Modern enterprises have started moving their services to the cloud computing to reduce their operational costs. The cloud services like Amazon web services, Azure, Google cloud are some of the services that provide complete solutions for hardware or software provisioning using the administrative interface provided by the Cloud Service Provider (CSP). However, once an organization moves its data to the cloud, it loses the control on its data with respect to location. This gives rise to the issue of regulations and compliance. For example, US federal data cannot be stored on the servers which are placed outside US. This becomes a limitation of the cloud. Larger organizations which are spread across the globe are moving to the cloud at a slower pace due to the compliance and regulatory issues that may arise due to the different compliance rules in different countries. Certain industries like financial, federal etc. are still hesitant to move their critical data to the cloud due to compliance as well as security uncertainty. NIST's definition of cloud computing highlights the features of the cloud but does not mention the security features that should be adopted by the cloud. The absence of security framework for the cloud gives rise to the vulnerabilities which can be exploited by attackers to steal the critical data from the cloud.