AWS Shared Responsibility Model

• AWS responsibility: Security of the cloud
  • Protecting the infrastructure (hardware, software, facilities and networking) that runs all of the AWS services
  • Managed services like S3, DynamoDB, RDS, etc.
• Customer responsibility - Security in the cloud
  • For EC2 instances, customer is responsible for management of the guest OS (including security patches and updates), firewalls and networking configurations, IAM etc.
• Shared responsibility model overview: https://aws.amazon.com/compliance/shared-responsibility-model/