This is called the Shared Responsibility Model. Amazon Web Services describes the distinction as AWS being responsible for security "of" the cloud, and the customer having responsibility "in" the ...