{"id":923,"date":"2019-07-02T10:43:02","date_gmt":"2019-07-02T10:43:02","guid":{"rendered":"https:\/\/www.testpreptraining.com\/tutorial\/?page_id=923"},"modified":"2022-03-04T05:44:43","modified_gmt":"2022-03-04T05:44:43","slug":"define-the-aws-shared-responsibility-model","status":"publish","type":"page","link":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/","title":{"rendered":"Define the AWS Shared Responsibility Model"},"content":{"rendered":"\n<p>In this, we will learn about AWS Shared Responsibility Model.<\/p>\n\n\n\n<p>Amazon safeguards the AWS infrastructure from <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Vulnerabilities<\/li><li>Intrusions<\/li><li>Fraud<\/li><li>Abuse<\/li><\/ul>\n\n\n\n<p>&nbsp;so as to offer the\ncustomers with security capabilities as per their needs.<\/p>\n\n\n\n<p>Multiple and varied AWS cloud services, emphasizes, demarcating\nresponsibility between customer and AWS. <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>AWS is responsible for the physical security of\nthe facilities as well as the infrastructure that includes compute, database,\nstorage and networking resources. <\/li><li>The customer is responsible for software, data\nand access that sits on top of the infrastructure layer.<\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"373\" src=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-750x373.png\" alt=\"Shared Responsibility Model\" class=\"wp-image-987\" srcset=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-750x373.png 750w, https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model.png 900w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">AWS Security Responsibilities<\/h2>\n\n\n\n<p>In general, AWS considers itself responsible for the\nsecurity of the cloud as a whole, while customers should maintain\nresponsibility for the security of their specific instances.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>AWS Hardware\/Global Infrastructure: this\nincludes regional, available, and edge zones of Amazon&#8217;s cloud infrastructure.\nThis is done through physical security protections, and constant IT\nmaintenance.<\/li><li>AWS Software (Computation, Storage, Database,\nNetworking): Amazon guarantees a secure software platform across all of its\nservices. This aspect of Amazon\u2019s responsibility also refers to AWS security\nservices built by Amazon for use by customers. This can include encryption keys,\nnetwork monitoring tools, database protection, and more.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Customer Security Responsibilities<\/h2>\n\n\n\n<p>In general, AWS considers itself responsible for the\nsecurity of the cloud as a whole, while customers should maintain\nresponsibility for the security of their specific instances.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>AWS Hardware\/Global Infrastructure: this\nincludes regional, available, and edge zones of Amazon&#8217;s cloud infrastructure.\nThis is done through physical security protections, and constant IT\nmaintenance.<\/li><li>AWS Software (Computation, Storage, Database,\nNetworking): Amazon guarantees a secure software platform across all of its\nservices. This aspect of Amazon\u2019s responsibility also refers to AWS security\nservices built by Amazon for use by customers. This can include encryption keys,\nnetwork monitoring tools, database protection, and more.<\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"377\" src=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-01-750x377.png\" alt=\"aws shared responsibility model\n\" class=\"wp-image-988\" srcset=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-01-750x377.png 750w, https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-01.png 975w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Shared Security Responsibilities<\/h2>\n\n\n\n<p>AWS provides the requirements for the infrastructure and the\ncustomer must provide their own control implementation within their use of AWS\nservices:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>IT Controls: Not only are IT operations shared\nbetween AWS and its customers, so are the management and operations of said\ncontrols. AWS can help with moderating the customer burden of security methods\nlike firewall maintenance, network level encryption, while also overseeing IT\ncontrols deployment to ensure proper adherence to AWS security regulations.<\/li><li>Patch Management: AWS is responsible for\npatching and fixing flaws within the infrastructure, but customers are\nresponsible for patching their guest OS and applications.<\/li><li>Configuration Management: AWS maintains the\nconfiguration of its infrastructure devices, but a customer is responsible for\nconfiguring their own guest operating systems, databases, and applications.<\/li><li>Awareness &amp; Training: AWS trains AWS\nemployees, but a customer must train their own employees.