Shared Responsibility makes a clear distinction between security of the cloud and the security in the cloud.

If you think of the cloud as a warehouse that contains your data, we own and control that warehouse. We keep it in a safe location for you, fenced off, and guarded with state-of-the-art, compliant security, with control over who’s allowed in and out 24 hours a day. When you use AWS, you’re hiring space and services inside the warehouse that we’ve built and secured for you.