Under the shared responsibility model, which customer responsibility remains in ALL service models (IaaS, PaaS, and SaaS)?
A.Patching the operating system
OS patching is the provider's job in PaaS and SaaS — only in IaaS does the customer do it.
B.Maintaining the physical network
Physical network is always the provider's responsibility.
C.Managing the data, accounts, and identities you put in the cloud
Data, accounts/identities, and access control are always the customer's — in every model.
D.Updating the hypervisor
The hypervisor is always provider-managed infrastructure.
Why this answer
The shared responsibility model divides duties by service type: the provider always owns the physical layer; in IaaS the customer manages the OS upward; in SaaS nearly everything except data, accounts/identities, and devices. Data and identity are always the customer's responsibility.
Correct answer: C · Last reviewed 2026-02-13
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Cloud Concepts practice session.
Practice Cloud Concepts