AWS Certified Cloud Practitioner — Question 846

A company is moving to the AWS Cloud to reduce operational overhead for its application infrastructure.

Which IT operation will the company still be responsible for after the migration to AWS?

Answer options

• A. Security patching of AWS Elastic Beanstalk
• B. Backups of data that is stored in Amazon Aurora
• C. Termination of Amazon EC2 instances that are managed by AWS Auto Scaling
• D. Configuration of IAM access controls

Correct answer: D

Explanation

Under the AWS Shared Responsibility Model, the customer is always responsible for security 'in' the cloud, which includes the configuration of IAM access controls. Conversely, AWS manages platform patching for managed services like AWS Elastic Beanstalk, automated backups for Amazon Aurora, and the automated lifecycle (such as termination) of Amazon EC2 instances within AWS Auto Scaling. Therefore, configuring user access and permissions remains a task the customer must perform.