Question 440
An organization is considering this AWS scenario: A startup asks whether it must protect the doors, cameras, and power systems of the AWS facilities hosting its workloads. Which underlying capability is most relevant?
Explanation
Correct Answer
AWS is responsible for physical security of the facilities underlying AWS services. This directly addresses the question rather than a different AWS use case. AWS is responsible for physical security of the facilities underlying AWS services. Recognize the requirement: Look for provider data-center premises, physical access, and environmental controls. At a high level, rely on AWS for its physical data-center infrastructure responsibilities. The intended outcome is: The shared-responsibility assessment assigns physical facility safeguards to AWS. Keep in mind: Customer application permissions remain the customer's responsibility.
Incorrect Answers
The customer remains responsible for securing user identities and access to its AWS resources. That addresses a different mechanism; this question turns on AWS is responsible for physical security of the facilities.
Managed services shift more infrastructure operations to AWS while leaving data protection and access choices with the customer. In the present case the governing issue is AWS is responsible for physical security of the facilities, which this does not resolve.
The customer is responsible for configuring and patching the guest operating system on EC2 instances. It does not verify the requested outcome; here the decisive check concerns AWS is responsible for physical security of the facilities.