A team using a fully managed foundation model service asks which security responsibilities are theirs under the AWS shared responsibility model. Which answer is correct?

• AIdentity and access policy, encryption keys, what data is sent, and what the application does with the response.
• BNone, because a managed service means AWS holds all responsibility for the workload.
• CPatching the model hosts and configuring the underlying network.
• DPhysical security of the data centres where inference runs.