A team is explaining the boundary between AWS and customer responsibilities.
It needs an example involving the physical data-center environment.
Which activity is an AWS responsibility?
AWS protects the facilities, hardware, and underlying infrastructure that make up the cloud, while customers configure their resources and data.
Detailed explanation
IAM policy design and assignment are customer configuration decisions.
IAM policy design and assignment are customer configuration decisions.
AWS is responsible for the physical facilities, hardware, and foundational infrastructure of the cloud.
AWS is responsible for the physical facilities, hardware, and foundational infrastructure of the cloud.
Resource access policies are configured by the customer.
Resource access policies are configured by the customer.
Data classification depends on the customer's business and compliance requirements.
Data classification depends on the customer's business and compliance requirements.
Check official documentation
Compare the following points with the official documentation.
AWS Well-Architected FrameworkのSecurity Pillarにある共有責任の説明を確認する。
What to confirm
物理施設とAWS基盤はAWS側の責任として説明される。
Key points
- Security of the Cloud
- Physical facilities
- Responsibility boundary
Notes
- Environment: AWS公式ドキュメントの責任範囲確認
- Confirm the service-specific responsibility boundary in the current AWS documentation.
Foundation review
Infrastructure layer
AWS operates the facilities, hardware, and foundational networking.
Cloud-in layer
Customers configure access, data, and workload settings inside the cloud.