Auto-sync: 2026-04-21 17:12
This commit is contained in:
@@ -1,44 +0,0 @@
|
||||
---
|
||||
title: "Shared Responsibility Model"
|
||||
type: concept
|
||||
tags: [Cloud, Security, Governance]
|
||||
sources: [Public-vs-Private-vs-Hybrid-Cloud-Differences-Explained]
|
||||
last_updated: 2025-06-18
|
||||
---
|
||||
|
||||
## Summary
|
||||
Shared Responsibility Model(共享责任模型)是一种明确云服务提供商与客户之间安全和管理职责分工的框架。
|
||||
|
||||
## Definition
|
||||
共享责任模型定义了云服务提供商和客户在云环境中的各自职责。无论选择哪种云部署模式(公有云、私有云或混合云),客户仍需对某些方面承担最终责任。该模型强调虽然云服务商负责基础设施运营,但客户仍需管理访问权限、数据安全和灾难恢复。
|
||||
|
||||
## Responsibilities Matrix
|
||||
|
||||
### 云服务商负责
|
||||
- 基础设施运营和维护
|
||||
- 物理服务器安全
|
||||
- 服务器硬件维护
|
||||
- 底层虚拟化层
|
||||
- 网络基础设施
|
||||
|
||||
### 客户负责
|
||||
- 身份和访问管理(IAM)
|
||||
- 数据分类和保护
|
||||
- 应用程序安全
|
||||
- 加密策略和实施
|
||||
- 灾难恢复计划
|
||||
- 合规性管理
|
||||
- 终端用户安全
|
||||
|
||||
## Key Takeaways
|
||||
- 选择云模式不免除客户的安全责任
|
||||
- 数据泄露往往发生在客户管理的层面
|
||||
- 明确的职责划分是安全云采用的基础
|
||||
- 客户必须了解并实施适当的安全控制
|
||||
|
||||
## Connections
|
||||
- [[Shared-Responsibility-Model]] ← applies_to ← [[Public-Cloud]]
|
||||
- [[Shared-Responsibility-Model]] ← applies_to ← [[Private-Cloud]]
|
||||
- [[Shared-Responsibility-Model]] ← applies_to ← [[Hybrid-Cloud]]
|
||||
- [[Shared-Responsibility-Model]] ← requires ← [[Cloud-Security]]
|
||||
- [[Shared-Responsibility-Model]] ← part_of ← [[Cloud-Governance]]
|
||||
Reference in New Issue
Block a user