Question

A company has deployed several Amazon EC2 instances running a web application. The security team has identified that the operating systems on these instances are missing critical security patches. According to the AWS shared responsibility model, who is responsible for applying these operating system patches?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching all operating systems running on EC2 instances

Answer

AWS and the customer share equal responsibility for patching EC2 operating systems

Answer

AWS is responsible for patching, but only if the customer enables automatic updates in the AWS Management Console