ADE = AWS responsibility

Just to clarify on F. Direct Connect is an ISP and AWS offering, I consider it as a physical connection just like you get from your ISP at home. There is not security on it until you build security on the connection. AWS provides Direct Connect but it does not provide encryption level security on data movement through it by default. It's the customer's responsibility.

B: Creating an RDS instance and configuring the maintenance window is done by the customer. C: Adding monitoring, logging, etc on ECS is managed by the customer. F: Encrypting Direct Connect traffic is handled by the customer.

In question has 3 keyword "Amazon ECS", "AWS Direct Connect", "Amazon RDS". With per Amazon services, choose 1 according answer. Has 6 items, need pick 3 items. ECS --> choose C. Direct Connect --> choose F. RDS --> Excluse A (by keyword "infrastructure layer"), Choose B. Exclusive D (by keyword "patches for all minor and major database versions for Amazon RDS"). Exclusive E (by keyword "Ensure the physical security of the Amazon RDS"). Easy question.

BC & F ( no automatic encryption with direct connect

Amazon ECS is a fully managed service, the ops team only focus on building their applications, not the environment. Only option B and F makes sense.

100% BCF.

BCF B: Mentioned RDS C: Mentioned ECS F: Mentioned Direct connect

Yes BCF

I agree BCF

Bcf for me