Sultan Chairul

NIM : 2581484737

1. Explain the “Shared Responsibility Model.” What is the cloud provider responsible for, and what is the business (customer) responsible for?

Answer :
The Shared Responsibility Model is a cloud security concept where security responsibilities are divided between the cloud provider and the customer. The cloud provider is responsible for securing the cloud infrastructure, including physical servers, networking, storage, and data centers. Meanwhile, the business or customer is responsible for securing its own data, user accounts, applications, access permissions, and cloud configurations. This model ensures that both the provider and the customer work together to maintain cloud security.

2. What is a cloud misconfiguration, and can you provide an example (e.g., a public S3 bucket)?

Answer :
A cloud misconfiguration occurs when cloud resources or security settings are configured incorrectly, creating vulnerabilities or exposing sensitive data. This is one of the most common causes of cloud security incidents. For example, an Amazon S3 bucket may accidentally be set to “public,” allowing anyone on the internet to access confidential company files. Such mistakes can result in data leaks, unauthorized access, and reputational damage.

3. Why are Identity and Access Management (IAM) policies so critical in a cloud environment?

Answer :
Identity and Access Management (IAM) policies are critical because they control who can access cloud resources and what actions they are allowed to perform. IAM policies help organizations enforce the principle of least privilege by giving users only the permissions they need for their work. Strong IAM management reduces the risk of unauthorized access, insider threats, accidental changes, and data breaches. Since cloud systems are accessible through the internet, proper IAM controls are essential for protecting sensitive data and systems.

Keterangan : 100%

Bukti : Sudah mengerjakan tugas dengan baik dan benar.