Question

A company runs a web application on Amazon EC2 instances. The security team discovered that the operating system on several EC2 instances has not been patched with the latest security updates. According to the AWS shared responsibility model, who is responsible for patching the operating system on EC2 instances?

Accepted Answer

The customer is responsible for patching the guest operating system on EC2 instances

Answer

AWS is responsible for patching all operating systems running on EC2 instances

Answer

AWS is responsible for patching the operating system, but the customer must apply database patches

Answer

The responsibility is shared equally between AWS and the customer, requiring joint coordination