Examkin

Question

Difficulty: EasyShared Responsibility Model

A real estate platform uses Amazon DynamoDB to store property listing details. Under the AWS Shared Responsibility Model, which of the following security tasks is the sole responsibility of the customer?

  1. Defining and applying Identity and Access Management (IAM) policies to control access to the DynamoDB tablesAnswer
  2. B
    Installing security updates and patches on the host operating system of the DynamoDB database servers
  3. C
    Replacing failed physical hard disk drives that store the database tables in the AWS data centers
  4. D
    Requesting physical audit access to AWS facilities to inspect the security of DynamoDB storage hardware

Answer

Defining and applying Identity and Access Management (IAM) policies to control access to the DynamoDB tables
For managed services such as Amazon DynamoDB, AWS is responsible for securing the infrastructure, host operating system, and database software. The customer is responsible for managing data classification and configuring access controls, such as Identity and Access Management (IAM) policies, to determine who can access the database tables.

Step-by-Step Solution

1
Identify the AWS service type being used in the scenario.
Amazon DynamoDB is a fully managed NoSQL database service.
The service type determines where the boundary of responsibility lies between AWS and the customer under the Shared Responsibility Model.
2
Distinguish between security of the cloud (AWS responsibility) and security in the cloud (customer responsibility) for a managed database service.
AWS handles the hardware, operating system patching, database software patching, and physical security. The customer handles their own data, including configuring access controls (IAM policies).
This division defines who is responsible for configuring access rules versus who maintains the underlying platform.

Key Concept

Under the Shared Responsibility Model, for managed services like Amazon DynamoDB, AWS manages the infrastructure, operating system, and physical security (security of the cloud), while the customer manages data access controls, configurations, and identity policies (security in the cloud).
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic