AWS PaaS (Platform or Container) services run on separate Amazon EC2 or other infrastructure instances. Customer can choose on which network and platform it has to run, setup firewall rules and Access Management, then AWS manages the OS and platform layer for you.
AWS provides a managed service for these application “containers”. The cloud provider also take care of Infrastructure and Platform IAM policies for you.
Examples of such container services include Amazon Relational Database Services (Amazon RDS), Amazon Elastic Map Reduce (Amazon EMR) and AWS Elastic Beanstalk.
For services such as Amazon RDS, the AWS provides data backup and recovery tools; but it is customer responsibility to configure and use tools in relation to their business continuity and disaster recovery (BC/DR) policy.