Answer – C, D and E
As per the Shared Responsibility Model, the Patching of the underlying hardware and physical security of AWS resources is the responsibility of AWS.
For more information on AWS Shared Responsibility Model, please refer to the below URL-
https://aws.amazon.com/compliance/shared-responsibility-model/
Disk disposal-
Storage Device Decommissioning: When a storage device has reached the end of its useful life, AWS procedures include a decommissioning process designed to prevent customer data from being exposed to unauthorized individuals. AWS uses the techniques detailed in DoD 5220.22-M (“National Industrial Security Program Operating Manual “) or NIST 800-88 (“Guidelines for Media Sanitization”) to destroy data as part of the decommissioning process. All decommissioned magnetic storage devices are degaussed and physically destroyed in accordance with industry-standard practices.
For more information on Disk disposal, please refer to the below URL-
https://d0.awsstatic.com/whitepapers/aws-security-whitepaper.pdf