AWS Certified Solutions Architect Associate SAA-C03 Practice Question

AWS is responsible for protecting the infrastructure that runs AWS services, which includes the physical security of data centers, network infrastructure, and managed service patching, like Amazon RDS. Customers are responsible for managing the security inside the database, such as the data itself, controlling who can access the data, and using encryption to protect the data. While AWS will patch database engines, the logical database schema is within the customer's control, thus the correct answer is 'Patching the underlying database software'.