Cloud Shared Responsibility Explained Through Restaurant Supply Logistics

Bytaisonik

Who secures what in the cloud: the provider or you? This standalone explainer covers the shared responsibility model of AWS, Azure and Google Cloud through a restaurant that leases its kitchen, buys from suppliers and hires caterers, and ends with practical checklists for IaaS, PaaS, SaaS and your next audit.

Chapters

  • 0:00 Food Poisoning at the Restaurant
  • 0:49 The Same Question After a Data Leak
  • 1:18 Who's Telling You This
  • 2:04 Don't Memorize It, Think Restaurant
  • 2:40 Part 1: Cloud and the Line
  • 3:15 The Big Three Landlords
  • 3:46 Many Kitchens, One Building
  • 4:25 Security of the Cloud: The Landlord
  • 4:55 Security in the Cloud: You
  • 5:27 Who Holds the Keys?
  • 5:46 Trap One: Of Versus In
  • 6:16 Each Provider Draws the Line
  • 6:55 Part 2: Three Ways to Rent
  • 7:29 IaaS: The Empty Kitchen
  • 8:16 PaaS: The Equipped Kitchen
  • 8:53 SaaS: The Catering Company
  • 9:31 Who Handles What
  • 10:00 Trap Two: SaaS Does Everything
  • 10:32 Quick Question: Who Patches?
  • 11:00 Part 3: Keys and Recipes
  • 11:47 The Keys: Identity and Access
  • 12:28 Strong Keys: MFA and Root
  • 13:09 Myth: One Strong Shared Login
  • 13:24 Least Privilege: Only the Right Keys
  • 13:58 The Recipes: Your Data
  • 14:34 Encryption: The Locked Recipe Box
  • 15:09 Key Management: Where's the Key?
  • 15:53 Backups: The Spare Pantry
  • 16:46 Part 4: The Open Back Door
  • 17:24 Public Storage Buckets
  • 17:58 Open Ports and Default Settings
  • 18:39 A Real Case: Capital One, 2019
  • 19:14 The Kitchen Logbook: Logging
  • 19:57 Myth: Copies Mean Backups
  • 20:17 Mistakes That Keep Coming Back
  • 20:49 Forgotten Tests and Secrets in Code
  • 21:34 Part 5: Staying in Control
  • 22:13 Posture Management: The Daily Walkthrough
  • 23:00 Guardrails, Policies and Access Reviews
  • 23:45 Third Party Risk: Check the Supplier
  • 24:27 What the Certificate Doesn't Cover
  • 25:06 Does Their Report Cover You?
  • 25:22 Same Check for Every SaaS Vendor
  • 25:56 What to Show an Auditor
  • 26:36 Recap: The Whole Restaurant
  • 27:10 Your Checklist for This Week
  • 27:49 Thanks for Cooking With Me

More courses and explainers on the Taistek YouTube channel. New videos every week.

Free download: get my SOC 2 checklist, study guides and ISO 27001 templates at taistek.com/free-resources.

Support the channel

All my courses are free. If this one helped you pass an exam, land a job or get through an audit, a small tip helps me keep making them.

Support on Ko-fi ☕

Similar Posts