Security is a shared responsibility. AWS is responsible for the security of the cloud, such as physical security, instance isolation, and protection for foundation services. You are responsible for security on the cloud, meaning you must secure your AWS applications and data deployed on AWS. It is important to understand that securing AWS is not limited to protecting servers and applications. The cloud is a system itself and misconfigurations in your AWS account can present risks to your security.