For which cloud service model the provider has more responsibility?
Of the three deployment options, SaaS places the most responsibility on the CSP. With the CSP managing the entire infrastructure as well as the applications, customers are only responsible for managing data, as well as user access/identity permissions.
In an IaaS service model, a cloud provider hosts the infrastructure components that are traditionally present in an on-premises data center. This includes servers, storage and networking hardware, as well as the virtualization or hypervisor layer.
SaaS: the simplest and often safest cloud model
The least responsibility to client organizations comes under SaaS models. At this point, the cloud provider maintains and secures everything but the users, the endpoint devices, and the data on the cloud.
IaaS: In an IaaS framework, the cloud provider is completely responsible for the physical resources and shares responsibility with the customer for the security of the host infrastructure and network; all the rest is the responsibility of the customer.
In the cloud, security is a shared responsibility between the cloud provider and the customer. The PaaS customer is responsible for securing its applications, data, and user access. The PaaS provider secures the operating system and physical infrastructure.
Like IaaS, PaaS includes infrastructure—servers, storage, and networking—but also middleware, development tools, business intelligence (BI) services, database management systems, and more. PaaS is designed to support the complete web application lifecycle: building, testing, deploying, managing, and updating.
Platform as a Service (PaaS) is a cloud service model that offers users a flexible and scalable cloud platform to develop, deploy, run, and manage apps. It provides the hardware and software resources needed for cloud application development.
1. Which of the following is the most complete cloud computing service model? Explanation: The most complete cloud computing service model is one in which the computing hardware and software, as well as the solution itself, are provided by a vendor as a complete service offering.
As opposed to SaaS or PaaS, IaaS clients are responsible for managing aspects such as applications, runtime, OSes, middleware, and data.
Platform as a Service (PaaS)
The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g. host firewalls).
Who is responsible for what in IaaS?
With an IaaS model, the vendor is responsible for security of the physical data centers and other hardware that power the infrastructure -- including VMs, disks and networks. Users must secure their own data, operating systems and software stacks that run their applications.
AWS responsibility “Security of the Cloud” - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services.

Platform as a service (PaaS) is a cloud computing offering that provides users with a cloud environment in which they can develop, manage, and deliver applications.
Companies that use SaaS don't have to manage their data use or maintain their applications. With PaaS and IaaS, however, users must manage their own data use and applications. SaaS and PaaS providers manage organizations' operating systems, but IaaS users must handle their own operating systems.
The cloud service customer is responsible for securing and managing the virtual network, virtual machines, operating systems, middleware, applications, interfaces, and data.
IaaS (Infrastructure as a Service): IaaS products allow organizations to manage their business resources — such as their network, servers, and data storage — on the cloud. PaaS (Platform as a Service): PaaS products allow businesses and developers to host, build, and deploy consumer-facing apps.
PaaS, or platform as a service, is on-demand access to a complete, ready-to-use, cloud-hosted platform for developing, running, maintaining and managing applications. SaaS, or software as a service, is on-demand access to ready-to-use, cloud-hosted application software.
What is PaaS? Platform-as-a-service (PaaS) is a cloud service delivery model where a third-party cloud service provider delivers some hardware and software tools, often those needed for application hosting or development, to customers over the internet.
Platform as a service (PaaS) is a cloud computing model where a third-party provider delivers hardware and software tools to users over the internet. Usually, these tools are needed for application development.
IaaS is an acronym for Infrastructure As A Service. PaaS is an acronym for Platform As A Service. SaaS is an acronym for Software As A Service. The IaaS service provides its users with access to various resources like virtual storage and virtual machines.
Which service is PaaS?
Platform as a Service defined
Platform as a Service (PaaS) is a complete cloud environment that includes everything developers need to build, run, and manage applications—from servers and operating systems to all the networking, storage, middleware, tools, and more.
Software as a service (SaaS) is a software distribution model in which a cloud provider hosts applications and makes them available to end users over the internet.
PaaS, also known as cloud platform services, provides developers with a framework, software and tools needed to build apps and software — all accessible through the internet.
SaaS. SaaS is a service that delivers a software application—which the cloud service provider manages—to its users. Typically, SaaS apps are web applications or mobile apps that users can access via a web browser.
Explanation: The most complete cloud computing service model must contain the computing hardware and software, as well as the solution itself. Hence the SaaS model has all these features.
Answer: C) Security is the most important concern of cloud computing.
AWS is one of the most successful cloud-based businesses, which is a type of infrastructure as a service and lets you rent virtual computers on its own infrastructure.
Public cloud services are offered by companies to provide their customers with access to computing resources over a public network (Fig. 4.1). The cloud service provider is responsible for provisioning and managing the hardware and software associated with the service being offered.
