A council member asks whether city staff operate closed-circuit cameras inside AWS Region facilities that host the permitting system. Which answer is correct?

Physical security of AWS Region facilities — including closed-circuit cameras and related facility monitoring inside those datacenters — is an AWS responsibility under security of the cloud. City staff who run a permitting system on AWS do not install or operate CCTV inside AWS Regions, and physical camera operations are not a fixed customer duty under every service model. Amazon Inspector assesses workloads for vulnerabilities; it does not replace physical cameras at AWS datacenters. The correct municipal framing is that facility CCTV and guards sit with AWS, while the city focuses on accounts, identities, data protection, and workload configuration. The answer saying the city must operate AWS Region CCTV through IAM permissions fails because IAM governs cloud access, not physical surveillance operations inside AWS-owned facilities. The answer saying physical camera operations are a fixed customer duty under every service model fails because physical security of AWS Regions remains AWS's responsibility regardless of service model. The answer saying Amazon Inspector replaces physical cameras at AWS datacenters fails because Inspector is a vulnerability management service, not facility surveillance. Exam caveat: customers still secure their own on-premises or office environments; that does not extend to operating cameras inside AWS-owned Regions. Operational check: in security questionnaires, answer facility CCTV for AWS Regions as AWS-managed, and separately document how the city monitors its own sites, VPN ingress, and cloud account activity.