Shared Responsibility Model Flashcards
in the public cloud, there is a shared security responsibility between you and AWS
Shared Responsibility Model
Responsible for security of the cloud
AWS
Responsible for security in the cloud
Your Responsibility
Responsible for global infrastructure elements such as regions, edge locations, and availability zones
AWS Global Infrastructure
Responsible for the security of its data centers where data resides in the cloud
AWS
Responsible for maintaining networking components: such as generators, uninterruptible power supply, and computer room air conditions. fire suppression systems
AWS
Responsible for any managed service like RDS, S3, ECS, or Lambda, patching of host operating systems, and data access endpoints.
AWS
Responsible for how the services are implemented and managing application data
You
Responsible for installed software and encryption of application data
You
Responsible for securing accounts, API calls, rotating of credentials, and restricting internet access from VPCs
You
Responsible for the guest operating systems which include updates and security patches
You
Responsible for application security and identity access management
You
Responsible for network traffic protection which includes security group firewall configuration
You
Responsible for frequently scanning and patching vulnerabilities in code
You
Model for Ec2
EC2 Shared Responsibility Model