Shared Responsibilities

Huawei guarantees that its commitment to cyber security will never be outweighed by the consideration of commercial interests. To cope with emerging cloud security challenges and pervasive cloud security threats and attacks, Huawei Cloud builds a comprehensive cloud service security assurance system for different regions and industries based on Huawei's unique software and hardware advantages, laws, regulations, industry standards, and security ecosystem.

Huawei Cloud Security White Paper elaborates on the ideas and measures for building Huawei Cloud security, including cloud security strategies, the shared responsibility model, compliance and privacy, security organizations and personnel, infrastructure security, tenant service and security, engineering security, O&M security, and ecosystem security.

Figure 1 Huawei Cloud shared security responsibility model

In the preceding model, different responsibilities are assigned at different layers.

• AI applications: You can build diverse AI applications like OCR, NLP, or large language models. You need to secure their application's API connections. For applications linked to physical devices, such as smart machines, consider their real-world safety impacts. You bear full responsibility for ensuring this security.
• AI platform: The platform consists of ModelArts and MaaS. It uses models and training data sourced from open communities or supplied by you. You handle your own security measures.

• Security configuration: The security configuration and management depends on the resource mode. In ModelArts Standard, Huawei Cloud handles resources and ensures security. In ModelArts Lite, you manage resources, configure services, and maintain security.
• Infrastructure: Huawei Cloud data centers manage the security of essential services like compute, storage, network, and their physical infrastructure across all resource modes.