How would you answer an interview scenario involving shared responsibility model in Cloud Security?

Explain who is responsible for operating-system patching, identity access, and data encryption when moving from virtual machines to a managed platform service.