Question

A company runs web applications on Amazon EC2 instances. The security team has been asked to clarify who is responsible for patching the operating system on these instances according to the AWS shared responsibility model. What should the security team communicate?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching the operating system on all EC2 instances

Answer

AWS and the customer share equal responsibility for operating system patching

Answer

AWS is responsible for patching only if the customer enables AWS Systems Manager Patch Manager