Responsability Model

About

This Responsability Model can change based on what Service you are using. (Some services require more responsability from AWS than the Customer, and vice-versa)

Customers are responsible for Security IN the Cloud.

AWS is responsible for Security OF the Cload.

Infrastructure Services

Like: EC2, Amazon EBS, Auto Scaling and Amazon VPC.

Customer Responsability

• Customer Data.

• Plataform & Application Management.

• OS, Network, Firewall configurations.

• Network Traffic protection.

• Server-side encryption.

• Client-side data encryption integrity.

AWS Responsability

• Compute, Storage, Database, Network.

• Hardware, AWS Global infrastructure.

Container Services

Like: Amazon RDS, Amazon EMR, AWS Elastic Beanstalk.

Customer Responsability

• Customer Data.

• Network traffic protection.

• Client-side data encryption.

• Firewall configuration.

AWS Responsability

• Plataform and application management.

• OS, Network, Firewall configuration.

• Compute, storage, database, network.

• Hardware, AWS Global infrastructure.

Managed Services

Like: Amazon S3, Amazon Glacier, DynamoDB, AWS Lambda, Amazon SQS, Amazon SES.

Customer Responsability

• Customer Data.

• Client-side data encryption.

AWS Responsability

• Server-side encryption.

• Network traffic protection.

• Plataform and application management.

• OS, Network, Firewall configuration.

• Compute, storage, database, network.

• Hardware, AWS Global infrastructure.