AWS Certified Cloud Practitioner — Question 829

Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Choose two.)

Answer options

• A. Physical and environmental controls
• B. Patch management
• C. Configuration management
• D. Account structures
• E. Choice of the AWS Region where data is stored

Correct answer: B, C

Explanation

Patch management and Configuration management are shared controls because both AWS and the customer have roles to play; AWS manages patches and configurations for its infrastructure, while the customer manages them for their guest operating systems and applications. Physical and environmental controls are solely the responsibility of AWS, whereas account structures and the choice of AWS Region are entirely the customer's responsibility.