Cloud Fundamentals
/Intermediate
Shared Responsibility Model
Definition
A cloud security framework dictating that the Cloud Provider is responsible for the security *OF* the cloud (hardware, physical buildings), and the Customer is responsible for security *IN* the cloud (passwords, firewalls, app code).
Explain Like I'm New
If someone physically breaks into the Amazon data center with a crowbar, it is Amazon's fault. If someone hacks into your database because your password was '12345', it is your fault.
Real World Example
A company uses AWS EC2. AWS guarantees the physical server won't be stolen. But the company fails to update their Linux OS, gets hacked via a malware virus, and sues AWS. The judge dismisses it, citing the Shared Responsibility Model: updating Linux was the customer's job.
Common Use Cases
- •Security audits
- •Compliance
- •Cloud architecture
Architecture & Flow
Interview Questions
basic
- Who is responsible for locking the front door of the actual data center?
intermediate
- In a PaaS (Platform as a Service) model, does the customer have MORE or LESS security responsibility than in an IaaS model?