In the IaaS (Infrastructure as a Service) model, clients are responsible for managing and updating the
operating system because:
Client Responsibility: The provider supplies virtualized computing resources (e.g., VMs), but OS
maintenance remains with the client.
Flexibility: Users can install, configure, and update OSs according to their needs.
Examples: AWS EC2, Microsoft Azure VMs.
Compared to Other Models:
SaaS: The provider manages the entire stack, including the OS.
DBaaS: Manages databases without requiring OS maintenance.
PaaS: The platform is managed, leaving no need for direct OS updates.
CCOA Official Review Manual, 1st Edition Reference:
Chapter 10: Cloud Security and IaaS Management: Discusses client responsibilities in IaaS
environments.
Chapter 9: Cloud Deployment Models: Explains how IaaS differs from SaaS and PaaS.