3.1. AWS Shared Responsibility Model

💡 First Principle: At its core, the AWS Shared Responsibility Model is a fundamental principle clarifying security obligations in the cloud. Its core purpose is to define precisely who is accountable for what aspects of security, ensuring no gaps in protection. This model is crucial for designing and operating secure and compliant cloud architectures.

AWS is responsible for "security of the cloud", encompassing the underlying infrastructure. Conversely, the customer is responsible for "security in the cloud", covering everything configured and managed within their AWS environment.

Understanding this distinction is paramount for the AWS CLF-C02 exam. It directly impacts how you think about security responsibilities for your applications and data in the AWS Cloud. Misinterpreting these roles can lead to significant security vulnerabilities or compliance issues.

Scenario: A company is considering moving its applications to AWS and is trying to understand who is responsible for which security aspects. They are unsure about the physical security of data centers versus the security of their application code.

Reflection Question: How does the AWS Shared Responsibility Model fundamentally clarify security obligations in the cloud by defining what AWS is responsible for ("security of the cloud") and what the customer is responsible for ("security in the cloud")?