A Linux instance is running on Amazon EC2.
The team is assigning ownership for security updates to the guest operating system.
Which responsibility belongs to the customer under the shared responsibility model?
AWS protects the cloud infrastructure, while the customer manages the EC2 guest operating system, middleware, and application.
Detailed explanation
The customer configures, updates, and secures the guest OS running inside the EC2 instance.
The customer configures, updates, and secures the guest OS running inside the EC2 instance.
The EC2 guest OS is within the customer's management scope; AWS does not apply all guest OS updates for the customer.
The EC2 guest OS is within the customer's management scope; AWS does not apply all guest OS updates for the customer.
AWS operates and protects the physical facilities and infrastructure that run the cloud services.
AWS operates and protects the physical facilities and infrastructure that run the cloud services.
Application code is customer content and remains the customer's responsibility.
Application code is customer content and remains the customer's responsibility.
Check official documentation
Compare the following points with the official documentation.
AWS CLIは実行せず、AWS Shared Responsibility ModelのEC2に関する責任境界を確認する。
What to confirm
ゲストOSの更新は利用者側の責任として整理される。
Key points
- EC2 guest OS
- Customer responsibility
- Security patching
Notes
- Environment: AWS公式ドキュメントの責任範囲確認
- Confirm the service-specific responsibility boundary in the current AWS documentation.
Foundation review
Layer boundary
AWS protects the infrastructure layer while the customer maintains the guest OS.
Maintenance ownership
The customer plans OS and application updates for its instance.