extended into the cloud.

Question 60

Can I extend my on-premise data center to the cloud?

Accepted Answer

Yes. Enterprise Switch allows you to seamlessly extend your network infrastructure into T Cloud Public.

Question 61

Which services does Anti-DDoS protect?

Accepted Answer

Anti-DDoS supports the elastic IP addresses used by elastic cloud servers, elastic load balancing instances, and bare metal servers in the Public Cloud.

Question 62

How do I use Anti-DDoS?

Accepted Answer

Anti-DDoS protection is automatically enabled for the elastic IP addresses you purchased. If protection is not yet enabled for an IP address you own, you can activate it directly in the Anti-DDoS console. For a detailed guide, please follow the instructions in the Help Center.

Question 63

Which types of attacks does Anti-DDoS protect me from?

Accepted Answer

Anti-DDoS helps users handle traffic attacks with ease. It can accurately detect connection exhaustion and attacks on slow connections and can help users defend against the following attacks:Web server attackse.g. SYN-Flood, HTTP-Flood, Challenge Collapsar (CC) and attacks on slow connectionsVolumetric attackse.g. User Datagram Protocol (UDP) flood, SYN flood, Transmission Control Protocol (TCP) and Fragment attacksHTTPS server attackse.g. SSL DoS and DDoS attacksDNS server attackse.g. attacks which target the vulnerabilities in the Domain Name Server (DNS) protocol stack, DNS reflection attacks, DNS flood attacks, and DNS cache miss attacksA detailed overview of all functions can be found in the Help Chttps://docs.otc.t-systems.com/anti-ddos/umn/enter.

Question 64

Which aspects are included in the sustainability strategy of T Cloud Public?

Accepted Answer

Our commitment to sustainability includes both social and environmental initiatives, optimizing energy efficiency, increasing renewable energy use and availability, mobility solutions, developing environmentally responsible products, minimizing electronic waste, and reducing water consumption. While we recognize the role of carbon offsets in addressing climate change and remain open to carbon offsetting in the future, our primary goal remains to make a tangible, long-lasting impact on reducing our environmental footprint first.

T Cloud: Your sovereign cloud from Europe

The German cloud for your secure future

Full sovereignty

Broad portfolio

Maximum security

Direct support

_^References
These customers rely on T Cloud Public

ReferenceEuropean Space Agency (ESA)

ReferenceSwiss Federal Railways (SBB)

ReferenceIndustry and Commerce for Munich

ReferenceCreditreform

ReferenceRandstad

ReferenceROLAND Rechtsschutz

_{^{Our solutions}}
Tailor-made cloud solutions for every industry

_Healthcare

_{Public sector}

_{Science & research}

_Automotive

_{Media companies}

_Retail

_{^{Typical use cases}}
Mastering challenges with a secure cloud made in Germany

_{^{AI applications}}
Artifical Intelligence with T Cloud Public

T Cloud Public explained in just a few minutes

Customer stories & references

_^News
Discover the latest news about T Cloud Public

_{^{Our products}}
Cloud services and managed services – flexible, secure and always up to date

_{^{Cloud Services}}
Scalable IT resources and platforms that grow with you

_{^{Managed Services}}
Our experts take care of your cloud environment

_{^{Try for free}}
Cloud power from Europe. Made simple.

Leading expertise confirmed by Forrester Report

Find information faster with Cloudia

Business Navigator – all at a glance

Roadmap & updates for your secure cloud

FAQ – European cloud & sovereignty with T Cloud Public

Take advantage of our consulting services!
Our experts will be happy to help you.

T Cloud: Your sovereign cloud from Europe

The German cloud for your secure future

Full sovereignty

Broad portfolio

Maximum security

Direct support

ReferencesThese customers rely on T Cloud Public

ReferenceEuropean Space Agency (ESA)

ReferenceSwiss Federal Railways (SBB)

ReferenceIndustry and Commerce for Munich

ReferenceCreditreform

ReferenceRandstad

ReferenceROLAND Rechtsschutz

Our solutionsTailor-made cloud solutions for every industry

Healthcare

Public sector

Science & research

Automotive

Media companies

Retail

Typical use casesMastering challenges with a secure cloud made in Germany

AI applicationsArtifical Intelligence with T Cloud Public