What is the company’s responsibility in this situation, according to the AWS shared responsibility model?
Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system.
Open a support case and request that AWS patch the DB instance operating system.
Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for the DB instance.
Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.
Explanations:
The company cannot obtain administrative access to the server running the RDS DB instance because Amazon RDS is a managed service. AWS is responsible for the underlying infrastructure, including the operating system.
AWS handles the patching of the underlying operating system for RDS DB instances as part of its management responsibilities. However, the company is not required to open a support case to request patching, as this is done automatically during scheduled maintenance.
The company does not have administrative access to the underlying operating system of the RDS DB instance, so it cannot apply patches directly. AWS manages the operating system and applies necessary patches.
AWS is responsible for patching the underlying operating system of the RDS instance. The company can define a maintenance window when patching can occur, but AWS manages the actual patching process.
As I understand it, the answer is:
Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.