AWS Customer (you)

Edge locations Networking traffic protection

Availability zones Server-side encryption

Regions Client-side data encryption

AWS global infrastructure Operating systems configuration

Hardware Network configuration

Networking Firewall configuration

Database Platform management

Storage Applications management

Compute Identity management

Software Access management

Customer data

https://blogs.vmware.com/cloudhealth/how-aws-shared-responsibility-model-works/