A company uses Amazon WorkSpaces. Under the AWS shared responsibility model, which of the following is AWS’s responsibility?

The shared responsibility model dictates that AWS is responsible for the security of the cloud, while the customer is responsible for security in the cloud. Protecting the physical environment and underlying infrastructure that hosts the WorkSpaces service falls under AWS's "security of the cloud" responsibility. Enabling MFA, managing user account security through IAM, and configuring CloudTrail are all customer responsibilities ("security in the cloud") as they involve configuring and managing the services and data within the AWS environment.