When you use AWS services, which responsibility belongs to AWS?

Maintaining physical and environmental controls is an AWS responsibility under the shared responsibility model. AWS is responsible for the security of the cloud, which includes the underlying infrastructure, hardware, software, networking, and facilities that run AWS services. This encompasses physical security of data centers, environmental controls like power and cooling, and network infrastructure. Managing IAM user permissions and creating security group rules for outbound traffic are customer responsibilities. These fall under security in the cloud, meaning the customer is responsible for configuring and managing their own security settings within the AWS environment. Applying operating system patches to Amazon EC2 instances is also a customer responsibility, as customers manage the operating system, applications, and data on their EC2 instances.