shared responsibility
termcloudgovernance & risk
The division of security duties between a cloud provider and its customer - the provider secures the platform, the customer secures what they put on it.
It is stated in every provider's documentation and misread constantly, because the line moves with the service: with a virtual machine the customer patches the operating system, with a managed database they do not, and with a storage service the provider guarantees durability while the customer alone decides who can read it. Almost every publicised cloud breach sits on the customer side of a line that was published in advance.
Also known as: shared responsibility model