This is called the Shared Responsibility Model. Amazon Web Services describes the distinction as AWS being responsible for security "of" the cloud, and the customer having responsibility "in" the ...

Under AWS’ shared responsibility model, Robinson said customers are responsible for securing what’s in the cloud while AWS handles security of the cloud infrastructure itself. “It is ...