AWS Cloud TutorialLesson 60Free preview

AWS Shared Responsibility

This lesson is part of AWS · All levels

Summary

AWS implements a shared responsibility model: AWS is responsible for cloud security (hardware, global network, facilities), while customers are responsible for security in the cloud (data, configuration, access, to patching OS on IaaS services). This division of responsibilities varies depending on the type of service used.

Key points

AWS: security of the cloud; customers: security in the cloud
The customer manages the data, account, IAM, and application-side encryption
On EC2, customers patch the OS; on Lambda/S3, AWS takes care of the infrastructure.
Root account must be maintained with MFA and not used daily
Understanding this division prevents the assumption that AWS takes care of everything.

Full lesson

Code examples and quizzes

Full lessons, code examples, and quizzes are available to subscribers. 5 questions.