Correct Answer – D
Under the AWS shared responsibility model, AWS takes care of infrastructure configuration & management while customers must take care of the resources they launched within AWS.
Option A is incorrect. Amazon S3 is part of the infrastructure layer & Patching of host OS/Configuration for Amazon S3 is responsibility of AWS.
Option B is incorrect. AWS has the responsibility for the Logical Access controls for the underlying infrastructure.
Option C is incorrect. Physical Security of the facilities is AWS responsibility.
For more information on Shared responsibility model, refer to the following URL:
https://aws.amazon.com/compliance/shared-responsibility-model