Shared responsibility model

12 min · Module 2

AWS secures the cloud (facilities, hardware, hypervisor, global infrastructure). You secure in the cloud: data, identity, OS/patches (for EC2), network config, encryption choices.

Managed services shift more OS/patching to AWS (e.g. RDS, Lambda), but you still own access, data, and configuration.

Example / notes

# Mental model
# AWS: regions, AZs, physical security, managed control planes
# You: IAM policies, SG/NACL, encryption keys usage, app code, data classification
# EC2: you patch guest OS · RDS: AWS patches engine (you still configure auth/network)

Practice in Lab: /lab/

IAM users, roles, and policies →

Modules in this track

2. Accounts, IAM & shared responsibility
- Shared responsibility model
- IAM users, roles, and policies
3. VPC & Well-Architected basics
- VPC, subnets, and gateways
- Well-Architected Framework