AWS
Infrastructure (global network security)
Isolation on physical hosts
Replacing faulty hardware
Compliance validation
You
Security Groups rules
Operation-system patches and updated
Software and utilities installed on the EC2 instance
IAM Roles assigned to EC2 & IAM user access management
Data security on your instance