A global manufacturing corporation is deploying a multi-cloud security architecture to support collaborative supply chain partner integration, internal software engineering teams, and cloud governance monitoring. Match each cloud architecture model or security control placement on the left with its corresponding responsibility boundary or functional description on the right.
- Community Cloud Deployment ModelA shared environment operated exclusively for organizations with shared compliance requirements, where governance and infrastructure responsibilities are divided among participating member organizations or a third-party manager.
- Cloud Access Security Broker (CASB) API IntegrationAn out-of-band security mechanism that uses native cloud provider interfaces to perform asynchronous data-at-rest inspection, configuration audit, and policy enforcement without inline proxy network latency.
- Infrastructure as a Service (IaaS) Compute LayerA cloud service allocation where the customer is responsible for guest operating system patching, virtual firewalls, and application stack installation, while the provider manages physical hardware and the underlying hypervisor.
- Platform as a Service (PaaS) Application LayerA service environment where the provider manages underlying operating systems, database engines, and runtime frameworks, leaving the customer responsible primarily for application code, access control, and tenant-specific configuration.
Answer
The Community Cloud Deployment Model matches shared infrastructure operated for member organizations with common compliance goals. The Cloud Access Security Broker API Integration matches out-of-band inspection using native provider interfaces without proxy latency. The Infrastructure as a Service Compute Layer matches the boundary where the customer handles guest OS patching and virtual firewalls while the provider manages physical hardware and hypervisor. The Platform as a Service Application Layer matches the boundary where the provider manages the OS and runtime frameworks while the customer manages application code and access control.
Each cloud architectural concept correctly aligns with its defined operational scope under enterprise cloud governance standards. Community clouds address multi-tenant shared mission domains; API-based CASBs provide non-disruptive out-of-band auditing; IaaS demands guest OS management by the customer; and PaaS abstracts OS/runtime management to the CSP while retaining application and data security on the customer side.
Step-by-Step Solution
Key Concept
Cloud Shared Responsibility Model and Security Architecture Integration Modes