Examkin

Question

Difficulty: MediumShared Responsibility Model

A media streaming company uses Amazon DynamoDB to store user watch histories and profiles. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

  1. Defining Identity and Access Management (IAM) policies to restrict read and write access to the database tablesAnswer
  2. B
    Patching the underlying operating system and database engine running the DynamoDB service
  3. C
    Configuring stateless network Access Control Lists (NACLs) directly on the DynamoDB database instances to manage incoming traffic
  4. D
    Requesting compliance certification documents for physical data center security by contacting AWS Support directly rather than using AWS Artifact

Answer

Defining Identity and Access Management (IAM) policies to restrict read and write access to the database tables
In the Shared Responsibility Model, AWS manages the security 'of' the cloud (including patching the OS, managing physical infrastructure, and database engines for managed services like DynamoDB). The customer is responsible for security 'in' the cloud, which includes managing their data, configuring client-side encryption, and defining access permissions through Identity and Access Management (IAM) policies to secure access to the tables.

Step-by-Step Solution

1
Analyze the service model of Amazon DynamoDB.
Amazon DynamoDB is a fully managed NoSQL database service (Platform as a Service / PaaS).
Understanding the service model helps determine the boundary of shared responsibility.
2
Distinguish between customer responsibilities (security 'in' the cloud) and AWS responsibilities (security 'of' the cloud) for managed services.
AWS handles physical security, infrastructure patching, database software updates, and hardware lifecycle. The customer handles data classification, client-side encryption, and IAM permissions to access the tables.
This isolates customer tasks from AWS-managed operations.
3
Evaluate the choices to find the task that falls under customer responsibility.
Defining Identity and Access Management (IAM) policies to restrict read and write access is a customer responsibility, while patching, physical security, and manual compliance document retrieval are handled by AWS or via AWS Artifact.
To identify the correct answer matching the customer's operational obligations.

Key Concept

Shared Responsibility Model for Managed Services
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic