Please note here and understand the meaning of phrase "abuse or misuse of cloud Services". This phrase means to launch attacks or campaign by using cloud as a platform, mostly, public cloud.

In most cases, those APIs are both remotely accessible and wrapped into a web-based user interface.
This combination is the cloud management plane, since consumers use it to manage and configure the cloud resources, such as launching virtual machines (instances) or configuring virtual networks. From a security perspective, it is both the biggest difference from protecting physical infrastructure(since you can't rely on physical access as a control)and the top priority when designing a cloud security program. If an attacker gets into your management plane, they potentially have full remote access to your entire cloud deployment.
Ref: CSA Security Guidelines V4

The Shared Security Responsibility Model clarifies which security responsibilities are managed by the CSP and which by the CSC, based on the service model. Reference: [CCSK Study Guide, Domain 1 - Cloud Security Models]