What is Shared responsibility model?

The idea that, when using the cloud, the responsibility for security and operations is shared between the cloud provider and the user. The provider is responsible for data center buildings and physical equipment, and the user for the data stored, accounts and access settings, permissions for network connections and so on. The boundary in between changes with the type of service, such as IaaS, PaaS, SaaS or managed services. Many information leaks caused by misconfiguration occur within the scope of the user's responsibility.

Japanese name: 責任共有モデル

Shared responsibility model appears in 1 practice question across 1 topic, including Cloud and Container Basics.

Field: Cloud and Container Basics

Try it: questions about Shared responsibility model

A managed database service in the cloud (one in which the provider operates the database software) is used. Under the shared responsibility model, which of the following generally remains the user's responsibility?

  1. AApplying security fixes to the OS of the servers running the database and to the database software
  2. BProtecting the data center buildings and physical equipment such as servers from failures and intrusion
  3. CManaging the database user accounts and privileges, the network ranges allowed to connect, and the data stored
Show answer and explanation

Answer: C. Managing the database user accounts and privileges, the network ranges allowed to connect, and the data stored

Under the shared responsibility model, the cloud provider and the user share the responsibility for security and operations, and where the boundary lies depends on the type of service. With a managed database service, the provider takes care not only of the physical facilities but also of updating the OS and the database software. On the other hand, who may access which data, which networks may connect and what data is stored remain the user's responsibility in every type of service. An accident in which a misconfiguration exposes a database to the internet is a problem on the user's side.

Shared responsibility model in the explanations

Questions that mention Shared responsibility model (1)

  1. A managed database service in the cloud (one in which the provider operates the database software) is used. Under the shared responsibility model, which of the following generally remains the user's responsibility?

Books on Cloud and Container Basics Ad

As an Amazon Associate I earn from qualifying purchases.

Related terms

Autoscaling Availability zone Blue-green deployment Canary release Container Container image Docker Immutable infrastructure Infrastructure as code (IaC) Kubernetes

Back to the glossary