According to the AWS shared responsibility model, who is responsible for configuration management?
AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.https://aws.amazon.com/compliance/shared-responsibility-model/