Examkin

Question

Difficulty: EasyShared Responsibility Model

A consulting firm is storing client project documents in an Amazon Simple Storage Service (Amazon S3) bucket. Under the AWS Shared Responsibility Model, which operational task is the sole responsibility of the customer?

  1. A
    Patching the operating system of the S3 storage servers
  2. Configuring S3 bucket policies and enabling data encryptionAnswer
  3. C
    Managing physical security at the data centers where S3 data is stored
  4. D
    Replacing failing physical hard drives in the storage infrastructure

Answer

Configuring S3 bucket policies and enabling data encryption
Under the AWS Shared Responsibility Model, customers are responsible for security 'in' the cloud. For Amazon S3, this includes managing access permissions using S3 bucket policies and deciding how to encrypt the stored objects.

Step-by-Step Solution

1
Determine the service model type for Amazon S3 in the scenario.
Amazon S3 is a managed storage service.
Determining the service type helps define the boundary between customer and AWS responsibilities.
2
Differentiate between security 'of' the cloud and security 'in' the cloud for S3.
AWS manages physical security, hardware, and server operating systems. The customer manages data access configurations, user permissions, and data encryption.
Since the customer owns the data and access configuration, configuring S3 bucket policies and enabling encryption falls under customer responsibility.

Key Concept

Shared Responsibility Model for Managed Services
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic