Cloud Computing and DevOps Engineering: Market Structure, Adoption Evidence and Limits

Summary

Cloud infrastructure spending is large and still growing quickly, and a small group of providers holds most of it. Synergy Research Group figures, reported through secondary outlets, put second-quarter worldwide cloud infrastructure spending at $143.4 billion, up roughly 43 percent, with the big three providers at 63 percent combined ². Gartner forecasts strong public cloud growth in India and Europe, linked to AI-ready infrastructure, application modernization and digital sovereignty ⁴⁵. DevOps evidence is weaker. Survey and vendor reports suggest AI tools raise perceived productivity but can also increase instability, and many organizations still cite separated development and operations teams as their main obstacle ⁷¹⁰. Security figures mostly come from vendor telemetry ⁸. The main risks are provider concentration, unverified performance and cost claims, and governance of AI-generated code. The pack contained no independent data on uptime, latency or total cost of ownership.

Key findings

1. 1

   Three providers hold most of the cloud infrastructure market

   Synergy-attributed second-quarter data puts Amazon at 28 percent, Microsoft at 20 percent and Google at 15 percent of worldwide cloud infrastructure services revenue, a combined 63 percent ²³. This is measured revenue share, not a measure of service quality.

   Confidence: High
2. 2

   Cloud spending is growing faster than the wider IT base

   Worldwide cloud infrastructure spending in the second quarter rose roughly 43 percent year over year to $143.4 billion ². Gartner forecasts end-user public cloud spending in India to grow 28.1 percent ⁴ and Europe 24 percent ⁵. Both are forecasts, not outturns.

   Confidence: Medium
3. 3

   AI-assisted development brings productivity gains and trust and stability risks

   Over 80 percent of AI tool users in the surveyed sample report significant productivity gains, but about 30 percent report little or no trust in generated code. The same review links AI adoption with more change failures, more rework and longer time to resolve issues ⁷. The figures are self-reported and rely on a review of a DORA report, not the primary report.

   Confidence: Medium
4. 4

   Security data is vendor telemetry with a narrow focus

   Datadog reports that only 18 percent of critical vulnerabilities are worth prioritizing and that 44 percent of Java applications in its telemetry sample contained a known-exploited vulnerability, compared with an average of 2 percent for other languages sampled ⁸. This is a vendor sample, so it cannot be generalized to all cloud workloads.

   Confidence: Qualitative
5. 5

   Organizational structure is a main barrier to DevOps adoption

   In a Liquibase survey, 78 percent of organizations with separate development and operations teams named that separation as their single biggest hurdle, and 50 percent aimed to improve developer productivity through database DevOps ¹⁰. The survey is vendor-sponsored and its sample is not described in detail.

   Confidence: Qualitative

11. Industry definition and scope

This report covers two linked areas: the market for cloud computing infrastructure and services, and the DevOps engineering practices used to build, deliver and operate software on those platforms. Cloud infrastructure spending is measured by Synergy Research Group as cloud infrastructure services revenue, which is narrower than the end-user spending measures used by Gartner ²⁴. The figures in this report should not be added together or compared without that caveat.

"DevOps engineering" is used here to mean the combination of software development and IT operations through automation, continuous delivery, shared responsibility for reliability and, increasingly, security. The sources in the pack discuss it through Kubernetes-native tooling, multi-deployment strategies, talent shortages and database change management ⁹¹⁰. Terms such as DevSecOps and database DevOps are used as the sources use them.

The geographic scope is global. Regional forecasts for India and Europe are included where Gartner publishes them ⁴⁵. The reporting period is the latest available data in the source pack, and forecasts are labeled as forecasts. The main segments covered are cloud infrastructure services, end-user public cloud spending, DevOps tooling and security practice. Hyperscaler, a term used in this report for the largest general-purpose cloud platform providers, is our interpretation rather than a defined category in the sources.

Definitions follow the measures stated in each source. No figure was converted between measures.

