AWS Shared Responsibility Model

The AWS Shared Responsibility Model defines the shared security and compliance responsibilities between AWS and its customers. The model helps ensure that AWS customers have the visibility and control they need to maintain the security and compliance of their workloads running in the AWS Cloud.

AWS Shared Responsibility Model Components

The AWS Shared Responsibility Model has three main components:

1. AWS is responsible for the security of the cloud
2. Customers are responsible for the security in the cloud
3. AWS and customers are jointly responsible for the shared responsibility areas

AWS Responsibilities

AWS is responsible for protecting the infrastructure that supports the AWS Cloud. This includes providing:

• A secure physical infrastructure
• Secure software and services
• Tools and resources to help customers secure their workloads

Customer Responsibilities

Customers are responsible for protecting their data, applications, and other assets running in the AWS Cloud. This includes:

• Configuring security settings for their AWS resources
• Managing and patching their operating systems and applications
• Implementing security best practices

Shared Responsibility Areas

AWS and customers are jointly responsible for the following areas:

• Identity and access management
• Network security
• Logging and monitoring
• Security incident response

Benefits of the Shared Responsibility Model

The Shared Responsibility Model provides a number of benefits, including:

• Improved security: The model helps to ensure that AWS customers have the visibility and control they need to maintain the security of their workloads running in the AWS Cloud.
• Reduced costs: By sharing the responsibility for security, AWS customers can reduce their costs.
• Increased flexibility: The model provides AWS customers with the flexibility to choose the security controls that best meet their needs.