In general, the service provider is responsible for keeping the hosted infrastructure
secure from attacks outside of the customer's control. This includes, but is not limited
to, physical security and datacentre security. The infrastructure must be kept
confidential - meaning only authorized personnel and the customer have access to it.
However, the customer also has a responsibility in keeping the hosted infrastructure
secure. For example, if the infrastructure is accessible via the internet (likely since it
is hosted on the cloud), the customer is likely responsible for keeping the interface
