An e-commerce company is deploying containerized microservices using AWS Fargate. Under the AWS Shared Responsibility Model, which two of the following tasks are the responsibility of the customer? (Select TWO.)
- Configuring security groups to control inbound and outbound network traffic to the containersCevap
- Defining Identity and Access Management (IAM) roles and access policies for the containerized applicationsCevap
- CApplying security updates and OS patches to the physical servers hosting the containers
- DEnsuring physical protection and climate control of the data centers where the containers run
- EConducting third-party audits and certifications of the physical data center facilities
Cevap
The customer is responsible for configuring security groups to control network traffic and defining IAM roles and access policies for the applications. AWS is responsible for physical security, infrastructure auditing, and patching the host operating system.
Under the AWS Shared Responsibility Model, for container services like AWS Fargate, AWS manages the underlying physical infrastructure, virtualization layer, and host operating system. The customer remains responsible for application-level settings, container configuration, network access controls such as security groups, and identity and access management (IAM) permissions for their container tasks.
Adım Adım Çözüm
Anahtar Kavram
Shared Responsibility Model for managed container services (AWS Fargate)