22. Market size, structure and value chain

The most recent verified market measure in the pack is Synergy's second-quarter estimate that worldwide cloud infrastructure services spending reached $143.4 billion, up roughly 43 percent year over year ². Gartner forecasts worldwide end-user IaaS spending of $287.3 billion for the latest period, up 29.3 percent from $222.2 billion in the prior period ⁶. IDC is reported to forecast worldwide public cloud services spending above $1 trillion, growing more than 21 percent ⁶. The Gartner and IDC worldwide figures were found only through a secondary aggregator, so they are treated as reported forecasts rather than verified primary data.

Market structure is concentrated. The big three providers account for 63 percent of second-quarter spending in Synergy's data ². Amazon held 28 percent in the first-quarter data, ahead of Azure at 21 percent and Google Cloud at 14 percent ¹. The remaining share is spread across other providers that the pack does not quantify.

Our interpretation of the value chain is that it has four layers: infrastructure providers that sell compute, storage and networking; platform and application providers that sell managed services and software; DevOps tool vendors that sell pipelines, observability, security scanning and database change tools; and systems integrators and internal platform teams that assemble and run these components. The pack does not quantify revenue by layer, so no layer-level market size is given. Revenue models are not quantified either; metered infrastructure use is the usual pattern for infrastructure providers, but the pack does not confirm this.

• Worldwide cloud infrastructure services spending, second-quarter growth 43percent year over year (roughly) Observed Worldwide, Latest second-quarter data [2]
• Gartner forecast, worldwide IaaS end-user spending growth 29.3percent Forecast Worldwide, Latest period [6]

Market value figures are kept in their source units (USD billion). No currency conversion was needed.

33. Customers, demand and adoption

Gartner attributes forecast growth in India to AI-ready infrastructure demand, application modernization and digital sovereignty requirements ⁴. In Europe, Gartner projects end-user public cloud services spending to grow 24 percent in the latest period and expects CIOs to focus on digital sovereignty and to move cloud services closer to home ⁵. These are analyst expectations. The pack does not show how many organizations have adopted these approaches or how buying criteria are weighted.

On the DevOps side, the demand signals come from vendor-sponsored reports. A Liquibase survey found that 50 percent of respondents aimed to improve developer productivity and team efficiency through database DevOps ¹⁰. A JFrog and InformationWeek report describes talent shortages, growing security requirements and AI challenges for DevOps teams that are already stretched, and it says Kubernetes-native support and multi-deployment strategies are now industry expectations for tools ⁹. These findings reflect the sponsors' audiences and should be read as indicators of demand, not as measured adoption rates.

Barriers include organizational separation of development and operations, which 78 percent of separated organizations in the Liquibase sample named as their biggest hurdle ¹⁰. Customers' expectations are shifting toward multi-deployment options and sovereignty. Buying criteria such as price, uptime guarantees and integration effort are not measured in the pack, so the report cannot rank them.

Demand claims are reported as stated by sponsors or analysts.

44. Competitive landscape and key players

Synergy-attributed data gives the most consistent view of provider shares. In the second quarter, Amazon Web Services held 28 percent, Microsoft Azure 20 percent and Google Cloud 15 percent of worldwide cloud infrastructure spending ²³. In the first quarter, Google Cloud was at 14 percent and Azure at 21 percent ¹. Some secondary sites give a different Azure figure for the second quarter, so this report uses only the Synergy-attributed values. The shift between quarters is too small to show a clear trend, and one quarter does not establish a direction.

Business models differ by provider type. Infrastructure providers sell broad, general-purpose capacity and managed services at scale. DevOps tool vendors sell specialized products. Datadog positions its security findings around prioritization of critical vulnerabilities ⁸. JFrog and Liquibase sell tooling and sponsor research on DevOps practice ⁹¹⁰. Each vendor report presents its own product as the answer to the problems it describes, so these reports are useful as evidence of market concerns, but they are not neutral comparisons of products.

