According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?