Responsibility Model
On-premises Datacenter (Full Responsibility)
In traditional corporate datacenter, the company is responsible for everything
- Maintaining the physical space
- Maintaining the IT infrastructure (servers) and software's.
- Keeping all systems patched and on the correct version.
Cloud Computing (Shared Responsibility)
- With the shared responsibility model, the responsibilities get shared between the cloud provider and the consumer.
Cloud provider is always responsible for:
- The physical datacenter (power, cooling etc)
- The physical network
- The physical hosts
Service model (IaaS, PaaS, SaaS) will determine responsibility for things like:
- Operating systems
- Network controls
- Applications
- Identity and directory infrastructure
Example
- If you’re using a cloud SQL database, the cloud provider would be responsible for maintaining the actual database. you’re responsible for the data
- If you deployed a virtual machine and installed an SQL database on it, you are responsible for database patches and updates, as well as maintaining the data and information stored in the database.
Consumer is always responsible for:
- The information and data stored in the cloud
- Devices that are allowed to connect to your cloud (cell phones, computers, and so on)
- The accounts and identities of the people, services, and devices within your organization
