Cloud resource security is a joint effort between client and provider; compliance with policies depends on the resource model (e.g. SaaS, PaaS, etc.)
