According to the AWS shared responsibility model, what responsibility (CLF-C02)

Correct answer: A) Manage connections to the database.
Amazon RDS is a managed service provided by AWS, which means AWS takes care of many of the administrative tasks such as hardware provisioning, database setup, patching, backups, and scaling. However, the customer still has certain responsibilities. Managing connections to the database, including configuring security groups, network access control lists (ACLs), and handling database credentials, is one of those responsibilities. This involves ensuring that only authorized users or applications have access to the database and that connections are properly secured.

The other options are responsibilities typically handled by AWS:

B. Install Microsoft SQL Server: This task is handled by AWS when using Amazon RDS. Customers don't need to install or manage the underlying database software; AWS takes care of that.

C. Design encryption-at-rest strategies: While customers can choose to enable encryption for their RDS databases, the actual design and implementation of encryption-at-rest strategies are part of the customer's responsibility.

D. Apply minor database patches: AWS is responsible for applying patches and updates to the underlying infrastructure and database engine software. Customers do not have direct access to the underlying operating system or database software in Amazon RDS; therefore, they are not responsible for applying patches. However, customers may need to apply certain database-level patches or updates related to their specific application code or configurations.