Identity and access management is a shared responsibility. AWS provides the tools such as AWS IAM, but customers must properly configure and manage their use to protect AWS resources.