According to the AWS shared responsibility model, which of these is fully the responsibility of AWS?

The shared responsibility model outlines what AWS manages (security of the cloud) and what the customer manages (security in the cloud). Physical and environmental controls, such as securing data centers and hardware, are fully the responsibility of AWS. This falls under AWS's "security of the cloud" responsibilities. Security awareness and training, creating an IAM password policy, and patching the guest operating system are all customer responsibilities. Security awareness and training for employees, and configuring IAM policies, are aspects of "security in the cloud" that the customer controls. Patching the guest operating system is also a customer responsibility, as the customer manages the operating system of their EC2 instances, for example.