While AWS takes responsibility for securing the infrastructure that runs all the services offered in the AWS Cloud, such as the hardware, software, networking, and facilities that run AWS services, customers are responsible for anything they put on the Cloud or connect to the Cloud. This includes managing the guest operating system (including updates and security patches), other associated application software as well as the configuration of the AWS-provided security group firewall. In the case of Amazon RDS, AWS manages the database infrastructure, but customers are responsible for managing the database users, permissions, and data.