Explanation

In the AWS Shared Responsibility Model:

AWS Responsibility (Infrastructure Layer):

• Patch AWS network devices - AWS is responsible for maintaining and patching the underlying network infrastructure
• Provide physical security for compute resources - AWS manages physical security of data centers and hardware

Customer Responsibility (Content Layer):

• Set user password rules - Customer manages identity and access management policies
• Configure security groups - Customer configures network security rules
• Patch the operating system of an Amazon EC2 instance - Customer maintains the guest operating system and applications

The shared responsibility model divides security responsibilities where AWS is responsible for security OF the cloud (infrastructure), while customers are responsible for security IN the cloud (their content and applications).