Which task is the responsibility of the customer, according to the AWS shared responsibility model?

Question

Options

• APatch the Amazon DynamoDB operating system.
• BSecure Amazon CloudFront edge locations by allowing physical access according to the principle
• CProtect the hardware that runs AWS services.
• DUse AWS Identity and Access Management (IAM) according to the principle of least privilege.

• A
  2% (1)
• B
  2% (1)
• C
  5% (3)
• D
  92% (60)

Explanation

AWS Shared Responsibility Model Explanation

Using IAM according to the principle of least privilege is the customer's responsibility because managing user access, permissions, and identity within AWS falls under "security in the cloud" - the customer's domain. Customers decide who gets access to what resources and must configure IAM roles, policies, and users themselves; AWS does not manage this on their behalf.

Why the distractors are wrong:

• A is incorrect because AWS manages the underlying operating system of fully managed services like DynamoDB - customers never touch that layer.
• B is incorrect because securing physical edge locations is AWS's responsibility, as customers have no physical access to AWS infrastructure.
• C is incorrect because protecting physical hardware is entirely AWS's responsibility, falling under "security of the cloud."

Memory Tip: Think of the shared responsibility model as a apartment building analogy - AWS owns and maintains the building (hardware, physical security, infrastructure), while you are responsible for what happens inside your apartment (your data, your users, your access controls). If it involves people and permissions, it's the customer's job!

No community discussion yet for this question.