Which option is an AWS responsibility under the AWS shared responsibility model?

Explanations:

Managing and encrypting application data is the customer’s responsibility in the shared responsibility model.

Installing updates and security patches of the guest operating system is the customer’s responsibility.

Configuration of infrastructure devices is managed by AWS as part of the underlying infrastructure.

Configuration of security groups on each instance is the customer’s responsibility under the shared model.