Home › AWS Cloud Practitioner › cloudcomputing › securitycompliance › For Amazon RDS, which of the following best desc…
For Amazon RDS, which of the following best describes the shared responsibility split?
AAWS manages the OS, database engine patching, and underlying hardware; the customer manages schema, user accounts inside the DB, and the data
BThe customer manages the OS and applies all database engine patches via SSH
CAWS manages the customer's table schemas and SQL queries
DThe customer ships physical disks to AWS for installation in the data center
Answer & Solution
Correct answer: A. AWS manages the OS, database engine patching, and underlying hardware; the customer manages schema, user accounts inside the DB, and the data
RDS is a managed service: AWS handles undifferentiated heavy lifting (host OS, DB engine patching, backups, replication) so the customer can focus on schema, data, and DB-level user permissions. The customer does NOT get SSH to the underlying host on managed RDS.
Related questions
AWS IAM Identity Center (formerly AWS SSO) primarily lets you:Which combination correctly describes encryption in transit versus encryption at rest?A team wants to block common web exploits like SQL injection and cross-site scripting at tAn organization wants to detect threats like unusual API calls, compromised EC2 instances,What is the difference between an IAM user and an IAM role?The principle of least privilege, as applied via IAM, recommends that you:Which AWS service logs all API calls made against the AWS account, so administrators can aWhich task can ONLY be performed by the AWS account root user, and not by any IAM user eve