Beginner LevelCloud Computing (AWS/GCP/Azure)
What is the AWS Shared Responsibility Model?
❓ Interview Prompt: Explain division of security responsibilities: Security OF the Cloud (Provider) vs Security IN the Cloud (Customer).
The Shared Responsibility Model defines security and compliance boundaries between cloud providers (AWS/GCP/Azure) and customers:
1. Security OF the Cloud (AWS Responsibility):
AWS is responsible for protecting the infrastructure that runs all services:
•
Physical data center security and hardware access.
•
Host OS and virtualization hypervisor software.
•
Physical facility power, cooling, and regional fiber networking.
2. Security IN the Cloud (Customer Responsibility):
Customers are responsible for managing their deployed environment:
•
Customer data encryption (in-transit and at-rest).
•
IAM user identity, permissions, and access keys.
•
Guest operating system patches, application security, and firewall configurations.
Code Implementation Example
typescript
// Shared Responsibility Division Mapping
const SHARED_RESPONSIBILITY_MAP = {
AWS_Responsibility: ['Physical Hardware', 'Host Hypervisor', 'Data Center Security'],
Customer_Responsibility: ['Data Encryption', 'IAM Policies', 'OS Patching', 'App Security']
};💡AWS Shared Responsibility Model duty mapping.
🎯 Interview Key Takeaway
AWS secures the physical hardware and cloud infrastructure; customers secure data, IAM, OS patches, and application code.
#Shared Responsibility#AWS Security#Compliance#Beginner
Back to all Cloud Computing (AWS/GCP/Azure) Questions→