Clarity in shared responsiblity model

Question

Hi Team, I am posting this question with reference to the shared responsibility model diagram. On the material, it is written: Your service model will determine responsibility for things like:

• Operating systems
• Network controls
• Applications
• Identity and infrastructure But, the diagram shows the "Operating systems" on the cloud provider side (i.e. Microsoft). Can you confirm the same? Best, Ranji Raj

Answer 1

Hi,

Responsibility for Operating systems is on the cloud provider only for Platform as a Service (PaaS) and Software as a Service (SaaS). For Infrastructure as a Service (IaaS) and On Premises it is customer's responsibility.

For example, if you create a VM in Azure the responsibility for the operating system is yours since that is IaaS. On the other hand, if you host a website using Azure App Services the responsibility for the operating system is on Microsoft since Azure App Services is PaaS.

If the above is useful please click Accept Answer.

Thanks.

-TP