Which of the following tasks are the responsibility of AWS under the AWS shared responsibility model? (Choose two.)

Under the AWS shared responsibility model, AWS is responsible for "security of the Cloud," meaning they manage the underlying infrastructure. This includes securing the virtualization layer (hypervisor), which is fundamental to their compute services like EC2. AWS also manages the underlying operating system for fully managed services like Amazon RDS, including patching it, as customers do not have access to or control over this layer. Conversely, "security in the Cloud" is the customer's responsibility. Patching the operating system on Amazon EC2 instances falls to the customer because they control the guest OS. Enforcing password policies for IAM users and configuring security groups/network ACLs are also customer responsibilities, as these are security controls within their AWS environment.