Shared responsibility model

The split between what a cloud provider secures (the infrastructure) and what the customer secures (their data, configuration, and access) — the line moves depending on whether it's IaaS, PaaS, or SaaS.