1. IaaS provides VM instances, disk, and networks, while PaaS provides services such as databases and queues.
2. The physical security, securing access to the hypervisor, securing and patching the operating system, securing, configuring and patching the platform.
3. Trade cap-ex for op-ex, use inexpensive compute units on demand, increase the speed of application delivery and agility, matching capacity to demand, ability to go global in minutes.
4. Network, compute, storage, security and identity services, and end user applications.
5. The AWS Management Console, the CLI, and the SDK.
6. An application that's built to run on the cloud (usually on platform and serverless environments).
7. Regions are composed of multiple availability zones, AZs are composed of multiple data centers.
8. No, because a single-availability zone should be considered a fault-isolation environment.