Explanation

In the AWS shared responsibility model:

• AWS is responsible for security OF the cloud - This includes patching the operating system, provisioning hosts, and securing the underlying infrastructure for managed services like DynamoDB.

• The customer is responsible for security IN the cloud - This includes managing database access permissions, configuring security groups, and controlling who can access their data.

For Amazon DynamoDB (a fully managed NoSQL database service):

• AWS handles: OS patching, host provisioning, infrastructure security
• Customer handles: Database access permissions, IAM policies, data encryption settings

Therefore, managing database access permissions is the company's responsibility.