Shared responsibility model · Question 12 of 12
An attacker reads customer data from an S3 bucket that had accidentally been made public. Who is responsible for the cause under the model, and why?
1 answer is correct. Hard Created with AI
Show answer
Answer
- D The customer, because sharing a bucket belongs to security in the cloud
Explanation
AWS provides the tools, such as Block Public Access, which is enabled by default on new buckets. Anyone who switches it off and shares data acts within the customer's area of responsibility. Data is not a shared control; it always lies with the customer.