Incident response
Security and Compliance is a shared responsibility between AWS and the customer.
This shared model can help relieve the customer’s operational burden as AWS operates,
manages and controls the components from the host operating system and virtualization
layer down to the physical security of the facilities in which the service operates.
The customer assumes responsibility and management of the guest operating system
(including updates and security patches), other associated application software as well
as the configuration of the AWS provided security group firewall. For additional information refer
to the AWS shared
responsibility model
By establishing a security baseline that meets the objectives for
your applications running in the cloud, you're able to detect
deviations that you can respond to. Since security incident
response can be a complex topic, we encourage you to review the
following resources so that you are better able to understand the
impact that incident response and your choices have on your
corporate goals:
AWS
Security Best Practices