Software-as-a-Service (SaaS)
Of the three deployment options, SaaS places the most responsibility on the CSP. With the CSP managing the entire infrastructure as well as the applications, customers are only responsible for managing data, as well as user access/identity permissions.
Responsibility Breakdown
The cloud provider is typically responsible for security “of” the cloud, meaning the cloud infrastructure, typically including security at the storage, compute and network service layers.
Which of the following is primarily a responsibility of the cloud provider?
The primary security responsibilities of the cloud provider in compute virtualization are to enforce isolation and maintain a secure virtualization infrastructure. Isolation ensures that compute processes or memory in one virtual machine/container should not be visible to another.
IaaS: In an IaaS framework, the cloud provider is completely responsible for the physical resources and shares responsibility with the customer for the security of the host infrastructure and network; all the rest is the responsibility of the customer.
Software as a Service: The cloud provider is responsible for nearly all security, since the cloud consumer can only access and manage their use of the application, and can't alter how the application works.
With PaaS, the customer manages applications and data, while the provider (in public PaaS) or IT department (in private PaaS) manages runtime, middleware, operating system, virtualization, servers, storage and networking. Development tools provided by the vendor are customized according to the needs of the user.
SaaS: SaaS vendors are primarily responsible for the security of their platform, including physical, infrastructure and application security. These vendors do not own the customer data or assume responsibility for how customers use the applications.
Infrastructure as a Service (IaaS)
The share of responsibilities within any given machine will vary, from being entirely the responsibility of the customer, to the vendor providing tools to help manage the operating system (OS), or even using those tools on the customer's behalf.
AWS Responsibility: AWS is responsible for the Infrastructure (Regions and Availability Domains), services (compute, storage, database and network), platform and operating system.
The customer assumes responsibility and management of the guest operating system (including updates and security patches) and other associated application software, as well as the configuration of the AWS-provided security group firewall.
You are responsible for protecting the security of your data and identities, on-premises resources, and the cloud components you control (which varies by service type).
Infrastructure as a service (IaaS) is a cloud computing offering in which a vendor provides users access to computing resources such as storage, networking, and servers. Organizations use their own platforms and applications within a service provider's infrastructure.
In what cloud computing service model is the customer responsible for installing and maintaining the operating system?
Infrastructure as a Service (IaaS)
In other words, IaaS is a virtual data center. IaaS services can be used for a variety of purposes, from hosting websites to analyzing big data. Clients can install and use whatever operating systems and tools they like on the infrastructure they get.
With an IaaS model, the vendor is responsible for security of the physical data centers and other hardware that power the infrastructure -- including VMs, disks and networks. Users must secure their own data, operating systems and software stacks that run their applications.
IaaS is the most flexible cloud computing model and allows for automated deployment of servers, processing power, storage, and networking. IaaS clients have true control over their infrastructure than users of PaaS or SaaS services.
In its simplest terms, the Shared Responsibility Model dictates that the cloud provider—such as Amazon Web Service (AWS), Microsoft Azure, or Google Cloud Platform (GCP)—must monitor and respond to security threats related to the cloud itself and its underlying infrastructure.
The cloud service customer is responsible for securing and managing the virtual network, virtual machines, operating systems, middleware, applications, interfaces, and data. PaaS solutions shift the cloud service provider's responsibilities and add a few elements to their duties.
Responsibility Breakdown
The cloud provider is typically responsible for security “of” the cloud, meaning the cloud infrastructure, typically including security at the storage, compute and network service layers.
- Infrastructure as a Service (IaaS) ...
- Platform as a Service (PaaS) ...
- Software as a Service (SaaS)
IaaS, PaaS and SaaS are the three most popular types of cloud service offerings. (They are sometimes referred to as cloud service models or cloud computing service models.)
IaaS is the most flexible cloud model that helps manage and customize your IT hardware infrastructure according to your requirements.
Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.
What is the provider responsible for IaaS?
With an IaaS model, the vendor is responsible for security of the physical data centers and other hardware that power the infrastructure -- including VMs, disks and networks. Users must secure their own data, operating systems and software stacks that run their applications.
Explanation: Cloud computing means providing services like storage, servers, database, networking, etc. over the internet. It is a new model for provisioning resources, for staging applications, and for platform-independent user access to services.
The cloud provider is primarily responsible for building a secure network infrastructure and configuring it properly.
You are responsible for protecting the security of your data and identities, on-premises resources, and the cloud components you control (which varies by service type).
Cloud service providers are companies that establish public clouds, manage private clouds, or offer on-demand cloud computing components (also known as cloud computing services) like Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service(SaaS).
In IaaS, the customer has de complete responsibility but, in PaaS, the customer only has to configure it and the cloud provider will take care of the other aspects. In SaaS, this point is fully managed by your service provider.