AWS Certified Cloud Practitioner / What is Cloud Computing

Shared Responsibility Model & AWS Acceptable Policy's

☁️ AWS Shared Responsibility Model

Reference: aws.amazon.com/compliance/shared-responsibility-model

This model splits security duties between AWS and you, the customer.

How a request flows:

  1. Request travels over the internet

  2. Hits AWS infrastructure (data centers, servers, networking)

  3. Your application processes it

  4. Data is stored/retrieved and sent back to the user

Since AWS infra powers all of this, security naturally splits into two zones: AWS's job and your job.

AWS protects the infrastructure everything runs on:

  • Physical data centers

  • Hardware, servers, networking gear, storage devices

  • Global infrastructure (Regions, AZs, Edge locations)

  • Hypervisors and other foundational services

You never have to worry about physical security, hardware failures, power, cooling, or network backbone protection — that's all AWS.

You secure whatever you build or configure on top:

  • Your data and applications

  • OS (if you're running EC2)

  • Network configs, security groups, firewalls

  • IAM (identities and access)

  • Encryption settings

  • Backups

Simple rule: if you launched it or configured it, you're responsible for locking it down.

One-liner to remember it: AWS secures the foundation, you secure what you build on it.🔐 AWS: Security of the Cloud

📜 AWS Acceptable Use Policy (AUP)

Reference: aws.amazon.com/aup

Since AWS runs on shared global infrastructure, it enforces rules for what's allowed on that infrastructure.