If a company runs workloads on AWS, which service requires the company to manage and patch the guest operating system?

Amazon EC2 (Elastic Compute Cloud) provides virtual servers (instances) where users have full control over the operating system, including patching, updates, and security configurations. This is a core characteristic of Infrastructure as a Service (IaaS). In contrast: Amazon DynamoDB is a NoSQL database service where AWS manages the underlying infrastructure, including the operating system. This is a Platform as a Service (PaaS) or Database as a Service (DBaaS). Amazon S3 (Simple Storage Service) is an object storage service. AWS fully manages the infrastructure, and there is no guest operating system for the user to manage. This is Software as a Service (SaaS). Amazon Aurora is a relational database service compatible with MySQL and PostgreSQL. AWS manages the operating system and underlying infrastructure, similar to DynamoDB. This is also a DBaaS.