That's not at all what the shared responsibility model means...You are responsible for your application's security, not of the underlying infrastructure. That's why it is shared...