The following table sets out the division of responsibilities for using and managing cloud services, shared between the provider (Aruba Cloud) and the customer.
It should not be assumed, when using a cloud service, that the provider takes responsibility for any manner of problem, whether technical, legal or regarding security.
As shown in the table below, the provider is not responsible for the management and classification of data. Distinguishing between sensitive and public data, for example, is entirely the responsibility of the customer. The physical security of the cloud infrastructure, on the other hand, is entirely the responsibility of the provider.
Further to these distinctions, it is common to speak:
- security of the cloud is managed by the provider and involves everything relating to the protection of the infrastructure (data center) from which the services are provided.
- security in the cloud is the responsibility of the customer.
Aruba Cloud provides IaaS cloud services and, as such, requires the customer to configure, manage and verify security.