Cloud Engineer interview question · Most asked
Explain the shared responsibility model. What's the customer responsible for with a managed database?
Summary
The provider secures the cloud itself (facilities, hardware, hypervisor, and for managed services the OS and engine patching); the customer secures what they put in it. For a managed database the customer owns network access rules, IAM and database users, encryption choices, backup retention settings, schema and data, and how applications connect.
Longer Answer
Most cloud incidents are on the customer side: public storage, leaked keys, over-privileged roles, unpatched VMs. The line moves up as you use more managed services, but identity and data are always yours.
Key Points
- Provider: security of the cloud.
- Customer: security in the cloud.
- Managed DB: you own access, data, config.
- Identity and data are always yours.
Deep dive: Cloud Computing Tutorial: The Shared Responsibility Model
Explanation
What interviewers look for
Concrete examples for a managed service, not just the slogan.
More most-asked Cloud Engineer questions
- What do Multi-AZ deployments and read replicas give you for managed databases?
- Explain RTO and RPO and the four disaster recovery strategies.
- What are regions and availability zones, and how do you use them for resilience?
- How do you keep object storage buckets from being exposed publicly?
- How is an AWS IAM request evaluated when several policies apply?
- How do you approach cloud cost optimisation?
- How do you eliminate long-lived credentials in a cloud environment?
- How would you design a multi-account (landing zone) structure?