Which responsibilities are handled by AWS under the shared responsibility model? (Choose two.)

Under the AWS shared responsibility model, AWS is responsible for "security of the Cloud," while the customer is responsible for "security in the Cloud." Securing physical access to AWS data centers is an AWS responsibility as it pertains to the underlying infrastructure. Similarly, performing infrastructure-level patching and maintenance, such as updating the host operating system for EC2 instances, is an AWS responsibility. Configuring AWS Identity and Access Management (IAM) and security groups on Amazon EC2 instances are customer responsibilities, as these are configurations within the customer's control. Applying patches to applications running on EC2 instances is also a customer responsibility, as it involves the customer's application layer.