Shared Responsibility Model

Data, configuration, identities, and access management stay yours at every level of managed service. That is where audits find problems.