Examkin

Question

Difficulty: MediumShared Responsibility Model

An online gaming studio is deploying a multiplayer game database using Amazon RDS for PostgreSQL. To meet security compliance standards, the studio must define the security boundaries between their team and AWS. Which of the following operational tasks remains the responsibility of the customer under the AWS Shared Responsibility Model?

  1. Configuring database-level user permissions and setting up security group rules to control network access to the database instance.Answer
  2. B
    Applying security patches to the guest operating system on which the PostgreSQL database engine runs.
  3. C
    Replacing faulty physical storage volumes and underlying server hardware in the AWS availability zone.
  4. D
    Retrieving AWS compliance and third-party audit reports for the physical data center facility via the Amazon RDS console.

Answer

Configuring database-level user permissions and setting up security group rules to control network access to the database instance.
Under the AWS Shared Responsibility Model, for a managed service like Amazon RDS, the customer is responsible for configuring access to the database, which includes managing database user permissions and defining firewall rules using security groups to control inbound network traffic.

Step-by-Step Solution

1
Analyze the service type in the scenario.
Amazon RDS is a managed service (PaaS/DBaaS), meaning AWS manages the underlying operating system, hardware, and database engine maintenance.
The customer's responsibility depends on the type of service deployed (IaaS vs. PaaS).
2
Identify customer-managed controls for Amazon RDS.
The customer is responsible for data security 'in' the database, including user access credentials, database schemas, and security group firewall rules.
Firewalls (security groups) and application/database-level access controls are always customer-managed.

Key Concept

Shared Responsibility Model for Managed Services (Amazon RDS)
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic