The cloud shared responsibility model explains which responsibilities belong to the cloud provider and which belong to the customer. It is especially important for security and compliance.

What providers usually handle

Providers usually handle physical data centers, hardware, core infrastructure, and managed platform components. The exact split depends on whether the service is IaaS, PaaS, SaaS, or another model.

What customers usually handle

Customers often handle identity, access, data protection, application security, configuration, and user behavior. Services like cloud IAM are central to this work.

The shared model prevents a dangerous assumption: that the cloud provider secures everything automatically.