Question

Difficulty: HardShared Responsibility Model

A financial institution is deploying AWS Outposts inside its on-premises corporate data center to run low-latency applications. Under the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

  1. A
    Applying security patches and updates to the virtualization hypervisor and firmware on the Outposts hardware.
  2. Providing physical security, power, cooling, and network connectivity for the Outposts rack.Answer
  3. C
    Performing physical hardware maintenance and replacing failed disk drives or host servers.
  4. D
    Obtaining and verifying compliance reports for the underlying Outposts host hardware architecture.

Answer

Providing physical security, power, cooling, and network connectivity for the Outposts rack.
For AWS Outposts, the hardware is deployed within the customer's physical facility. Consequently, the customer is responsible for the physical security of the site, as well as providing the necessary power, cooling, and network connectivity to keep the rack operational.

Step-by-Step Solution

1
Identify the deployment model of AWS Outposts.
AWS Outposts is a hybrid cloud service where AWS-owned hardware is physically installed within the customer's on-premises environment.
Understanding the physical location of the resources helps establish the boundary for physical security and environmental controls.
2
Map physical and environmental responsibilities under this model.
Since AWS cannot control or monitor access to the customer's private data center, the responsibility for securing the rack physically and supplying power, cooling, and networking falls to the customer.
This isolates the tasks that cannot logically be performed by AWS due to lack of physical access.
3
Map infrastructure and hardware responsibilities under this model.
AWS continues to manage infrastructure software (such as hypervisors and firmware) and provides hardware maintenance and replacements.
This clarifies why the other operational tasks belong to AWS rather than the customer.

Key Concept

AWS Shared Responsibility Model for AWS Outposts
Rate this question