Answer: Perform client-side data encryption, Configure IAM credentials

## Explanation In the AWS Shared Responsibility Model: **Customer Responsibility (Security IN the Cloud):** - **Perform client-side data encryption** - Customers are responsible for encrypting their data before sending it to AWS - **Configure IAM credentials** - Customers manage user access, permissions, and authentication through IAM **AWS Responsibility (Security OF the Cloud):** - **Establish the global infrastructure** - AWS manages the physical infrastructure, data centers, and network - **Secure edge locations** - AWS manages security for CloudFront edge locations - **Patch Amazon RDS DB instances** - AWS handles patching and maintenance of managed services like RDS The shared responsibility model clearly divides security responsibilities where AWS is responsible for the security OF the cloud (infrastructure), while customers are responsible for security IN the cloud (their data, applications, and configurations).

Author: Ritesh Yadav