1 The AWS Shared Responsibility Model Free Online FlashCards

What is the basic division of AWS security responsibility?

AWS is responsible for security of the cloud; customers are responsible for security in the cloud.

What does AWS protect as part of security of the cloud?

AWS protects the facilities, hardware, networking, and foundational software that run AWS services.

What do customers protect as part of security in the cloud?

Customers protect their data, identities, applications, and configuration of the AWS resources they use.

Which security tasks generally remain with an Amazon EC2 customer?

For Amazon EC2, customers generally manage the guest operating system and patches, installed applications, security groups, identities, and data.

How are responsibilities generally divided for Amazon RDS?

AWS generally manages hosting infrastructure and many database and operating-system maintenance tasks; customers manage data, access, exposure, configuration, use, and service settings.

Which security decisions remain with customers when using Amazon S3?

Customers remain responsible for S3 data classification, permissions, encryption choices, and monitoring.

Which security responsibilities remain with customers for AWS Lambda?

Customers manage Lambda function code and libraries, resource configuration, permissions, and data.

How does a more managed AWS service affect the responsibility boundary?

As a service becomes more managed, AWS handles more of the underlying technology, but customers still make security decisions.

What patching responsibility can remain with a managed-service customer?

AWS may provide and validate managed-service patches, while customers remain responsible for reviewing updates and scheduling or applying them as required.

How should customers grant access under the shared responsibility model?

Use IAM roles and policies to grant only the permissions each user or service needs.

What should be checked beyond IAM permissions to reduce exposure?

Check resource policies and network controls too; overly broad permissions can expose data even when AWS infrastructure is secure.

What should customers do to protect sensitive data in S3?

Classify the data, restrict access, choose suitable encryption settings, and enable appropriate logging or detection.