Cloud security is a shared responsibility between the cloud service provider and user organizations. With providers like AWS, Microsoft and Google handling infrastructure security, companies are often on their own for protecting the remaining elements of the security stack.