This podcast is made by Ran Chen, who holds an EA license, Insurance and Securities licenses (Series 6, 63, 65), and the CFP® designation. He is passionate about opening access to high-quality exam preparation resources and helping learners prepare more effectively for professional certification exams.

In this episode you will learn:

- The core distinction between AWS's responsibility (security OF the cloud) and the customer's responsibility (security IN the cloud).

- For IaaS services like EC2, the customer is always responsible for guest OS patching and security group configuration.

- In a PaaS model like RDS, AWS manages database engine patching, but the customer still controls data access and encryption.

- For SaaS services like S3, the customer's primary responsibilities are managing data and configuring access permissions through policies.

- A simple mnemonic for the exam: 'If you can configure it, you are responsible for securing it.'

For more free exam prep tools, practice questions, and AI-powered explanations, visit https://open-exam-prep.com/ or YouTube Channel: https://www.youtube.com/@Open-exam-prep