Examkin

Question

Difficulty: MediumShared Responsibility Model

A logistics company containerizes its shipment tracking application and deploys it on AWS Fargate. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

  1. A
    Applying security updates and operating system patches to the container host instances
  2. Configuring security group rules to control traffic to and from the container tasksAnswer
  3. C
    Managing the physical security controls of the data centers hosting the container infrastructure
  4. D
    Replacing faulty physical servers that support the container orchestration service

Answer

Configuring security group rules to control traffic to and from the container tasks
The configuration of security groups to control inbound and outbound traffic to the container tasks is a customer responsibility. Even though AWS Fargate abstracts the underlying host servers and operating system, the customer retains control and responsibility over network-level access control to their own workloads.

Step-by-Step Solution

1
Analyze the service type and deployment model
AWS Fargate is a serverless compute engine for containers, which falls under a managed service model where the underlying host operating system and hardware are managed by AWS.
Identifying the service category helps determine the boundary line between the customer's security 'in' the cloud and AWS's security 'of' the cloud.
2
Differentiate between customer and AWS responsibilities for this service
AWS manages physical security, host patching, and hardware. The customer manages application code, container images, IAM roles, and network security configuration (security groups) for the tasks.
This allows us to isolate which configuration task is still controlled by the customer in a serverless container environment.

Key Concept

Shared Responsibility Model for Serverless Container Services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic