Responsibilities are shared and the customer, VMware, and AWS are all responsible for the security in the cloud.