<\/li><li>Customer Specific: Controls which are solely the\nresponsibility of the customer based on the application they are deploying\nwithin AWS services.<\/li><li>Service and Communications Protection: or Zone\nSecurity which may require a customer to route or zone data within specific\nsecurity environments.<\/li><\/ul>\n\n\n\n<p>Customers should <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>implement access control policies using AWS IAM<\/li><li>configuring AWS Security Groups (firewall) to\nprevent inappropriate access to ports<\/li><li>enabling AWS CloudTrail<\/li><\/ul>\n\n\n\n<p>Customers are also responsible for <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>enforcing appropriate data loss prevention\npolicies for compliance with internal and external policies, <\/li><li>Detecting and remediating threats arising from\nstolen account credentials or malicious\/accidental misuse of AWS.<\/li><\/ul>\n\n\n\n<p>Amazon is focused on securing its software, hardware, and\nthe facilities where AWS services are located. Amazon\u2019s responsibilities\ninclude securing its <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Computing<\/li><li>Storage<\/li><li>Networking<\/li><li>database services<\/li><li>security configuration of AWS managed services\nlike DynamoDB, RDS, Redshift, Elastic MapReduce, Workspaces, etc.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">AWS Shared Responsibility Model Summary <\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>\n  &nbsp;\n  <\/td><td>\n  Customer \n  <\/td><td>\n  AWS\n  <\/td><\/tr><tr><td>\n  Preventing or detecting when an AWS account has been compromised \n  <\/td><td>\n  x \n  <\/td><td>\n  &nbsp;\n  <\/td><\/tr><tr><td>\n  Preventing or detecting a privileged or regular AWS user behaving in\n  an insecure manner \n  <\/td><td>\n  x \n  <\/td><td>\n  &nbsp;\n  <\/td><\/tr><tr><td>\n  Configuring AWS services (except AWS Managed Services) in a secure\n  manner \n  <\/td><td>\n  x \n  <\/td><td>\n  &nbsp;\n  <\/td><\/tr><tr><td>\n  Restricting access to AWS services or custom applications to only\n  those users who require it \n  <\/td><td>\n  x \n  <\/td><td>\n  &nbsp;\n  <\/td><\/tr><tr><td>\n  Updating Guest Operating Systems and applying security patches \n  <\/td><td>\n  x \n  <\/td><td>\n  &nbsp;\n  <\/td><\/tr><tr><td>\n  Ensuring AWS and custom applications are being used in a manner\n  compliant with internal and external policies \n  <\/td><td>\n  x \n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Ensuring network security (DoS, MITM, port scanning) \n  <\/td><td>\n  x \n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Configuring AWS Managed Services in a secure manner \n  <\/td><td>\n  &nbsp;\n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Providing physical access control to hardware\/software \n  <\/td><td>\n  &nbsp;\n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Providing environmental security assurance against things like mass\n  power outages, earthquakes, floods, and other natural disasters \n  <\/td><td>\n  &nbsp;\n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Database patching \n  <\/td><td>\n  &nbsp;\n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Protecting against AWS zero day exploits and other vulnerabilities \n  <\/td><td>\n  &nbsp;\n  <\/td><td>\n  x\n  <\/td><\/tr><tr><td>\n  Business continuity management (availability, incident response) \n  <\/td><td>\n  &nbsp;\n  <\/td><td>\n  x\n  <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img loading=\"lazy\" decoding=\"async\" width=\"334\" height=\"354\" src=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-02.png\" alt=\"define the aws shared responsibility model\n\" class=\"wp-image-989\"\/><\/figure><\/div>\n\n\n\n<p>Link for free practice test &#8211; <a href=\"https:\/\/www.testpreptraining.ai\/aws-certified-cloud-practitioner-free-practice-test\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.testpreptraining.ai\/aws-certified-cloud-practitioner-free-practice-test<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this, we will learn about AWS Shared Responsibility Model. Amazon safeguards the AWS infrastructure from Vulnerabilities Intrusions Fraud Abuse &nbsp;so as to offer the customers with security capabilities as per their needs. Multiple and varied AWS cloud services, emphasizes, demarcating responsibility between customer and AWS. AWS is responsible for the physical security of the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":906,"menu_order":6,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-923","page","type-page","status-publish","hentry","category-amazon-aws"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Define the AWS Shared Responsibility Model - Testprep Training Tutorials<\/title>\n<meta name=\"description\" content=\"Enhance your knowledge level by learning the concepts of Shared Responsibility Model AWS Certification Exam Preparation Now!