GLOSSARY / Compliance & Risk

AWS Shared Responsibility Model

The division of security and compliance duties: AWS manages security OF the cloud, while the customer manages security IN the cloud.

west Back to Glossary

Definition

gavel

The Shared Responsibility Model clarifies operational boundaries between AWS and its customers. AWS takes responsibility for securing the underlying cloud infrastructure (hardware, hypervisors, physical facilities, and core network). The customer retains responsibility for securing data, access control, operating systems, patch management, and network firewall configurations.