What Is the AWS Shared Responsibility Model?
By Karthick Selvam · Published · Updated
The model defines which security tasks AWS handles and which the customer handles.
Security "of" the cloud
AWS secures the physical facilities, hardware, network and virtualisation layers.
Security "in" the cloud
Customers secure their data, identities, configurations, operating systems on EC2 and application code.
It varies by service
With managed services like S3 or Lambda, AWS handles more; with EC2, the customer handles more.
Why it matters
Most cloud incidents stem from customer-side misconfiguration, so teams must understand their part.
Frequently asked questions
Do other clouds use this model?
Yes, Azure and Google Cloud follow similar shared responsibility principles.
Related programmes
Turn this into a team capability
Our corporate programmes cover topics like this hands-on, mapped to your stack.
Cloud guides
AWS vs Azure vs Google Cloud: Which Should Your Team Learn?
The three largest public clouds share core concepts but differ in strengths and ecosystem.
Serverless vs Containers
Two popular ways to run applications in the cloud, with different trade-offs.
AWS Certifications Explained
An overview of AWS certification levels and how to choose.