사이버 보안이란 무엇인가요? - AWS
사이버 보안은 컴퓨터, 네트워크, 소프트웨어 애플리케이션, 중요 시스템 및 데이터를 잠재적 디지털 위협으로부터 보호하는 행위입니다. 조직은 데이터에 보안을 적용 ...
책임을 공유
클라우드 보안 은 클라우드에서 실행되는 데이터 및 애플리케이션을 보호하기 위해 조직에서 취하는 조치를 설명합니다. 이는 확장 가능한 환경에서 고객 신뢰를 강화하고 운영의 내결함성을 보장하며 데이터 개인 정보 보호 규제를 준수하는 데 중요합니다. 강력한 클라우드 보안 전략에서는 클라우드 공급업체와 조직이 <anchor>책임을 공유</anchor> 합니다.
Shared Responsibility Model - Amazon Web Services (AWS)
Shared Responsibility Model - Amazon Web Services (AWS)[Skip to main content](#aws-page-content-main)

[Click here to return to Amazon Web Services homepage](https://aws.amazon.com/?nc2=h_lg)

[About AWS](/about-aws/?nc2=h_header) [Contact Us](/contact-us/?nc2=h_header) Support
English
My Account


[Sign In](https://console.aws.amazon.com/console/home?nc2=h_ct&src=header-signin)

[Create an AWS Account](https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct&src=header_signup)

- [Amazon Q](/q/?nc2=h_ql_prod_l1_q)
- [Products](/products/?nc2=h_ql_prod)
- [Solutions](/solutions/?nc2=h_ql_sol)
- [Pricing](/pricing/?nc2=h_ql_pr)
- [Documentation](https://aws.amazon.com/documentation-overview/?nc2=h_ql_doc_do)
- [Learn](/getting-started/?nc2=h_ql_le)
- [Partner Network](/partners/?nc2=h_ql_pn)
- [AWS Marketplace](https://aws.amazon.com/marketplace/?nc2=h_ql_mp)
- [Customer Enablement](/customer-enablement/?nc2=h_ql_ce)
- [Events](/events/?nc2=h_ql_ev)
- [Explore More](/contact-us/?nc2=h_ql_exm)

Close

- [عربي](https://aws.amazon.com/ar/?nc1=h_ls)
- [Bahasa Indonesia](https://aws.amazon.com/id/?nc1=h_ls)
- [Deutsch](https://aws.amazon.com/de/?nc1=h_ls)
- [English](https://aws.amazon.com/?nc1=h_ls)
- [Español](https://aws.amazon.com/es/?nc1=h_ls)
- [Français](https://aws.amazon.com/fr/?nc1=h_ls)
- [Italiano](https://aws.amazon.com/it/?nc1=h_ls)
- [Português](https://aws.amazon.com/pt/?nc1=h_ls)

- [Tiếng Việt](https://aws.amazon.com/vi/?nc1=f_ls)
- [Türkçe](https://aws.amazon.com/tr/?nc1=h_ls)
- [Ρусский](https://aws.amazon.com/ru/?nc1=h_ls)
- [ไทย](https://aws.amazon.com/th/?nc1=f_ls)
- [日本語](https://aws.amazon.com/jp/?nc1=h_ls)
- [한국어](https://aws.amazon.com/ko/?nc1=h_ls)
- [中文 (简体)](https://aws.amazon.com/cn/?nc1=h_ls)
- [中文 (繁體)](https://aws.amazon.com/tw/?nc1=h_ls)

Close

- [My Profile](/profile/?nc2=h_m_mc)
- [Sign out of AWS Builder ID](https://auth.aws.amazon.com/sign-out/?nc2=h_m_mc)
- [AWS Management Console](https://console.aws.amazon.com/?nc2=h_m_mc)
- [Account Settings](https://console.aws.amazon.com/billing/home#/account?nc2=h_m_ma)
- [Billing & Cost Management](https://console.aws.amazon.com/billing/home?nc2=h_m_bc)
- [Security Credentials](https://console.aws.amazon.com/iam/home?nc2=h_m_sc#security_credential)
- [AWS Personal Health Dashboard](https://phd.aws.amazon.com/?nc2=h_m_sc)

