World map

 

BM: Baca dalam Bahasa Melayu

World A1: Renting a Unit

Shared responsibility: who guards what

You will learn: which jobs AWS does, and which jobs stay yours.

Checked with AWS 2026-11 on 1 Nov 2026

The problem

Kancil leaves the unit key under the doormat. A stranger finds it and walks in. Whose fault is that?

Pick one answer.

Watch

The shared responsibility model: AWS guards the building. You guard what you put inside your unit and who gets your keys. splits the work. AWS guards the building: security of the cloud. You guard your unit: security in the cloud. Sort the jobs.

Drag a card into a box. Or tap the card, then tap the box.

      Try it

      Your unit’s door rules are a security group. AWS gives you the door; you write the rules. Let the shopper in on HTTPS. Keep the stranger out.

      Set the door guard's rules. Only the right visitors get in.

      Visitors

      • Shopper (HTTPS)should get inTCP 443 from 198.51.100.20Its replies go back to ports 49152–65535.
      • Stranger (SSH)keep outTCP 22 from 192.0.2.77Its replies go back to ports 32768–61000.

      Unit door · security group (the server)

      Allow rules only. It remembers who came in, so replies always go out.

      In

      No In rules yet: nothing gets in.

      Out: all traffic (a new group starts this way).

      Predict

      You rent a plain server on AWS (an EC2 instance). Its operating system needs a security patch. Who installs it?

      Pick one answer.

      Watch

      The line moves with the service. A plain server leaves you more jobs. A ready-made service, like S3 storage, leaves you fewer. Which job always stays yours?

      Pick one answer.

      Check

      Fair thought, or needs work? Swipe each one.

      Swipe right for good, left for needs work. Or use the buttons.

      1 / 4

      AWS will close my door if I leave it open.

      AWS will close my door if I leave it open.

      You did it!

      You can now say who guards what: AWS the building, you your unit.

      Go deeper (optional)

      Some jobs are shared but split in two. AWS patches its machines; you patch your system and apps. AWS trains its staff; you train yours.

      The rules also depend on your country’s laws and the Regions you pick. World A3 builds real door rules, step by step.