Which of the following is AWS's responsibility under the Shared Responsibility Model?
Show answer and explanation
Answer: C
Hardware disposal belongs to AWS because the physical fleet never leaves Amazon's control. When storage devices reach end of life, AWS destroys them following industry-standard media-sanitization procedures so no customer data can be recovered. Everything else in the list involves resources the customer creates and administers inside their own account.
Why the other options are wrong
- A. S3 data belongs to the customer, so encrypting it is a customer decision and task; AWS supplies the encryption capabilities but does not enable them for you.
- B. IAM users, policies, and permissions exist entirely within the customer's account and are administered by the customer.
- D. VPC layout — subnets, routes, and gateways — is configured by the customer, since it defines their private network design.