Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?
Security awareness and training
Development of an IAM password policy
Patching of the guest operating system
Physical and environmental controls
Explanations:
Security awareness and training is the responsibility of the customer. AWS provides tools and resources, but it is up to the customer to implement training for their staff.
The development of an IAM password policy is the responsibility of the customer. While AWS provides IAM tools, customers must define and manage their own policies according to their security needs.
Patching of the guest operating system is the responsibility of the customer. AWS manages the underlying infrastructure, but customers must maintain and patch their operating systems and applications running on AWS services.
Physical and environmental controls are entirely the responsibility of AWS. This includes securing the data centers, controlling access, and ensuring the physical security of the infrastructure on which services are built.