What is the shared responsibility model?

AWS secures the cloud (hardware, facilities, the managed service layers). The customer secures what they put in the cloud: data, IAM, OS patching on EC2, network rules and encryption settings.