BM: Baca dalam Bahasa Melayu
World A1: Renting a Unit
Shared responsibility: who guards what
You will learn: which jobs AWS does, and which jobs stay yours.
Checked with AWS 2026-11 on 1 Nov 2026
The problem
Kancil leaves the unit key under the doormat. A stranger finds it and walks in. Whose fault is that?
Pick one answer.
Watch
The splits the work. AWS guards the building: security of the cloud. You guard your unit: security in the cloud. Sort the jobs.
Drag a card into a box. Or tap the card, then tap the box.
Try it
Your unit’s door rules are a security group. AWS gives you the door; you write the rules. Let the shopper in on HTTPS. Keep the stranger out.
Set the door guard's rules. Only the right visitors get in.
Visitors
- Shopper (HTTPS)should get in
TCP 443from 198.51.100.20Its replies go back to ports 49152–65535. - Stranger (SSH)keep out
TCP 22from 192.0.2.77Its replies go back to ports 32768–61000.
Unit door · security group (the server)
Allow rules only. It remembers who came in, so replies always go out.
In
No In rules yet: nothing gets in.
Out: all traffic (a new group starts this way).
Hint
Add one rule: TCP, port 443, from 0.0.0.0/0 (anyone).Predict
You rent a plain server on AWS (an EC2 instance). Its operating system needs a security patch. Who installs it?
Pick one answer.
Watch
The line moves with the service. A plain server leaves you more jobs. A ready-made service, like S3 storage, leaves you fewer. Which job always stays yours?
Pick one answer.
Check
Fair thought, or needs work? Swipe each one.
Swipe right for good, left for needs work. Or use the buttons.
AWS will close my door if I leave it open.
You did it!
You can now say who guards what: AWS the building, you your unit.
Go deeper (optional)
Some jobs are shared but split in two. AWS patches its machines; you patch your system and apps. AWS trains its staff; you train yours.
The rules also depend on your country’s laws and the Regions you pick. World A3 builds real door rules, step by step.
Bahasa Melayu
Kancil tinggalkan kunci unit di bawah alas kaki. Orang asing jumpa dan terus masuk. Salah siapa?
Model tanggungjawab bersama bahagikan kerja. AWS jaga bangunan: keselamatan bagi cloud. Anda jaga unit anda: keselamatan dalam cloud. Susun kerja-kerja ini.
Peraturan pintu unit anda ialah security group (kumpulan keselamatan). AWS beri pintu; anda tulis peraturannya. Benarkan pelanggan masuk guna HTTPS. Halang orang asing.
Anda sewa server biasa di AWS (instance EC2). Sistem pengendaliannya perlukan patch keselamatan. Siapa yang pasang?
Garisan itu bergerak ikut servis. Server biasa beri anda lebih banyak kerja. Servis siap guna, seperti storan S3, beri kurang. Kerja mana sentiasa milik anda?
Fikiran yang adil, atau perlu dibaiki? Leret setiap satu.
Kini anda boleh kata siapa jaga apa: AWS jaga bangunan, anda jaga unit.
You finished this before. Practice is always welcome!
Official docs: Shared Responsibility Model · Amazon VPC: Security groups · IAM security best practices
You've learned for 25 minutes. A short break helps your brain.
Sprint done! Great focus. Stretch for a minute?