A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC$2$ instances, and Amazon RDS $-$ Which security measures fall under the responsibility of AWS?

A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC$2$ instances, and Amazon RDS $-$ Which security measures fall under the responsibility of AWS?

Running a virus scan on EC$2$ instances & Installing the latest security patches on the RDS instance

Protecting against IP spoofing and packet sniffing &Installing the latest security patches on the RDS instance

Installing the latest security patches on the RDS instance & Configuring a security group

Encrypting communication between the EC$2$ instances and the Elastic Load Balancer & Configuring a security group

Configuring a security group and a network access control list $($NACL$)$ for EC$2$ instances & Running a virus scan on EC$2$