Question

A company runs several Amazon EC2 instances to host their web applications. The security team wants to clarify who is responsible for applying security patches to the operating systems running on these EC2 instances. According to the AWS shared responsibility model, who is responsible for this task?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching all operating systems including those on EC2 instances

Answer

AWS and the customer share responsibility for patching the operating system equally

Answer

AWS is responsible for patching the operating system, but the customer must reboot the instances