Open-source versus proprietary tooling is an important competitive question, but the pack contains no independently verified adoption figures for it. Usage shares reported in an unreviewed paper were excluded. Competitive pressure is therefore assessed qualitatively: concentration among the largest providers, and sovereignty requirements that may favor local or sovereign deployment options, as Gartner expects in Europe ⁵. The pack does not show how much sovereignty demand is shifting share toward smaller providers.

• Combined share of big three cloud infrastructure providers 63percent of worldwide cloud infrastructure spending Observed Worldwide, Latest second-quarter data [2]

Provider shares are attributed to Synergy Research Group through secondary outlets. A primary Synergy release was not in the pack.

55. Technology, operations and workforce

The clearest evidence on AI in DevOps comes from a review of the DORA State of DevOps report. Over 80 percent of AI tool users report significant productivity gains, while about 30 percent have little or no trust in generated code ⁷. The same review finds that AI adoption correlates with higher instability, including more change failures, more rework and longer cycle times to resolve issues ⁷. The productivity figures are self-reported, and the correlation does not show cause. The gap between perceived gains and measured stability is the most important point in this section: demonstrated capability in delivery speed is not the same as demonstrated reliability.

Operating practices are shaped by tooling expectations. Kubernetes-native support and multi-deployment strategies are described as expectations for DevOps tools ⁹, and database DevOps is presented as a way to improve team efficiency ¹⁰. These are vendor-sponsored statements of practice, not measured productivity outcomes. The pack contains no verified uptime, latency or throughput comparison across cloud providers, so claims about platform performance cannot be tested with the sources available.

Workforce evidence is limited to survey summaries. The JFrog report cites talent shortages for DevOps teams ⁹. Independent data on cloud or DevOps skills demand, certification or salary trends was not retrieved. Our interpretation is that skills needs are rising with AI-assisted tooling and security requirements, but the pack does not quantify the scale of the skills gap or its effect on business models.

• AI tool users reporting significant productivity gains 80percent, over Observed Global survey sample, Latest survey period [7]

The DORA report was not retrieved directly; figures rely on the Splunk review.

66. Regulation, standards, risk and sustainability

The pack identifies no binding cloud or DevOps regulation for any jurisdiction, and no standards document was retrieved. The regulatory theme in the sources is digital sovereignty. Gartner describes it as a requirement shaping spending in India and as a focus for CIOs in Europe ⁴⁵. These are analyst descriptions of market demand, not statutory requirements. Organizations operating in regulated sectors should identify the specific binding rules in their jurisdiction and treat analyst commentary as context only. This report does not provide legal advice.

Security evidence is limited. Datadog reports that only 18 percent of critical vulnerabilities are worth prioritizing and that 44 percent of Java applications in its telemetry sample contained a known-exploited vulnerability, against an average of 2 percent for other languages sampled ⁸. These are vendor telemetry figures from one provider's customer base. The pack did not include peer-reviewed or regulator sources on cloud breach patterns or incident rates, so breach frequency and cause cannot be assessed.

Privacy, sustainability and social impacts are not covered by verified figures in the pack. Operational risks identified in the sources include instability linked to AI-assisted delivery ⁷, talent shortages and growing security requirements ⁹, and organizational separation of teams ¹⁰. These risks are supported by sponsored or survey evidence and should be validated by each organization against its own incident and delivery records.

Security statistics come from a single vendor telemetry sample and are not generalized.

77. Challenges, opportunities and case examples

The main challenges are provider concentration, the instability linked to AI-assisted development, low trust in generated code, and the organizational separation that many teams still have ²⁷¹⁰. Security is a further challenge: the Datadog sample shows that a large share of critical findings may not warrant immediate action, while a high share of Java applications carried a known-exploited vulnerability ⁸. Teams need prioritization methods that separate real exposure from noise.

