THE CLOUD SHARED IRRESPONSIBILITY MODEL

Summary from the TLDR InfoSec newsletter

The Shared Responsibility Model is used by cloud providers to describe a split in security responsibilities where cloud providers are responsible for the underlying services and users are responsible for securing their workloads built on those services. Customer breaches could result in negative reputational damage to cloud providers. This forces cloud providers to improve their defaults to be more secure.