What is the shared responsibility model?

Cloud security requires understanding who is responsible for what between provider and customer.

Explain the shared responsibility model across IaaS, PaaS, and SaaS.

The cloud provider secures the infrastructure OF the cloud. The customer secures what they put IN the cloud. IaaS: customer manages OS, apps, data, network controls. PaaS: customer manages apps and data. SaaS: customer manages data and access. The security responsibility shifts based on service model. AWS, Azure, and GCP each publish their own shared responsibility documentation.

This is the most commonly asked cloud security question. Misunderstanding shared responsibility is the leading cause of cloud breaches. Showing you know the nuances across service models demonstrates cloud maturity.