A training session needs two examples from the shared responsibility model.
Select one physical-infrastructure responsibility and one customer data-access responsibility.
Choose TWO responsibilities that are correctly assigned.
AWS protects the cloud infrastructure, while the customer configures access to its data and resources within the cloud.
Detailed explanation
Access control for customer data is part of the customer's Security in the Cloud responsibility.
Access control for customer data is part of the customer's Security in the Cloud responsibility.
Physical facilities and foundational infrastructure are part of AWS's Security of the Cloud responsibility.
Physical facilities and foundational infrastructure are part of AWS's Security of the Cloud responsibility.
The customer designs and applies IAM policies for its workload.
The customer designs and applies IAM policies for its workload.
AWS operates and protects its physical data centers.
AWS operates and protects its physical data centers.
Check official documentation
Compare the following points with the official documentation.
AWS Well-Architected FrameworkのSecurity PillarにあるSecurity of the Cloud / in the Cloudの説明を確認する。
What to confirm
物理施設はAWS、データアクセス設定は利用者の責任として整理される。
Key points
- Security of the Cloud
- Security in the Cloud
- Physical infrastructure
Notes
- Environment: AWS公式ドキュメントの共有責任確認
- Confirm the service-specific responsibility boundary in the current AWS documentation.
Foundation review
Two layers
The model distinguishes AWS infrastructure protection from customer workload protection.
Complementary responsibilities
Both parties contribute controls, but they manage different layers.