Under the AWS shared responsibility model, which of the following is always the customer's responsibility to manage?

Under the AWS shared responsibility model, AWS is responsible for the security of the cloud, while the customer is responsible for security in the cloud. Customer data is always the customer's responsibility to manage, including its content, classification, and access. While AWS provides services for managing software licenses, networking infrastructure, and encryption keys, the ultimate responsibility for configuring and securing these aspects for their specific data rests with the customer. For example, AWS manages the underlying network hardware, but the customer configures their Virtual Private Cloud (VPC) and security groups. Similarly, AWS provides Key Management Service (KMS), but the customer decides which keys to use and how to apply them to their data.