According to the AWS shared responsibility model, which task is the customer's responsibility?

According to the AWS shared responsibility model, the customer's responsibilities vary depending on the service used. For Infrastructure as a Service (IaaS) products like Amazon EC2, AWS manages the security of the cloud (physical hardware, hypervisor), while the customer is responsible for security in the cloud. This includes managing and patching the guest operating system, configuring security groups, and managing user access and applications installed on the instance. The other options refer to managed or serverless services where AWS is responsible for the underlying infrastructure, including the operating systems.

A. AWS Lambda is a serverless compute service, meaning AWS manages the entire underlying infrastructure, including the operating system and runtime environment.

B. Amazon DynamoDB is a fully managed NoSQL database service. AWS is responsible for all underlying hardware, software, and operating system maintenance.

C. Amazon S3 is a managed object storage service. AWS is responsible for operating, managing, and controlling the physical infrastructure that runs the service.

1. AWS Documentation

"Shared Responsibility Model." This document explicitly states that for IaaS services like Amazon EC2

the customer is responsible for "Operating system

network & firewall configuration." The diagrams on this page clearly differentiate customer responsibilities for IaaS versus managed services.

Source: AWS Documentation > Security

Identity

& Compliance > Shared Responsibility Model.

2. AWS Well-Architected Framework

"Security Pillar" Whitepaper (July 2023). In the section "Understanding the shared responsibility model

" it clarifies: "For a service like Amazon EC2

you are responsible for managing the guest operating system (including updates and security patches)..." (p. 6).

Source: AWS Whitepapers & Guides > AWS Well-Architected Framework > Security Pillar.

3. Amazon EC2 User Guide for Linux Instances

"Security and networking in Amazon EC2." This guide details customer responsibilities

stating

"You are responsible for the security of your instance

including patching the guest operating system..."

Source: AWS Documentation > Compute > Amazon EC2 > User Guide for Linux Instances > Security

identity

and compliance > Security and networking in Amazon EC2.