Question

A company runs its production database on Amazon RDS for PostgreSQL. The security team wants to confirm who is responsible for applying patches to the underlying database engine and operating system. According to the AWS shared responsibility model, who handles this patching?

Accepted Answer

AWS is responsible for patching the underlying operating system and database engine software.

Answer

The customer must manually patch the guest operating system and database engine using SSH access.

Answer

AWS patches the operating system, but the customer must patch the database engine through the RDS console.

Answer

A third-party managed service provider is required to perform all patching for RDS instances.