Which security measures fall into AWS’s responsibility?
Protect the EC2 instances against unsolicited access by enforcing the principle of least-privilege access
Protect against IP spoofing or packet sniffing
Assure all communication between EC2 instances and ELB is encrypted
Install latest security patches on ELB. RDS and EC2 instances
Explanations:
Enforcing least-privilege access is the responsibility of the customer, not AWS. Customers must configure IAM roles and policies.
AWS is responsible for network security, including preventing IP spoofing and packet sniffing at the infrastructure level.
Ensuring encryption of communication between EC2 instances and ELB is the responsibility of the customer, using SSL/TLS.
Patching EC2 instances is the responsibility of the customer, while AWS manages patching for the ELB and RDS service infrastructure.