AWS Cloud Architecture•Part 5: Security, IAM, Messaging & Enterprise Deployments (51 - 65)
AWS Shared Responsibility Model.
In Simple Words:
- AWS is responsible for "Security OF the Cloud": Physical data centers, host hardware, hypervisor, and managed software infrastructure.
- Customer is responsible for "Security IN the Cloud": Customer data, IAM credentials, OS patching (EC2), security groups, and encryption.
bash
# Customer responsibility: Patching OS and updating packages on EC2:
sudo dnf update --security -y