Lesson 1.3: Cloud models and shared responsibility
In the cloud someone else runs the data centre, but not everything. The shared responsibility model says what the provider secures (hardware, hypervisor, the services themselves) and what the customer must secure (identities, data access, configuration, the software they deploy), and the split moves with the service model (IaaS, PaaS, SaaS, containers). Most cloud breaches happen on the customer's side. In the lab you take inventory of Northwind's cloud from the operations workstation, account, storage, users, containers and Kubernetes pods, and mark which parts are yours to protect.
15 min
You will learn to
- Explain IaaS, PaaS, SaaS and containers
- Explain the shared responsibility model
- Identify the account you're working in
- Inventory storage, identities, containers and pods
- Name the customer's responsibilities
Key terms
- IaaS / PaaS / SaaS
- Infrastructure (virtual machines, networks), Platform (managed databases, runtimes) and Software (complete applications) as a service.
- Shared responsibility model
- The split of security duties between provider ('security of the cloud') and customer ('security in the cloud').
- Account / subscription / project
- The billing and isolation boundary for cloud resources.
- Object storage
- Storage for files ('objects') in 'buckets', reached over HTTPS.
- Container / Kubernetes
- A packaged application with its dependencies / a system that runs many containers across machines.
← What a SOC does · All lessons · Encoding, encryption and hashing →