A financial institution is deploying a microservice platform using a Function-as-a-Service (FaaS) cloud model to process high-frequency transaction requests. During a security architecture review, the compliance team requires a clear matrix of operational duties between the organization and the cloud service provider (CSP). Which of the following responsibilities is retained solely by the enterprise customer under this deployment model?
- Configuring application-level access control logic and authorization rules within the function codeAnswer
- BPatching the serverless host operating system and maintaining execution runtime dependencies
- CEstablishing perimeter network trust boundaries to automatically validate requests originating within the cloud provider's virtual network
- DClassifying provider-managed physical facility audits as a customer-implemented technical preventative control
Answer
Configuring application-level access control logic and authorization rules within the function code is retained solely by the enterprise customer.
Under the cloud shared responsibility model for Function-as-a-Service (FaaS), the cloud service provider abstracts and manages the underlying hardware, hypervisor, host operating system, and language runtime environment. The enterprise customer retains complete responsibility for writing secure code, managing user data, defining data access policies, and embedding application-level authorization controls within the deployed function code.
Step-by-Step Solution
Key Concept
Cloud Shared Responsibility Model in Serverless / FaaS Architectures