SAA-C03 Question 30
Select 3A company is using Amazon S3 to store sensitive data that is subject to compliance requirements. They also use EC2 instances for processing this data. According to the AWS shared responsibility model, which of the following tasks are the responsibility of the customer?
- A
Encrypting sensitive data stored in Amazon S3
- B
Ensuring that EC2 instances are patched and updated
- C
Maintaining the physical security of AWS data centers
- D
Configuring IAM policies to restrict access to the S3 bucket
- E
Ensuring that AWS provides sufficient power and cooling for its data centers
Show answer and explanation
Correct answers: A, B, D
Explanation
In the AWS shared responsibility model, AWS is responsible for 'security of the cloud,' which includes the physical infrastructure such as data centers, power, and cooling. The customer is responsible for 'security in the cloud,' which includes tasks such as configuring access controls (IAM policies), managing encryption, and maintaining the security of their EC2 instances and applications. This distinction ensures that customers have control over their data and workloads while AWS handles the underlying infrastructure.
- A. Correct.
Correct: Encrypting data in S3 is the customer’s responsibility as part of managing the security of their data in the cloud.
- B. Correct.
Correct: The customer is responsible for managing their EC2 instances, including applying patches and updates to the operating system and applications.
- C. Incorrect.
Incorrect: Physical security of AWS data centers is the responsibility of AWS as part of their responsibility for the underlying infrastructure.
- D. Correct.
Correct: Configuring IAM policies to control access to AWS resources, such as S3 buckets, falls under the customer's responsibility.
- E. Incorrect.
Incorrect: AWS is responsible for maintaining the physical infrastructure, including power and cooling, as part of their responsibility in the shared responsibility model.