
// Module included in the following assemblies:
//
// * rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.adoc

:_mod-docs-content-type: CONCEPT
[id="rosa-policy-customer-responsibility_{context}"]
= Additional customer responsibilities for data and applications

The customer is responsible for the applications, workloads, and data that they deploy to Red{nbsp}Hat
OpenShift Service on AWS. However, Red{nbsp}Hat and AWS provide various tools to help the customer
manage data and applications on the platform.

[cols="2a,3a,3a",options="header"]
|===

|Resource
|Red{nbsp}Hat and AWS
|Customer responsibilities

|Customer data
|**Red{nbsp}Hat**

- Maintain platform-level standards for data encryption as defined by industry security and
compliance standards.
- Provide OpenShift components to help manage application data, such as secrets.
- Enable integration with data services such as
Amazon RDS to store and manage data outside of the cluster and/or AWS.

**AWS**

- Provide Amazon RDS to allow customers to store and manage data outside of the cluster and/or AWS.
|- Maintain responsibility for all customer data stored on the platform and how customer applications consume and expose this data.

|Customer applications
|**Red{nbsp}Hat**

- Provision clusters with OpenShift components installed so that customers can access the OpenShift and Kubernetes APIs to deploy and manage containerized applications.
- Create clusters with image pull secrets so that customer deployments can pull images from the Red{nbsp}Hat Container Catalog registry.
- Provide access to OpenShift APIs that a customer can use to set up Operators to add community, third-party, and Red{nbsp}Hat services to the cluster.
- Provide storage classes and plugins to support persistent volumes for use with customer applications.
- Provide a container image registry so customers can securely store application container images on the cluster to deploy and manage applications.

**AWS**

- Provide Amazon EBS to support persistent volumes for use with customer applications.

- Provide Amazon S3 to support Red{nbsp}Hat provisioning of the container image registry.

|- Maintain responsibility for customer and third-party applications, data, and their complete lifecycle.
- If a customer adds Red{nbsp}Hat, community, third-party, their own, or other services to the cluster by using Operators or external images, the customer is responsible for these services and for working with the appropriate provider, including Red{nbsp}Hat, to troubleshoot any issues.
- Use the provided tools and features to configure and deploy; keep up to date; set up resource requests and limits; size the cluster to have enough resources to run apps; set up permissions; integrate with other services; manage any image streams or templates that the customer deploys; externally serve; save, back up, and restore data; and otherwise manage their highly available and resilient workloads.
- Maintain responsibility for monitoring the applications run on {product-title}, including
installing and operating software to gather metrics, create alerts, and protect secrets in the application.

|===