Close

- [Support Center](https://console.aws.amazon.com/support/home/?nc2=h_ql_cu)
- [Expert Help](https://iq.aws.amazon.com/?utm=mkt.nav)
- [Knowledge Center](https://repost.aws/knowledge-center/?nc2=h_m_ma)
- [AWS Support Overview](/premiumsupport/?nc2=h_m_bc)
- [AWS re:Post](https://repost.aws/)

[Click here to return to Amazon Web Services homepage](https://aws.amazon.com/?nc2=h_lg)

[Get Started for Free](https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_mobile)

[Contact Us](https://aws.amazon.com/contact-us/?nc2=h_mobile)

- [Products](/products/?nc2=h_mo)
- [Solutions](/solutions/?nc2=h_mo)
- [Pricing](/pricing/?nc2=h_mo)
- [Introduction to AWS](/what-is-aws/?nc2=h_mo)
- [Getting Started](/getting-started/?nc2=h_mo)
- [Documentation](https://aws.amazon.com/documentation-overview/?nc2=h_mo)
- [Training and Certification](/training/?nc2=h_mo)
- [Developer Center](/developer/?nc2=h_mo)
- [Customer Success](/solutions/case-studies/?nc2=h_mo)
- [Partner Network](/partners/?nc2=h_mo)
- [AWS Marketplace](https://aws.amazon.com/marketplace/?nc2=h_mo)
- [Support](https://console.aws.amazon.com/support/home?nc2=h_ql_cu)
- [AWS re:Post](https://repost.aws/)
- [Log into Console](https://console.aws.amazon.com/console/home)
- [Download the Mobile App](/console/mobile/)

[AWS Cloud Security](/security/?nc=sn&loc=0)

[Security Services](/products/security/?nc=sn&loc=2) Use Cases   Compliance   Data Protection   [Blog](/security/blogs/) Partners   Resources

Close [Cryptographic Computing](/security/cryptographic-computing/) [Open Source Security](/security/opensource/) [Post-Quantum Cryptography](/security/post-quantum-cryptography/) [Provable Security](/security/provable-security/) [Ransomware Protection](/security/protecting-against-ransomware/) [Zero Trust](/security/zero-trust/)

Close [Cloud Audit Academy](/compliance/auditor-learning-path/) [Compliance Overview](/compliance/) [Compliance Programs](/compliance/programs/) [Services in Scope](/compliance/services-in-scope/) [Shared Responsibility Model](/compliance/shared-responsibility-model/)

Close [Data Protection](/compliance/data-protection/) [Data Privacy Center](/compliance/data-privacy/) [Digital Sovereignty](/compliance/digital-sovereignty/)

Close [AWS Marketplace](https://aws.amazon.com/marketplace/b/0625e4fd-88dd-4dd9-9e57-4a0461f97fb4?ref_=hmpg_categories_0625e4fd-88dd-4dd9-9e57-4a0461f97fb4&category=0625e4fd-88dd-4dd9-9e57-4a0461f97fb4) [MSSP](/mssp/) [MSSP Competency](/mssp/partner-solutions/) [Partner Resources](/security/partner-resources/) [Security Competency](/security/partner-solutions/)

Close [Customer Success Stories](/solutions/case-studies/?customer-references-cards.sort-by=item.additionalFields.sortDate&customer-references-cards.sort-order=desc&awsf.content-type=*all&awsf.customer-references-location=*all&awsf.customer-references-segment=*all&awsf.customer-references-industry=*all&awsf.customer-references-use-case=category%23security-identity-compliance&awsf.customer-references-tech-category=tech-category%23security-identity-compliance&awsf.customer-references-product=*all&awsf.language=language%23english) [Security Best Practices](/architecture/security-identity-compliance/?cards-all.sort-by=item.additionalFields.sortDate&cards-all.sort-order=desc&awsf.content-type=*all&awsf.methodology=*all) [Security Bulletins](/security/security-bulletins/) [Security Content](/products/security/resources/) [Security Learning](/security/security-learning/)

# Shared Responsibility Model

Security and Compliance is a shared responsibility between AWS and the customer. This shared model can help relieve the customer’s operational burden as AWS operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates. The customer assumes responsibility and management of the guest operating system (including updates and security patches), other associated application software as well as the configuration of the AWS provided security group firewall. Customers should carefully consider the services they choose as their responsibilities vary depending on the services used, the integration of those services into their IT environment, and applicable laws and regulations. The nature of this shared responsibility also provides the flexibility and customer control that permits the deployment. As shown in the chart below, this differentiation of responsibility is commonly referred to as Security “of” the Cloud versus Security “in” the Cloud.

