# Responsability Model

## About

<figure><img src="https://4257107599-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FO7iF3qcu25MOrAYlRsn6%2Fuploads%2FHGxPHaVGbictjHKnqW2F%2Faws-shared-responsability-model.png?alt=media&#x26;token=7cf3151d-ec99-4368-a808-13dc2d6739a7" alt=""><figcaption></figcaption></figure>

> This Responsability Model can change based on what Service you are using. **(Some services require more responsability from AWS than the Customer, and vice-versa)**

{% hint style="danger" %}
Customers are responsible for Security **IN** the Cloud.
{% endhint %}

{% hint style="danger" %}
AWS is responsible for Security **OF** the Cload.
{% endhint %}

### Infrastructure Services

{% hint style="info" %}
Like: **`EC2`**, **`Amazon EBS`**, **`Auto Scaling`** and **`Amazon VPC`**.
{% endhint %}

<table data-card-size="large" data-view="cards"><thead><tr><th></th><th></th><th></th></tr></thead><tbody><tr><td><strong>Customer Responsability</strong></td><td><ul><li>Customer Data.</li><li>Plataform &#x26; Application Management.</li><li>OS, Network, Firewall configurations.</li><li>Network Traffic protection.</li><li>Server-side encryption.</li><li>Client-side data encryption integrity.</li></ul></td><td></td></tr><tr><td><strong>AWS Responsability</strong></td><td><ul><li>Compute, Storage, Database, Network.</li><li>Hardware, AWS Global infrastructure.</li></ul></td><td></td></tr></tbody></table>

### Container Services

{% hint style="info" %}
Like: **`Amazon RDS`**, **`Amazon EMR`**, **`AWS Elastic Beanstalk`**.
{% endhint %}

<table data-card-size="large" data-view="cards"><thead><tr><th></th><th></th><th></th></tr></thead><tbody><tr><td><strong>Customer Responsability</strong></td><td><ul><li>Customer Data.</li><li>Network traffic protection.</li><li>Client-side data encryption.</li><li>Firewall configuration.</li></ul></td><td></td></tr><tr><td><strong>AWS Responsability</strong></td><td><ul><li>Plataform and application management.</li><li>OS, Network, Firewall configuration.</li><li>Compute, storage, database, network.</li><li>Hardware, AWS Global infrastructure.</li></ul></td><td></td></tr></tbody></table>

### Managed Services

{% hint style="info" %}
Like: **`Amazon S3`**, **`Amazon Glacier`**, **`DynamoDB`**, **`AWS Lambda`**, **`Amazon SQS`**, **`Amazon SES`**.
{% endhint %}

<table data-card-size="large" data-view="cards"><thead><tr><th></th><th></th><th></th></tr></thead><tbody><tr><td><strong>Customer Responsability</strong></td><td><ul><li>Customer Data.</li><li>Client-side data encryption.</li></ul></td><td></td></tr><tr><td><strong>AWS Responsability</strong></td><td><ul><li>Server-side encryption.</li><li>Network traffic protection.</li><li>Plataform and application management.</li><li>OS, Network, Firewall configuration.</li><li>Compute, storage, database, network.</li><li>Hardware, AWS Global infrastructure.</li></ul></td><td></td></tr></tbody></table>