Question

Difficulty: EasyShared Responsibility Model

A software development team is deploying a serverless API using AWS Lambda to process incoming customer orders. Under the AWS Shared Responsibility Model, which operational task is the responsibility of the customer?

  1. Writing and securing the application code deployed within the Lambda functionAnswer
  2. B
    Upgrading and patching the underlying operating system of the server hosting the Lambda function
  3. C
    Maintaining the physical security of the AWS data centers where the function runs
  4. D
    Applying security patches to the language runtime environment (e.g., Python or Node.js)

Answer

Writing and securing the application code deployed within the Lambda function
In the Shared Responsibility Model, AWS Lambda is a serverless service where AWS manages the underlying physical infrastructure, virtualization layer, operating system, and runtime. The customer remains responsible for writing, maintaining, and securing the actual application code that is executed within the function.

Step-by-Step Solution

1
Identify the AWS service type being used in the scenario.
AWS Lambda is a serverless (Function-as-a-Service) compute service.
The service type determines the boundary of responsibility under the Shared Responsibility Model.
2
Determine the customer's responsibility boundary for serverless services.
For serverless services, the customer's operational burden is reduced. The customer is responsible for data, IAM configurations, and the application code itself.
AWS manages the operating system, hardware, virtualization layer, and runtime environments for serverless offerings.
3
Evaluate the options against the customer's responsibility boundary.
Writing and securing the application code is a customer responsibility. Managing the OS, physical security, and runtimes are AWS responsibilities.
This identifies the correct option based on the defined shared responsibility boundaries.

Key Concept

Shared Responsibility Model for Serverless Services
Rate this question