JanBask Training 
Introduction
AWS shared responsibility model lies at the foundation of AWS security and helps enterprises to improve the overall security of the cloud environment. The implementation of the AWS shared responsibility model is not the sole responsibility of one player but it is shared between AWS and the customer.
You have to understand which security controls are AWS’s responsibility and which are yours. With a solid understanding of the AWS shared responsibility model, it is easy to build and maintain a high-security environment. Enhance your career with our AWS Certification course that helps you qualify the AWS Solution Architect Certifications and ensures that you are ready to excel in your current/future job role.
Before enrolling for AWS Courses, gain an in-depth knowledge about cloud computing through our Cloud Computing Certification Courses.
Responsibilities of an AWS Cloud Practitioner
In every aspect, security is considered the major priority by AWS. During the last few years, enterprises were reluctant to adopt a cloud environment due to security reasons. To overcome this hesitation, AWS needs to be at the top of security excellence and governance. AWS has become a popular security standard today serving most security - sensitive customers around.
AWS services are distributed or deployed exactly the same way throughout their entire global infrastructure. Also, document backup is covered by the same strict security standards for large corporations. AWS is responsible for the global security of the cloud as a whole while customers are responsible to maintain the security of their specific instances. If you are confused about which AWS Certification to choose, here’s an easy solution. Read our blog on the best AWS Certifications in 2022 and choose the right one for yourself.
- AWS Hardware: It includes physical security protections and constant IT maintenance in the cloud infrastructure.
- AWS Software: It guarantees a secured software platform across all of its services that include database protection, encryption keys, networking monitoring tools, and more.
AWS Solution Architect Training and Certification
- Detailed Coverage
- Best-in-class Content
- Prepared by Industry leaders
- Latest Technology Covered
Customer Security Responsibilities
When a customer chooses any of the Amazon’s infrastructure as a service, he needs to perform all the necessary configurations and management tasks as follows:
- Customer Data: It includes protection of business data at the network side as the data enters or exits from the cloud.
- IAM (Identity & Access Management): The customer is responsible to maintain and protect all aspects of the platform running on the cloud. For example, a customer running a shopping cart online should ensure the protection of accounts and identities of its customers.
- Data Encryption: The data is encrypted at the client-side through an AWS managed encryption key or you can use the personal key that is not provided by the AWS.
- File System Encryption: The customer may also use an independent protection system and file system protection given by the AWS.
- Service & Communication Protections: A customer is responsible to route or zone the data with specific business environments.
- Network Traffic Protections: The customer should guarantee the security of all traffic passing through the server.
An AWS Cloud practitioner has a wide range of roles and responsibilities to perform. Learn about the roles and responsibilities of an AWS Solutions Architect from this blog.
|
AWS Responsibilities |
Customer Responsibilities |
AWS Shared Responsibilities |
|
|
|
AWS Shared Responsibilities
AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services:
- IT Controls: Mostly IT operations are shared among AWS and its customers and AWS helps with moderating the customer burden of security methods like encryption, firewall maintenance, and IT controls deployments to ensure proper adherence to AWS security regulations.
- Configuration Management: AWS manages the configuration of its infrastructure devices while the customer is responsible to configure their own guest operating systems, databases and software applications.
- Patch Management: Aws is responsible to patch or fix flaws within the infrastructure while customers are responsible to patch their own guest operating system and software apps.
- Training & Awareness: AWS trains AWS employees and customers must train their own employees.
Get to know more about AWS from our blogs and resources at JanBask Training.
AWS shared responsibility model and its different Types
To help you in better understanding, the AWS shared responsibility model, it has been divided into three major categories:
1. AWS Shared Responsibility Model: Infrastructure Services
AWS infrastructure security elements include regions, edge locations, availability zones and the foundations of their compute, database and network services. AWS controls access to their data centers where sensitive customer data is stored.
It covers physical access to networking and hardware components, additional data center facilities like UPS systems, generators, PDUs, fire suppression systems etc. Majorly, AWS is responsible for components management that makes up the cloud and stored within your system.
When global infrastructure is secured and maintained by the AWS, the responsibility for firewall configurations, OS configuration, network management, IAM, and application security falls on the customers. If the customer wants to add extra security features then it is entirely based on him. An AWS Solution Architect has to shoulder multiple responsibilities and so you need to know the complete AWS Solutions Architect Certification path details before you sit for your exam.
It is usually decided on the basis of the nature of a business and existing security controls. It is recommended tightening security to the maximum extent with minimum exposure to external threats that could compromise your environment. The important thing to focus here is that AWS offers many powerful security controls but how to apply them in your favor is your responsibility, not the AWS.
Are you preparing for your AWS Solutions architect interview? Learn about the top AWS Solutions Architect interview questions and answers from our blog.
2. AWS Shared Responsibility Model: Container Services
The popular Container services in AWS include:
-
AWS Elastic Map Reduce (EMR)
-
AWS Relational Database Service (RDS)
-
AWS Elastic Beanstalk
It is clear that application management with OS and network configuration has shifted to being the responsibility of AWS and no longer down to us as the customer to manage. This is the major difference between infrastructure-based services and container-based services in AWS.
However, not all responsibilities are shifted. You can notice clearly that firewall configuration remains with the end-user which integrates at the application management level.
Get started to test your AWS subject knowledge with this fun and interesting Quiz on AWS.
AWS Solution Architect Training and Certification
- Learn from the videos anytime anywhere
- Pocket-friendly mode of learning
- Complimentary eBook available
- Discount Voucher on Live-class
3. AWS Shared Responsibility Model: Abstract Services
The popular abstract services in AWS include:
- Amazon Glacier
- Simple Storage Service (S3)
- SQS
- DynamoDB
Here, you can notice that more responsibilities are shifted to AWS mainly network traffic protection and encryption. The customer is responsible for IAM, client-side data encryption and data integrity encryption majorly at the abstract layer. As we progress through the layers in the Aws share responsibility model, it is clear that control and responsibilities shift more towards AWS and customer becomes free. Get to know about the Top 10 AWS Certifications for I.T professionals in 2022.
You can clearly observe the difference below between different layers of the model how responsibilities are shared and shifted to the AWS one by one. To choose the right AWS model for your business, you should analyze the business requirements first and try to know which method can deliver the best results based on your needs. It is not an easy task for the customer reaching the final decision. So, it is recommended taking helps from AWS experts and learn about the best AWS shared responsibility model for your business.
Conclusion
The AWS shared responsibility model is designed to maximize the overall security of Amazon’s cloud infrastructure. By educating their customers on how to manage or maintain strong operational protections, both Amazon and customers can feel more protected.
The mutual responsibilities of shared security gives assurance to Amazon that they don’t have to manage every security aspect directly and helps customers feel like Amazon can adjust to their specific security needs.
When security responsibilities are shared, customer awareness is the key with a deep understanding of risks associated with trusting a third-party. This freedom can be a huge set for lowering down the costs and increasing the overall quality of services.
To know more on Shared responsibility model and its implementation, learn practical aspects of the cloud with JanBask Training and join our AWS certification course to become a valuable IT resource in the cloud domain.
AWS Solution Architect Training and Certification
- Personalized Free Consultation
- Access to Our Learning Management System
- Access to Our Course Curriculum
- Be a Part of Our Free Demo Class
Upcoming Class : October 22