Shared Responsibilities

Huawei guarantees that its commitment to cyber security will never be outweighed by consideration of commercial interests. To address emerging cloud security challenges and pervasive cloud security threats and attacks, Huawei Cloud has built a comprehensive cloud service security assurance system for different regions and industries. This system is based on Huawei's unique software and hardware advantages, and on relevant laws, regulations, industry standards, and on the security ecosystem as a whole.

The shared responsibility model for Huawei Cloud and the tenants who use Huawei Cloud services is illustrated in Figure 1. Responsibilities are as follows:

Huawei Cloud: Ensure the security of cloud services and provide secure clouds. Huawei Cloud's security responsibilities include ensuring the security of our IaaS, PaaS, and SaaS services, as well as the physical environments of the Huawei Cloud data centers where our IaaS, PaaS, and SaaS services operate. Huawei Cloud is responsible for not only the security functions and performance of our infrastructure, cloud services, and technologies, but also for the overall cloud O&M security and, in more widely speaking, the security compliance of our infrastructure and services.
Tenant: Use the cloud securely. Tenants of Huawei Cloud are responsible for the secure and effective management of the tenant-customized configurations of cloud services including IaaS, PaaS, and SaaS. This includes but is not limited to virtual networks, the OSs of virtual machine hosts and guests, virtual firewalls, API Gateway, advanced security services, all types of cloud services, tenant data, identity accounts, and key management.

elaborates on the ideas behind and measures used to ensure Huawei Cloud security, including cloud security strategies, the shared responsibility model, compliance and privacy, security organizations and personnel, infrastructure security, tenant service and security, engineering security, O&M security, and ecosystem security.

Figure 1 Huawei Cloud shared security responsibility model