Question

A company runs several Amazon EC2 instances hosting a custom web application on Linux. During a security review, the team wants to confirm who is responsible for installing operating system security patches on these instances. Under the AWS shared responsibility model, who is responsible for this task?

Accepted Answer

The customer is responsible for patching the guest operating system on their EC2 instances.

Answer

AWS is responsible for patching the guest operating system on all EC2 instances.

Answer

AWS Support automatically applies all OS patches as part of the Basic support plan.

Answer

Patching is handled entirely by AWS Trusted Advisor without any customer action.