Under the AWS shared responsibility model, which control is shared between AWS and the customer?

Configuration management is a shared responsibility. AWS is responsible for the configuration of the underlying infrastructure (e.g., hypervisors, network devices), while the customer is responsible for configuring their applications, operating systems, and security groups within the AWS environment. Physical and environmental controls are solely AWS's responsibility, as they manage the physical security of data centers. Data integrity authentication is primarily a customer responsibility, as they define and implement authentication mechanisms for their data. Identity and access management (IAM) is also primarily a customer responsibility, as they manage users, groups, roles, and policies within their AWS accounts.