While AWS manages security of the cloud, customers are responsible for security in the cloud. This includes managing the security configuration of the managed services they use. Although AWS handles the underlying infrastructure security and database patching for services like Amazon RDS, customers must secure their data, set up user access controls, and configure database security settings. Ensuring correct encryption settings is a part of this, as customers need to select and manage the encryption of their databases within Amazon RDS – hence, applying encryption settings to sensitive data is correct. Operating system, firewall, and network configuration would fall under AWS's responsibility in the case of managed services.