21. Service Models
Cloud security responsibilities depend on the service model. In some cases, the cloud provider handles more of the system, while in others, the customer is responsible for more.
Organizations still need to make sure proper security controls are in place to protect data stored in the cloud from unauthorized access.
Responsibilities can include maintaining assets, keeping systems functional, and applying updates and patches. Who handles these tasks depends on the cloud service type.
The main cloud service models are:
- SaaS (Software as a Service): the provider delivers the software and manages most of the underlying system
- PaaS (Platform as a Service): the provider manages the platform, while the customer manages their apps and data
- IaaS (Infrastructure as a Service): the provider supplies infrastructure, while the customer manages more of the systems and software
Common cloud characteristics include broad network access, rapid elasticity, measured service, on-demand self-service, and resource pooling.
Common deployment models are public, private, hybrid, and community clouds.
Main Idea
In cloud computing, responsibility is shared based on the service model, and organizations must still protect their data and manage the parts they control.