**AWS responsibility “Security of the Cloud”** \- AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services.

**Customer responsibility “Security in the Cloud”** – Customer responsibility will be determined by the AWS Cloud services that a customer selects. This determines the amount of configuration work the customer must perform as part of their security responsibilities. For example, a service such as Amazon Elastic Compute Cloud (Amazon EC2) is categorized as Infrastructure as a Service (IaaS) and, as such, requires the customer to perform all of the necessary security configuration and management tasks. Customers that deploy an Amazon EC2 instance are responsible for management of the guest operating system (including updates and security patches), any application software or utilities installed by the customer on the instances, and the configuration of the AWS-provided firewall (called a security group) on each instance. For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms, and customers access the endpoints to store and retrieve data. Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.

![](https://d1.awsstatic.com/security-center/Shared_Responsibility_Model_V2.59d1eccec334b366627e9295b304202faf7b899b.jpg)

This customer/AWS shared responsibility model also extends to IT controls. Just as the responsibility to operate the IT environment is shared between AWS and its customers, so is the management, operation and verification of IT controls shared. AWS can help relieve customer burden of operating controls by managing those controls associated with the physical infrastructure deployed in the AWS environment that may previously have been managed by the customer. As every customer is deployed differently in AWS, customers can take advantage of shifting management of certain IT controls to AWS which results in a (new) distributed control environment. Customers can then use the AWS control and compliance documentation available to them to perform their control evaluation and verification procedures as required. Below are examples of controls that are managed by AWS, AWS Customers and/or both.

**Inherited Controls** – Controls which a customer fully inherits from AWS.

- Physical and Environmental controls

**Shared Controls**– Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include:

- Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.
- Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.
- Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.

**Customer Specific** – Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services. Examples include:

- Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.


### Applying the AWS Shared Responsibility Model in Practice

Once a customer understands the AWS Shared Responsibility Model and how it generally applies to operating in the cloud, they must determine how it applies to their use case. Customer responsibility varies based on many factors, including the AWS services and Regions they choose, the integration of those services into their IT environment, and the laws and regulations applicable to their organization and workload.

The following exercises can help customers in determining the distribution of responsibility based on specific use case:

![](https://d1.awsstatic.com/Compliance%20V2/security-images/security-illustrations/Page-Illo_Detect.7149d8eebba1671694336e6d121bc7974305cf6a.png)

Determine external and internal security and related compliance requirements and objectives, and consider industry frameworks like the **[NIST Cybersecurity Framework (CSF)](/compliance/nist/)** and **[ISO](/compliance/iso-certified/)**.

![AWS Service Capabilities for Privacy Considerations](https://d1.awsstatic.com/Industries/Financial%20Services/Solutions/Compliance/Financial-Resource-Center_Segment-SEC-OCIE-Audit-Guide_Illustration.657cf43ecc1401e627d972999625fe59eaf14edd.png)

Consider employing the **[AWS Cloud Adoption Framework (CAF)](/professional-services/CAF/)** and [**Well-Architected best practices**](/architecture/well-architected/) to plan and execute your digital transformation at scale.

![AWS Service Capabilities for Privacy Considerations](https://d1.awsstatic.com/Industries/Financial%20Services/Solutions/Compliance/Financial-Resource-Center_Segment-Coalfire-Audit-Guide_Illustration.ac2aabd54127e78e06e2e33114675cb2a7a0c824.png)

Review the security functionality and configuration options of individual AWS services within the security chapters of **[AWS service documentation](https://docs.aws.amazon.com/security/)**.

![Best practices for Security, Identity, &amp; Compliance](https://d1.awsstatic.com/Compliance%20V2/security-images/security-illustrations/Page-Illo_Remediate.56d68c7b713a02fb011c69b2d9a45f847bbb13db.png)

Evaluate the [**AWS Security, Identity, and Compliance services**](/products/security/) to understand how they can be used to help meet your security and compliance objectives.

