Shared Responsibility Model

Question 1

Shared Responsibility Model - AWS Responsibility

Answer 1

• Security of the cloud
• Infrastructure (HW, SW, Facilities, and networking)
• Managed services (S3, DynamoDB, RDS, etc.)

Question 2

Share Responsibility Model - Customer Responsibility

Answer 2

• Security in the Cloud
• Management of the guest OS, firewall, network config, IAM
• Data encryption

Question 3

Shared Responsibility Model - Shared Controls

Answer 3

• Patch Management
• Config Management
• Awareness and training

Question 4

Shared Responsibility Model - RDS

Answer 4

** AWS **
* Manage underlying EC2 instance, disable SSH access
* Automated DB & OS patching
* Audit underlying instance and disk

You
* Check ports, IP, security group inbound rules in DB’s Security group
* In-database user creation and permissions
* Creating a database with or without public access
* Data encryption

Question 5

Shared Responsibility Model - S3

Answer 5

AWS
* Guarantee unlimited storage
* Guarantee encryption
* Ensure separation of data between different customers
* Ensure AWS employees can’t access your data

You
* Bucket configuration
* Bucket policy/public setting
* IAM user and roles
* Enabling encryption