Security, governance and manageability benefits of the cloud (management of the cloud vs in the cloud)

Moving to the cloud can strengthen security and governance, not only lower costs. Microsoft invests heavily in the physical security of its datacenters, in protecting its network against attacks such as large-scale distributed denial-of-service (DDoS) floods, and in keeping the underlying platform patched. Depending on the service type, you can also hand over operating system patching to Microsoft, which removes a common source of vulnerabilities. You still decide who has access and how your data is protected, as the shared responsibility model says. The Microsoft Azure Fundamentals exam (AZ-900) groups these benefits as security, governance and manageability. On the security side, the cloud gives you a choice of how much to manage. With IaaS you keep maximum control and can install any security software you like; with PaaS and SaaS, Microsoft handles more of the patching and maintenance for you. Azure also offers built-in services you would otherwise have to buy and operate, such as Azure DDoS Protection, Microsoft Defender for Cloud for security posture and threat protection, and Azure Key Vault for storing secrets and keys.