Examkin

Question

Difficulty: EasyShared Responsibility Model

A startup is deploying a serverless backend application using AWS Lambda. Under the AWS Shared Responsibility Model, which TWO of the following tasks are the responsibility of the customer?

  1. Writing and securing the application code running inside the Lambda functionsAnswer
  2. Configuring Identity and Access Management (IAM) execution roles for the Lambda functionsAnswer
  3. C
    Patching the underlying operating system of the Lambda execution environment
  4. D
    Maintaining the physical security of the data centers where the Lambda functions run
  5. E
    Applying security patches to the runtime environments (such as Node.js or Python) provided by AWS

Answer

Under the AWS Shared Responsibility Model for AWS Lambda, the customer is responsible for writing and securing the application code and configuring Identity and Access Management (IAM) execution roles.
In serverless compute services like AWS Lambda, the boundary of responsibility shifts upwards. AWS manages the physical security, virtual machines, operating system, and the runtime software stack. The customer remains responsible for configuration and data management, specifically securing the application code written for the function and configuring IAM execution roles to control access to other AWS resources.

Step-by-Step Solution

1
Identify the AWS service model type for AWS Lambda.
AWS Lambda is a serverless (managed) service where physical infrastructure, virtualization, operating systems, and managed runtime environments are handled entirely by AWS.
Understanding the service model helps determine the boundary of shared responsibility.
2
Distinguish between responsibilities for security 'of' the cloud (AWS) and security 'in' the cloud (customer) for Lambda.
AWS secures the execution environment, OS patching, runtime version maintenance, and physical hardware. The customer secures their own code, configuration settings, and access control (IAM).
This separation determines the specific operational tasks assigned to each party.

Key Concept

AWS Shared Responsibility Model for Serverless/Managed Services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic