SAA-C03 Question 32
Select 2A company is planning to migrate its on-premises web application to AWS. The application will run on Amazon EC2 instances and use Amazon S3 for storing static assets. Who is responsible for managing the security of the operating system installed on the EC2 instances and the configuration of S3 bucket permissions?
- A
The customer is responsible for managing the security of the operating system on the EC2 instances.
- B
AWS is responsible for managing the security of the operating system on the EC2 instances.
- C
The customer is responsible for configuring the S3 bucket permissions.
- D
AWS is responsible for configuring the S3 bucket permissions.
- E
AWS is responsible for ensuring that EC2 instances are free from malware.
Show answer and explanation
Correct answers: A, C
Explanation
Under the AWS shared responsibility model, AWS is responsible for the security 'of' the cloud (e.g., infrastructure, hardware, and managed services), while the customer is responsible for the security 'in' the cloud. This includes managing the security of their operating systems on EC2 instances and configuring permissions for resources such as S3 buckets. Understanding this distinction is crucial for architecting secure solutions on AWS.
- A. Correct.
Correct. According to the AWS shared responsibility model, the customer is responsible for managing the operating system of the EC2 instances, including security patches, updates, and configuration.
- B. Incorrect.
Incorrect. AWS is not responsible for managing the operating system on the EC2 instances; this falls under the customer's responsibility.
- C. Correct.
Correct. The customer is responsible for configuring S3 bucket permissions to ensure proper security controls, such as using bucket policies and access control lists (ACLs).
- D. Incorrect.
Incorrect. AWS provides the infrastructure, but it is the customer's responsibility to configure S3 bucket permissions.
- E. Incorrect.
Incorrect. AWS ensures the underlying infrastructure's security, but the customer is responsible for securing their EC2 instances, including protecting them from malware.