Examkin

Question

Difficulty: EasyShared Responsibility Model

A company is migrating its database to Amazon RDS. Under the AWS Shared Responsibility Model, which task is the responsibility of the customer?

  1. Managing database user accounts and access permissionsAnswer
  2. B
    Patching the underlying operating system of the database instance
  3. C
    Replacing failed physical storage drives in the database host server
  4. D
    Managing physical security controls at the data center hosting the database

Answer

Managing database user accounts and access permissions
Under the AWS Shared Responsibility Model, the customer is responsible for security 'in' the cloud. For a managed database service like Amazon RDS, this includes managing database user accounts, credentials, permissions, and network access rules (security groups).

Step-by-Step Solution

1
Identify the service type and model boundaries.
Amazon RDS is a managed database service (PaaS), where AWS manages the underlying infrastructure, operating system, and hardware.
This determines which layers are managed by AWS versus the customer.
2
Evaluate the customer's operational responsibility for data and access.
The customer retains ownership of their data and must configure who has access to the database itself.
Security 'in' the cloud includes managing access credentials and user privileges.

Key Concept

Shared Responsibility Model for managed services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic