Explanation

According to the AWS Shared Responsibility Model:

• AWS is responsible for "Security OF the Cloud" - This includes:

  • Installing and patching the host operating system
  • Patching underlying hardware
  • Provisioning and maintaining RDS infrastructure
  • Physical security of data centers
  • Network infrastructure

• Customer is responsible for "Security IN the Cloud" - This includes:

  • Rotating passwords for RDS users (correct answer)
  • Managing user access and permissions
  • Securing application-level configurations
  • Encrypting data at rest and in transit
  • Managing database security groups

In Amazon RDS, AWS manages the underlying infrastructure, operating system, and database engine patching, while customers are responsible for managing their data, access controls, and user credentials including password rotation.