Under the shared responsibility model, who is responsible for what your application sends to a foundation model?
Why C is the answer
You, the customer
AWS secures the service. You are responsible for your data, your access controls and how you use it.
In detail
- You are responsible for what your application sends.
- Using a managed service does not move your data duties to AWS.
Use case
An illustrative scenario, not a real incident.
AWS secures the Bedrock service. The team decides what customer data goes into prompts and who can call the model.
See it in different ways
flowchart TD A["AWS: security of the cloud"] --> B["Infrastructure and managed services"] C["Customer: security in the cloud"] --> D["Data, access and application"]
mindmap
root((Governance))
Who did what
CloudTrail
How it is configured
AWS Config
Sensitive data
Macie
Compliance reports
Artifact
Access
IAM rolesmindmap
root(("Responsibility"))
n1["AWS"]
n2["The service itself"]
n3["Customer"]
n4["Your data"]
n5["Access controls"]
n6["How you use it"]Key point: You own your data and how you use it.
Why the other options are wrong
- A. The model provider
- The provider builds the model.
- B. Nobody, as it is transient
- Responsibility does not vanish.
- D. AWS
- AWS secures the infrastructure.