From the course: Cloud Security for DevSecOps Engineers: From Security Models to API Protection
Unlock this course with a free trial
Join today to access over 24,900 courses taught by industry experts.
Security implications for SaaS, PaaS, and IaaS
From the course: Cloud Security for DevSecOps Engineers: From Security Models to API Protection
Security implications for SaaS, PaaS, and IaaS
- [Instructor] As we reflect on the shared responsibility model, we know that the security responsibilities and roles will depend on the service model that is being used. However, we haven't touched on any examples of risks and threats that each model may face. In this video, we'll discuss and identify some common security issues for each service model, from a customer standpoint, starting with software as a service. Most security tasks and responsibilities are shifted to the cloud service provider, which only leaves the customer to worry about the data component. Some common security concerns with software as a service include data governance and compliance risk. Since the service provider manages the infrastructure behind it, you don't have any control over how the data is handled and the location of where it's stored. This could create some issues for you if you're subject to certain regulations like GDPR or HIPAA. If you don't configure multifactor authentication, have passwords…