AWS are responsible for “Security of the Cloud”. AWS is responsible for protecting the
infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure
is composed of the hardware, software, networking, and facilities that run AWS Cloud
services, and this includes regions, availability zones and edge locations
Customers are responsible for “Security in the Cloud”. This includes encrypting customer
data, patching operating systems but not patching or maintaining the underlying
infrastructure