When designing a cloud solution, who is responsible for securing the physical data centers (buildings, gates, security personnel) under the Shared Responsibility Model?

Under the Shared Responsibility Model, the cloud provider is always responsible for the security of the cloud, which includes the physical infrastructure like data centers, buildings, and the security personnel protecting them. This is because the customer never has direct access to or control over these physical assets. The customer is responsible for security in the cloud, meaning their data, applications, operating systems, and network configurations. A third-party auditor might assess security, but isn't responsible for implementing it. Joint responsibility applies to areas like network controls or identity management, not physical infrastructure.