What is the shared responsibility model in cloud security?

The shared responsibility model defines which security obligations belong to the cloud provider and which belong to the customer, varying by service model. In Infrastructure as a Service, the provider secures the physical infrastructure and hypervisor while the customer secures the operating system, applications, and data. In Platform as a Service, the provider additionally manages the operating system and runtime while the customer secures applications and data.