CLF-C02 Question 63
Select 3A company is using Amazon S3 to store files and AWS Identity and Access Management (IAM) to manage user permissions. According to the AWS shared responsibility model, which of the following tasks is the company responsible for?
- A
Ensuring files stored in Amazon S3 are encrypted using server-side encryption
- B
Managing the underlying hardware infrastructure of Amazon S3
- C
Configuring IAM policies to restrict access to Amazon S3 buckets
- D
Patching the operating systems of Amazon S3 servers
- E
Monitoring access logs for suspicious activity in Amazon S3 buckets
Show answer and explanation
Correct answers: A, C, E
Explanation
Under the AWS shared responsibility model, AWS manages the security of the cloud, including hardware, software, and physical facilities, while customers are responsible for managing the security of their resources in the cloud. This includes tasks like configuring service settings, managing access permissions, and monitoring their applications and data.
- A. Correct.
Ensuring files stored in Amazon S3 are encrypted using server-side encryption is a customer responsibility because encryption settings must be configured by the user.
- B. Incorrect.
Managing the underlying hardware infrastructure of Amazon S3 is AWS's responsibility as part of managing the cloud infrastructure.
- C. Correct.
Configuring IAM policies to restrict access to Amazon S3 buckets is a customer responsibility because users define and manage access control for their resources.
- D. Incorrect.
Patching the operating systems of Amazon S3 servers is AWS's responsibility since it manages the hardware and software that hosts AWS services.
- E. Correct.
Monitoring access logs for suspicious activity in Amazon S3 buckets is a customer responsibility because customers are responsible for monitoring their own resources.