In the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes protecting the infrastructure that runs all the services in the AWS global network. This means AWS is responsible for maintaining the physical security of edge locations (D) and upgrading the firmware of the network infrastructure (B). Customers are responsible for the security in the cloud, which includes managing the guest operating system, including patching (A), and applying password rotation for IAM users (C). Maintaining least privilege access to the root user account (E) is also a customer responsibility, as it pertains to managing access within their own AWS environment.