You are responsible for the security of the application, the runtime, and the VM operating system. Which cloud deployment model are you using?

In SaaS, the provider manages the entire application stack, meaning the customer is primarily responsible for data and user access, not the OS or runtime.

In FaaS (Serverless), the customer's responsibility is limited to their application code, with the provider managing the runtime and underlying operating system.

In PaaS, the provider manages the operating system and runtime environment, leaving the customer responsible primarily for their application and data.

In an Infrastructure as a Service (IaaS) model, the cloud customer is responsible for managing and securing the operating system, runtime, application, and data, while the provider secures the physical infrastructure, networking, and virtualization layer.