Serverless Developer Guide
A shared security model means that Amazon manages certain aspects of security, and you are 
responsible for others.
• AWS is responsible for the security of the cloud. This includes such thing as the physical security 
of the data centers.
• You are responsible for the security in the cloud. For example, you are responsible for your data, 
and for granting functions only the access the need to complete their work.
For developers getting started with serverless and experts alike, the responsibility of securing the 
resources and functions will take eﬀort to understand and implement.
We'll explain more along the way, but you should at least know that AWS commitment to security 
is not taken lightly. AWS services have carefully established security mechanisms for you to create 
secure solutions from the start. However, you have the responsibility to learn how and properly 
implement these mechanisms in your solutions.
For more details, see the Shared Responsibility Model, AWS Cloud Security, and Security 
Documentation Index with links to security documents for every service.
Security model 16