Question

A company runs several Amazon EC2 instances with Windows Server operating systems. During a security audit, the auditor asks who is responsible for applying security patches to the Windows operating system on these instances. According to the AWS shared responsibility model, who has this responsibility?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching all operating systems running on EC2 instances

Answer

The responsibility is shared between AWS and the customer, with both applying patches

Answer

AWS is responsible for Windows instances, but customers are responsible for Linux instances