Question

A company runs several applications on Amazon EC2 instances. The security team has identified that the operating systems on these instances have not been patched with the latest security updates. According to the AWS shared responsibility model, who is responsible for patching the operating systems on these EC2 instances?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching all operating systems running on EC2 instances

Answer

AWS and the customer share responsibility, with AWS patching the hypervisor and the customer patching applications only

Answer

AWS is responsible for patching if the customer enables automatic patching in the EC2 console