AWS shares the responsibility for security with the customers as shown in their graphic below.  AWS is responsible for the physical security of the facilities as well as the infrastructure that includes compute, database, storage and networking resources. The customer is responsible for software, data and access that sits on top of the infrastructure layer.

Shared Responsibility Model
Shared Responsibility - Security