Lesson 06 - Group 1: Cloud Models and Shared Responsibility

Public cloud

A multi-tenant cloud deployment in which provider-managed resources are shared among multiple customers.

Private cloud

Cloud infrastructure dedicated to a single organization.

Hosted private cloud

A private cloud dedicated to one organization but hosted and managed by a third party.

Community cloud

Cloud infrastructure shared by organizations with similar requirements or interests.

Hybrid cloud

An architecture that combines different cloud environments, such as private and public cloud resources.

Single-tenant architecture

Infrastructure or services dedicated to one customer.

Multi-tenant architecture

Infrastructure or services shared among multiple logically isolated customers.

What are the three main cloud service models?

Software as a Service, Platform as a Service, and Infrastructure as a Service.

SaaS

Software as a Service; the provider delivers and manages the complete application service.

PaaS

Platform as a Service; the provider manages the application platform while the customer develops or deploys applications.

IaaS

Infrastructure as a Service; the provider supplies infrastructure while the customer has greater responsibility for operating systems, applications, data, and configurations.

Shared responsibility model

Defines how cloud-security responsibilities are divided between the cloud provider and customer.

How does customer responsibility generally change from IaaS to SaaS?

Customer responsibility decreases as the provider manages more of the technology stack.

What physical responsibilities normally belong to the cloud provider?

Datacenter security and protection of physical compute, storage, and network equipment.

What infrastructure responsibilities normally belong to the cloud provider?

Infrastructure isolation, foundational network protection, infrastructure monitoring, backup and recovery, and datacenter management.

What identity responsibility normally remains with the customer?

Managing user identities and user or service access to cloud resources.

What data responsibilities normally remain with the customer?

Data classification, application-security configuration, storage-location selection, and encryption configuration.

Who is normally responsible for protecting customer-controlled encryption keys?

The cloud customer.

Who protects an operating system deployed by a customer in an IaaS environment?

The cloud customer.

Why must an organization review the responsibility matrix before adopting a cloud service?

To determine which controls are managed by the provider and which remain the customer's responsibilit