The shared security responsibility model

Before designing and making cloud solutions operational, it is important to understand the security responsibility that is shared between AWS and the customers who consume these services. The following diagram distinguishes between the responsibilities of AWS as a cloud service provider and the customers who consume these services:

Figure 2.12: The shared security responsibility model

Amazon promises that security is its highest priority as a public cloud service provider. AWS is committed to providing consistent, robust, and secure AWS public cloud services to their customers. Amazon achieves this by securing foundation services (that is, compute, storage, database, and networking) and global infrastructures (such as regions, AZs, and edge locations). Customers have to manage the security of their data, OSes, application platforms, applications...