The shared responsibility model

AWS secures the cloud, you secure what you put in it. The line between those two jobs is the first thing to get right in any cloud security conversation, and it moves depending on how much of the stack a service manages for you.