Shared Responsibility Model for IAM

Question 1

AWS

Answer 1

Infrastructure (global network security)

Configuration and vulnerability analysis

Compliance validation

Question 2

You

Answer 2

Users, Groups, Roles, Policies management and monitoring

Enable MFA on all accounts

Rotate all your keys often

Use IAM tools to apply appropriate permissions

Analyze access patterns & review permissions