Cloud Security Shared Responsibility Model

Cloud Security Shared Responsibility Model

The cloud security model is shared between the cloud service provider and the customer.

The provider is responsible for securing the infrastructure beneath the customer workload, including physical facilities, network infrastructure, virtualization layers, and some core platform controls. The customer is responsible for security in the cloud, including identity and access, application security, data protection, configuration hygiene, and governance.

Security Controls

The model requires organizations to align identity, governance, configuration, monitoring, and auditing practices with the cloud provider’s model.