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Define the AWS Shared Responsibility Model - Testprep Training Tutorials\" \/>\n<meta property=\"og:description\" content=\"Enhance your knowledge level by learning the concepts of Shared Responsibility Model AWS Certification Exam Preparation Now!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/\" \/>\n<meta property=\"og:site_name\" content=\"Testprep Training Tutorials\" \/>\n<meta property=\"article:modified_time\" content=\"2022-03-04T05:44:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-750x373.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/\",\"name\":\"Define the AWS Shared Responsibility Model - Testprep Training Tutorials\",\"isPartOf\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#website\"},\"datePublished\":\"2019-07-02T10:43:02+00:00\",\"dateModified\":\"2022-03-04T05:44:43+00:00\",\"description\":\"Enhance your knowledge level by learning the concepts of Shared Responsibility Model AWS Certification Exam Preparation Now!\",\"breadcrumb\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS Cloud Practitioner (CLF-C02)\",\"item\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Define the AWS Shared Responsibility Model\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#website\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\",\"name\":\"Testprep Training Tutorials\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.testpreptraining.ai\/tutorial\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#organization\",\"name\":\"Testprep Training\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png\",\"contentUrl\":\"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png\",\"width\":583,\"height\":153,\"caption\":\"Testprep Training\"},\"image\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Define the AWS Shared Responsibility Model - Testprep Training Tutorials","description":"Enhance your knowledge level by learning the concepts of Shared Responsibility Model AWS Certification Exam Preparation Now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/","og_locale":"en_US","og_type":"article","og_title":"Define the AWS Shared Responsibility Model - Testprep Training Tutorials","og_description":"Enhance your knowledge level by learning the concepts of Shared Responsibility Model AWS Certification Exam Preparation Now!","og_url":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/","og_site_name":"Testprep Training Tutorials","article_modified_time":"2022-03-04T05:44:43+00:00","og_image":[{"url":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/07\/define-the-aws-shared-responsibility-model-750x373.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/","url":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/","name":"Define the AWS Shared Responsibility Model - Testprep Training Tutorials","isPartOf":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#website"},"datePublished":"2019-07-02T10:43:02+00:00","dateModified":"2022-03-04T05:44:43+00:00","description":"Enhance your knowledge level by learning the concepts of Shared Responsibility Model AWS Certification Exam Preparation Now!","breadcrumb":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/define-the-aws-shared-responsibility-model\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.testpreptraining.ai\/tutorial\/"},{"@type":"ListItem","position":2,"name":"AWS Cloud Practitioner (CLF-C02)","item":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-cloud-practitioner\/"},{"@type":"ListItem","position":3,"name":"Define the AWS Shared Responsibility Model"}]},{"@type":"WebSite","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#website","url":"https:\/\/www.testpreptraining.ai\/tutorial\/","name":"Testprep Training Tutorials","description":"","publisher":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.testpreptraining.ai\/tutorial\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#organization","name":"Testprep Training","url":"https:\/\/www.testpreptraining.ai\/tutorial\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/","url":"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png","contentUrl":"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png","width":583,"height":153,"caption":"Testprep Training"},"image":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/comments?post=923"}],"version-history":[{"count":9,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/923\/revisions"}],"predecessor-version":[{"id":51922,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/923\/revisions\/51922"}],"up":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/906"}],"wp:attachment":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/media?parent=923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/categories?post=923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/tags?post=923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}