Question

A company runs several Amazon EC2 instances hosting web applications. The security team wants to clarify who is responsible for patching the operating system on these EC2 instances according to the AWS shared responsibility model. What is the correct assignment of this responsibility?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching both the hypervisor and the guest operating system

Answer

AWS and the customer share responsibility for patching the guest operating system

Answer

AWS is responsible for patching the guest operating system, while the customer patches applications