Shared responsibility
How security and management duties split between you and the cloud provider across IaaS, PaaS, and SaaS.
Learning objectives
Work through each idea below. Use Listen to hear the explanation — pick a voice next to Listen anytime (Sophia is the default).
- Customer always owns
- Provider always owns
- IaaS
- PaaS
- SaaS
- Moving up the stack (IaaS → PaaS → SaaS) shifts more responsibility to the provider.
Customer always owns
Speed
data, identities/accounts, access control, and information/device security in their control.
Provider always owns
Speed
physical facilities, host infrastructure, and the foundational cloud platform.
IaaS
Speed
customer manages OS, apps, and data; provider manages hardware/virtualization.
PaaS
Speed
provider manages OS/runtime; customer manages apps and data.
SaaS
Speed
provider manages app stack; customer manages data, identity, and configuration.
Moving up the stack (IaaS → PaaS → SaaS) shifts more responsibility to the provider.
Speed
Moving up the stack (IaaS → PaaS → SaaS) shifts more responsibility to the provider.