The Shared Responsibility Model

IaaS, PaaS, and SaaS — who owns what in cloud security, broken down by responsibility layer.
Orange Book