Question

A company runs multiple EC2 instances with various operating systems including Amazon Linux 2 and Windows Server. The security team is reviewing responsibilities for keeping these systems secure and compliant. Who is responsible for patching the guest operating systems on these EC2 instances according to the AWS shared responsibility model?

Accepted Answer

The customer is responsible for patching the guest operating systems on all EC2 instances

Answer

AWS is responsible for patching all operating systems on EC2 instances as part of infrastructure maintenance

Answer

AWS patches Amazon Linux automatically, but the customer must patch Windows Server instances

Answer

Patching is a shared control where AWS provides the patches and the customer applies them through automatic deployment