In infrastructure as a service (IaaS), which cloud component is the cloud service provider responsible...

In IaaS, the cloud provider is responsible for securing the physical infrastructure that supports the service, including physical wires, switches, data centers, servers, and foundational hardware. Customers consume virtualized compute, storage, and networking but do not manage the provider’s physical facilities or underlying hardware fabric. API requests between microservices, database queries between application services, and workload traffic to third-party services are customer or application-owner responsibilities because they involve workload architecture, application logic, network policy, identity, and data protection. The shared responsibility model is especially important in IaaS because customers have significant control over operating systems, applications, configurations, and traffic flows. A common mistake is assuming the provider secures everything simply because the workload runs in the cloud. In reality, the provider secures the cloud infrastructure, while the customer secures what they deploy, configure, and expose. Reference/topics: Cloud Security 5.3, shared responsibility model; Cloud Security 5.2, IaaS.