Security and Compliance

A company runs code on AWS Lambda. Compared with running the same code on an EC2 instance, how does the customer's responsibility change?

• AThe customer no longer manages the operating system or the server infrastructure.
• BThe customer becomes responsible for patching the underlying compute hardware.
• CThe customer must maintain the physical servers that execute the function code.
• DThe customer takes over responsibility for the AWS Region's network backbone.

With Lambda, AWS manages the operating system and server infrastructure, so the customer's responsibility narrows to their code, its permissions, and its data. Hardware patching, physical servers, and network backbone are always AWS responsibilities.

A company wants a managed service that continuously analyzes account activity to detect threats such as unusual API calls or potentially compromised credentials. Which service fits?

• AAWS Artifact, which provides on-demand access to compliance documentation.
• BAmazon GuardDuty, which continuously detects threats from account activity.
• CAWS Pricing Calculator, which estimates the cost of a planned architecture.
• DAWS Config, which records how resource configurations change over time.

Amazon GuardDuty continuously monitors account activity and logs to detect threats such as unusual API usage or compromised credentials. Artifact serves compliance documents, the Pricing Calculator estimates cost, and Config tracks configuration changes.