![Data protection blogs](https://d1.awsstatic.com/Compliance%20V2/security-images/security-illustrations/Page-Illo_Prevent.9a440a3b5794ae42ee42d76dd98f30a7e152629e.png)

Review [**third-party audit attestation documents**](/artifact/) to determine inherited controls and what required controls may be remaining for you to implement in your environment.

![GDPR Center](https://d1.awsstatic.com/Compliance%20V2/security-images/security-illustrations/Page-Illo_Respond.b85154b05b25d1e6e661b15fb1c6065a327103ae.png)

Provide your internal and external audit teams with cloud-specific learning opportunities by leveraging the [**Cloud Audit Academy**](/compliance/auditor-learning-path/) training programs.

![Sub-processors list](https://d1.awsstatic.com/Compliance%20V2/security-images/security-illustrations/Page-Illo_Vulnerability%20reporting.04215ddd694a38678c9d0ca5d75bd03afcd7bd44.png)

Perform a **[Well-Architected Review](/well-architected-tool/)** of your AWS workloads to evaluate the implementation of best practices for security, reliability, and performance.

![AWS Service Capabilities for Privacy Considerations](https://d1.awsstatic.com/product-marketing/Management%20Tools/Page-Illos_MG-Use-Cases_Configuration_3-column_Audit.a97491edcdc02f0c348dd6bd647ca50f473b300e.png)

Explore solutions available in the **[AWS Marketplace](/marketplace/solutions/security/)** digital catalog with thousands of software listings from independent software vendors that enable you to find, test, buy, and deploy software that runs on AWS.

![AWS Service Capabilities for Privacy Considerations](https://d1.awsstatic.com/Compliance%20V2/security-images/security-illustrations/Page-Illo_Expert%20guidance.17d03ec1bd08b40c20505251cdeb196bb7bfe164.png)

Explore [**AWS Security Competency Partners**](https://aws.amazon.com/security/partner-solutions/?partner-solutions-cards.sort-by=item.additionalFields.partnerNameLower&partner-solutions-cards.sort-order=asc&awsf.partner-solutions-filter-partner-type=*all&awsf.Filter%20Name%3A%20partner-solutions-filter-partner-categories=*all&awsf.partner-solutions-filter-partner-location=*all) offering expertise and proven customer success securing every stage of cloud adoption, from initial migration through ongoing day-to-day management.

![](https://d1.awsstatic.com/Compliance%20V2/compliance-contactus-icon.9552a4a5125f03a738ff2bbf068fb90b2edf35fc.png)

Have Questions? Connect with an AWS Business Representative


[Contact Us](/compliance/contact/)

Exploring compliance roles?


[Apply today »](/careers/security/)

Want AWS Compliance updates?


[Follow us on Twitter »](https://twitter.com/AWSSecurityInfo)

* * *

[Sign In to the Console](https://console.aws.amazon.com/console/home?nc1=f_ct&src=footer-signin-mobile)

### Learn About AWS

- [What Is AWS?](/what-is-aws/?nc1=f_cc)
- [What Is Cloud Computing?](/what-is-cloud-computing/?nc1=f_cc)
- [AWS Accessibility](/accessibility/?nc1=f_cc)
- [AWS Inclusion, Diversity & Equity](/diversity-inclusion/?nc1=f_cc)
- [What Is DevOps?](/devops/what-is-devops/?nc1=f_cc)
- [What Is a Container?](/containers/?nc1=f_cc)
- [What Is a Data Lake?](/what-is/data-lake/?nc1=f_cc)
- [What is Artificial Intelligence (AI)?](/what-is/artificial-intelligence/?nc1=f_cc)
- [What is Generative AI?](/what-is/generative-ai/?nc1=f_cc)
- [What is Machine Learning (ML)?](/what-is/machine-learning/?nc1=f_cc)
- [AWS Cloud Security](/security/?nc1=f_cc)
- [What's New](/new/?nc1=f_cc)
- [Blogs](/blogs/?nc1=f_cc)
- [Press Releases](https://press.aboutamazon.com/press-releases/aws "Press Releases")

