An enterprise security architect is establishing a security baseline across diverse cloud deployment and service models. Match each security operational task or control responsibility to the corresponding cloud service or deployment model that correctly allocates primary tenant responsibility.
- Configuring guest operating system firewall rules, virtual network routing policies, and OS-level security patchesInfrastructure as a Service (IaaS)
- Managing application runtime environments, database engine security updates, and middleware framework dependenciesPlatform as a Service (PaaS)
- Defining user access role permissions, data classification rules, and identity governance within fully hosted turnkey applicationsSoftware as a Service (SaaS)
- Enforcing a shared infrastructure security baseline and compliance governance model across independent organizations with common regulatory mandatesCommunity Cloud
Answer
Configuring guest OS firewall rules and virtual routing maps to Infrastructure as a Service (IaaS). Managing application runtime environments and database engine updates maps to Platform as a Service (PaaS). Defining user access permissions and data classification rules in turnkey applications maps to Software as a Service (SaaS). Enforcing a shared infrastructure baseline across entities with common compliance requirements maps to Community Cloud.
The allocation of security management responsibilities follows the cloud shared responsibility framework across service models (IaaS, PaaS, SaaS) and deployment structures (Community Cloud). In IaaS, the customer manages everything from the guest OS upwards. In PaaS, the provider manages the host infrastructure and runtime environment, while the customer manages code and data. In SaaS, the provider manages the full application stack, leaving data protection and access administration to the customer. A Community Cloud specifically serves multiple organizations sharing regulatory and operational requirements.
Step-by-Step Solution
Key Concept
Shared Responsibility Model across Cloud Service and Deployment Models