Which actions are the responsibility of AWS, according to the AWS shared responsibility model?
(Choose two.)
Securing the virtualization layer
Patching the operating system on Amazon EC2 instances
Enforcing a strict password policy for IAM users
Patching the operating system on Amazon RDS instances
Configuring security groups and network ACLs
Explanations:
Securing the virtualization layer is the responsibility of AWS. This includes managing the infrastructure that runs the services, ensuring that the hardware and virtualization software are secure.
Patching the operating system on Amazon EC2 instances is the customer’s responsibility. Users have control over their EC2 instances and must manage their OS, including applying updates and patches.
Enforcing a strict password policy for IAM users is also the responsibility of the customer. AWS provides the tools to create and enforce policies, but it is up to the customer to implement them.
Patching the operating system on Amazon RDS instances is AWS’s responsibility. AWS manages the RDS environment, including the database software and its security updates, thereby relieving the customer from this task.
Configuring security groups and network ACLs is the customer’s responsibility. Customers must define their network security policies and configurations to control inbound and outbound traffic to their AWS resources.