AWS re:Inforce 2023 - Understanding the shared responsibility model and AWS KMS XKS (DAP221)