Shared Responsibilities

Shared Responsibilities on Huawei Cloud

Huawei Cloud guarantees that its commitment to cyber security will never be outweighed by the consideration of commercial interests. To tackle emerging cloud security challenges and pervasive cloud security threats and attacks, Huawei Cloud builds a comprehensive cloud service security assurance system for different regions and industries based on Huawei's unique software and hardware advantages, laws, regulations, industry standards, and security ecosystem.

Figure 1 illustrates the responsibilities shared by Huawei Cloud and users.

Huawei Cloud: ensures the security of cloud services and provides secure clouds. Huawei Cloud's security responsibilities include ensuring the security of our IaaS, PaaS, and SaaS services, as well as the physical environments of the Huawei Cloud data centers where our IaaS, PaaS, and SaaS services operate. Huawei Cloud is responsible for not only the security functions and performance of our infrastructure, cloud services, and technologies, but also for the overall cloud O&M security and, in the broader sense, the security compliance of our infrastructure and services.
Tenant: uses the cloud securely. Tenants of Huawei Cloud are responsible for the secure and effective management of the internal security as well as the tenant-customized configurations of cloud services, including IaaS, PaaS, and SaaS. This includes but is not limited to operating systems of virtual networks, virtual machine (VM) hosts and guest VMs, virtual firewalls, API Gateway and advanced security services, all types of cloud services, tenant data, identity accounts, and key management.

Huawei Cloud Security White Paper introduces in detail the building ideas and measures of Huawei cloud security, including cloud security strategy, responsibility sharing model, compliance and privacy, security organization and personnel, infrastructure security, tenant service and tenant security, engineering security, O&M and operation security, and ecosystem security.

Figure 1 Huawei Cloud shared security responsibility model

Shared Responsibilities on Huawei Cloud Live

Live requires the participation and responsibility sharing of the following roles. The security responsibility boundary of each role is as follows:

Huawei Cloud tenant
Responsible for livestreaming management, including the following security responsibilities:
- Application and data security of the livestreaming platform and apps
- Security of livestreaming activities
- End user (streamers or viewers) security management, including security supervision of live video content
- Response to regulators
Huawei Cloud Live
The security responsibilities of Live are as follows:
- Transmission network security, which is essential to the transmission and processing of video content
- Tenant data security
- Providing technologies, such as snapshot capturing and recording, to support tenants' video content monitoring
- Response to regulators
End user
Streamers and viewers are responsible for the security of video production and video content.