A company wants to use Amazon Bedrock. The company needs to review which security aspects the company is responsible for when using Amazon Bedrock. Which security aspect will the company be…

Question

Options

• APatching and updating the versions of Amazon Bedrock
• BProtecting the infrastructure that hosts Amazon Bedrock
• CSecuring the company's data in transit and at rest
• DProvisioning Amazon Bedrock within the company network

• A
  3% (1)
• B
  3% (1)
• C
  87% (27)
• D
  6% (2)

Explanation

Shared Responsibility Model & Amazon Bedrock

Under AWS's Shared Responsibility Model, AWS manages security of the cloud (infrastructure, hardware, patching managed services), while customers are responsible for security in the cloud - including protecting their own data through encryption, access controls, and securing data both in transit and at rest when using Amazon Bedrock.

Why the distractors are wrong:

• A (Patching/updating Bedrock): Amazon Bedrock is a fully managed service, so AWS handles all patching and version updates - the customer has no access to the underlying infrastructure to do this.
• B (Protecting hosting infrastructure): AWS owns and secures the physical and network infrastructure that runs Bedrock - this is entirely AWS's responsibility.
• D (Provisioning within company network): Bedrock is a managed cloud service; customers don't provision or configure the underlying network infrastructure it runs on - AWS does.

Memory Tip: Think of it as "AWS owns the house, you own your belongings." AWS secures the building (infrastructure, patching, hardware), but you are responsible for locking up your valuables - your data. Whenever a question mentions your data, that's almost always the customer's responsibility.

No community discussion yet for this question.