Using Amazon DynamoDB, which responsibility remains with the customer under the AWS shared responsibility model?

Under the AWS shared responsibility model, AWS is responsible for the security of the cloud, while the customer is responsible for security in the cloud. For Amazon DynamoDB, a fully managed NoSQL database service, AWS manages the underlying infrastructure, including patching and securing the operating system, and provisioning hosts. Customers, however, retain responsibility for managing their data, including defining and managing database access permissions using AWS Identity and Access Management (IAM) policies to control who can access their DynamoDB tables and what actions they can perform.