A healthcare technology enterprise deploys an event-driven application using cloud-managed API gateways, serverless execution functions (FaaS), and a managed NoSQL database service to ingest patient telemetry data. The chief information security officer (CISO) requires a security matrix mapping operational duties under the cloud service provider's shared responsibility model for serverless workloads. Which of the following tasks is exclusively the responsibility of the customer organization?
- Writing secure application logic, defining granular function access permissions, and managing data payload encryption key policiesAnswer
- BApplying security updates, OS kernel patches, and runtime dependency upgrades to the underlying serverless execution hosts
- CManaging physical data center perimeter security, power redundancy, and hardware security module maintenance
- DEstablishing implicit trust zones across internal function invocations by bypassing microsegmentation within the cloud private network
Answer
Writing secure application logic, defining granular function access permissions, and managing data payload encryption key policies
Under the cloud shared responsibility model for serverless (Function as a Service) deployments, the cloud provider abstracts away infrastructure, host operating systems, and runtime engines. The customer remains fully accountable for secure application coding practices, configuring Identity and Access Management (IAM) role privileges assigned to functions, validating input data, and encrypting sensitive data at rest and in transit.
Step-by-Step Solution
Key Concept
Cloud Shared Responsibility Model in Serverless (FaaS) Architecture