Securing Cloud Services - A pragmatic approach, second edition

APPENDIX A: SRM SECURITY SERVICE ASSIGNMENTS

Table A1: Service Assignments

Service Name	Level	IaaS Rationale	PaaS Rationale	FaaS Rationale	SaaS Rationale
Secure Development	0	Consumers are responsible for the security of any in-house developed applications that they host on an IaaS Cloud.	A PaaS will typically include a set of provided APIs for the consumer’s use. The provider is responsible for the secure develop-ment of those APIs; the consumer is responsible for the security develop-ment of any applications that use those APIs.	A FaaS provider will offer a set of back-end services that a consumer can utilise as part of a serverless application. The consumer is responsible for securing their code, whilst the provider is responsible for ...