Under the AWS shared responsibility model, which of the following is a shared responsibility between AWS and the customer?

Patch management is a shared responsibility. AWS is responsible for patching the underlying infrastructure (e.g., hypervisor, host operating system), while the customer is responsible for patching the operating systems and applications running on their Amazon EC2 instances. Configuration of Amazon EC2 instance operating systems is solely the customer's responsibility. Application file system server-side encryption is also the customer's responsibility, though AWS provides the tools. Security of the physical infrastructure, including the data centers, is entirely AWS's responsibility.