### Resources for AWS

- [Getting Started](/getting-started/?nc1=f_cc)
- [Training and Certification](/training/?nc1=f_cc)
- [AWS Solutions Library](/solutions/?nc1=f_cc)
- [Architecture Center](/architecture/?nc1=f_cc)
- [Product and Technical FAQs](/faqs/?nc1=f_dr)
- [Analyst Reports](/resources/analyst-reports/?nc1=f_cc)
- [AWS Partners](/partners/work-with-partners/?nc1=f_dr)

### Developers on AWS

- [Developer Center](/developer/?nc1=f_dr)
- [SDKs & Tools](/developer/tools/?nc1=f_dr)
- [.NET on AWS](/developer/language/net/?nc1=f_dr)
- [Python on AWS](/developer/language/python/?nc1=f_dr)
- [Java on AWS](/developer/language/java/?nc1=f_dr)
- [PHP on AWS](/developer/language/php/?nc1=f_cc)
- [JavaScript on AWS](/developer/language/javascript/?nc1=f_dr)

### Help

- [Contact Us](/contact-us/?nc1=f_m)
- [Get Expert Help](https://iq.aws.amazon.com/?utm=mkt.foot/?nc1=f_m)
- [File a Support Ticket](https://console.aws.amazon.com/support/home/?nc1=f_dr)
- [AWS re:Post](https://repost.aws/?nc1=f_dr)
- [Knowledge Center](https://repost.aws/knowledge-center/?nc1=f_dr)
- [AWS Support Overview](/premiumsupport/?nc1=f_dr)
- [Legal](/legal/?nc1=f_cc)
- [AWS Careers](/careers/)

[Create an AWS Account](https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc1=f_ct&src=default)

[Twitter](https://twitter.com/awscloud "Twitter")

[Facebook](https://www.facebook.com/amazonwebservices "Facebook")

[Linkedin](https://www.linkedin.com/company/amazon-web-services/ "Linkedin")

[Instagram](https://www.instagram.com/amazonwebservices/ "Instagram")

[Twitch](https://www.twitch.tv/aws "Twitch")

[YouTube](https://www.youtube.com/user/AmazonWebServices/Cloud/ "YouTube")

[Podcast](/podcasts/ "Podcast")

[Email](https://pages.awscloud.com/communication-preferences?trk=homepage "Email")

Amazon is an Equal Opportunity Employer:
_Minority / Women / Disability / Veteran / Gender Identity / Sexual Orientation / Age._

- Language
- [عربي](https://aws.amazon.com/ar/?nc1=h_ls)
- [Bahasa Indonesia](https://aws.amazon.com/id/?nc1=h_ls)
- [Deutsch](https://aws.amazon.com/de/?nc1=h_ls)
- [English](https://aws.amazon.com/?nc1=h_ls)
- [Español](https://aws.amazon.com/es/?nc1=h_ls)
- [Français](https://aws.amazon.com/fr/?nc1=h_ls)
- [Italiano](https://aws.amazon.com/it/?nc1=h_ls)
- [Português](https://aws.amazon.com/pt/?nc1=h_ls)
- [Tiếng Việt](https://aws.amazon.com/vi/?nc1=f_ls)
- [Türkçe](https://aws.amazon.com/tr/?nc1=h_ls)
- [Ρусский](https://aws.amazon.com/ru/?nc1=h_ls)
- [ไทย](https://aws.amazon.com/th/?nc1=f_ls)
- [日本語](https://aws.amazon.com/jp/?nc1=h_ls)
- [한국어](https://aws.amazon.com/ko/?nc1=h_ls)
- [中文 (简体)](https://aws.amazon.com/cn/?nc1=h_ls)
- [中文 (繁體)](https://aws.amazon.com/tw/?nc1=h_ls)

- [Privacy](https://aws.amazon.com/privacy/?nc1=f_pr)
- \|
- [Accessibility](https://aws.amazon.com/accessibility/?nc1=f_acc)
- \|
- [Site Terms](https://aws.amazon.com/terms/?nc1=f_pr)
- \|
- Cookie Preferences
- \|
- © 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.

#### Ending Support for Internet Explorer

Got it

AWS support for Internet Explorer ends on 07/31/2022. Supported browsers are Chrome, Firefox, Edge, and Safari.
[Learn more »](https://aws.amazon.com/blogs/aws/heads-up-aws-support-for-internet-explorer-11-is-ending/)

Got it