The main opportunities are sovereignty-driven demand in Europe and India ⁴⁵, application modernization ⁴, and productivity programs in database and application delivery ¹⁰. The productivity opportunity is real in perception but its size is not verified. A sensible approach for teams is to measure change failure rate and recovery time alongside productivity, since the AI review shows the two can move in different directions ⁷.

Three company examples show the range of the market. Amazon, Microsoft and Google Cloud are the three largest infrastructure providers by Synergy-attributed share ². Datadog, a DevOps and observability vendor, publishes security telemetry that highlights prioritization and Java exposure ⁸. Liquibase and JFrog publish sponsored DevOps surveys that describe organizational barriers and tool expectations ⁹¹⁰. The pack contains no independently verified performance, cost or outcome data for any of these providers, so the examples describe market position and vendor claims rather than demonstrated results.

Examples are drawn only from the source pack and are described as market position or vendor claims.

88. Outlook and strategic implications

In the near to medium term, the most defensible expectation is continued growth in cloud infrastructure spending, based on analyst forecasts for India and Europe and a worldwide forecast above $1 trillion for public cloud services ⁴⁵⁶. The forecasts are not verified outcomes and secondary aggregators reported the worldwide figures. Provider concentration is likely to persist, since the big three held 63 percent of second-quarter spending ². A scenario in which sovereignty requirements open space for regional providers is plausible, but the pack does not quantify it.

Likely shifts include more AI-assisted delivery, greater emphasis on reliability and security controls alongside speed, and stronger demand for multi-deployment tooling ⁷⁹. The main uncertainty is whether productivity gains can be reconciled with the stability and trust concerns in the DORA review ⁷. Another uncertainty is the reliance on vendor telemetry and sponsored surveys for DevOps and security evidence ⁸⁹¹⁰.

For employers and engineering leaders, the practical implication is to test vendor performance, cost and productivity claims against their own metrics before committing. For providers, the evidence points to a market where sovereignty and integration matter alongside scale. For buyers and regulators in regulated sectors, the next step is to identify binding requirements in their jurisdiction, since the pack contains none.

Scenario descriptions are interpretation. Forecast figures are cited with their sources.

99. Conclusion

Cloud infrastructure demand is large and growing, and it is concentrated in three providers ². The verified evidence on DevOps is strongest for the gap between perceived AI productivity and measured stability ⁷. Most performance, cost and security claims still rely on vendor data, so buyers should test them directly before relying on them.

How this was built

Sources

1. 1

   Chart: Big Three Hold Dominant Lead in Accelerating Cloud Market

   Statista (citing Synergy Research Group) Market research

   statista.com
2. 2

   Cloud Market Share Latest Period: AWS 28%, Google Cloud Hits 15%

   shattered.io (citing Synergy Research Group tracker) News report

3. 3

   Cloud Market Share Latest Period: AWS vs Azure vs Google Cloud

   articsledge.com (citing Synergy Research Group release in the latest period) News report

   articsledge.com
4. 4

   Gartner Forecasts End-User Public Cloud Spending in India to Surpass $17 Billion in the Latest Period

   Gartner Company report

5. 5

   Gartner Forecasts IT Spending in Europe to Grow 11% in the Latest Period

   Gartner Company report

6. 6

   Cloud Spending Statistics Latest Period: How Much Businesses Spend

   articsledge.com (citing Gartner and IDC releases in the latest period) News report

   articsledge.com
7. 7

   State of DevOps Latest Period: Review of the DORA Report on AI Assisted Software Development

   Splunk (review of DORA State of DevOps report) Industry association

   splunk.com
8. 8

   Datadog's State of DevSecOps Latest Period Report Finds Only 18% of Critical Vulnerabilities Are Truly Worth Prioritizing

   Datadog (press release) Vendor report

9. 9

   Latest Period State of DevOps Report

   InformationWeek with JFrog (sponsored report) Vendor report

10. 10

    The State of Database DevOps Report Latest Period

    Liquibase Vendor report

    liquibase.com