Question

A company runs multiple Amazon EC2 instances to host their web application. During a security audit, the auditor finds that several EC2 instances are running outdated operating system patches that contain known vulnerabilities. Under the AWS shared responsibility model, who is responsible for applying these operating system patches?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching all operating systems running on EC2 instances

Answer

AWS and the customer share equal responsibility for operating system patches

Answer

AWS is responsible for patching, but only if the customer enables automatic updates in the EC2 console