This section looks at securing AWS infrastructure and the application. As the AWS security model is a shared one where Amazon is responsible for the security of the infrastructure-like facilities, hardware, network, and some software including virtualization, host operating systems and so on, you as the user are responsible for the security of your software stack, application, updates, data at rest and in transit, data stores, configuration properties, policies, credentials, and the security of the AWS services being used.