The correct choice is Create and manage Lambda function versions. Customers retain responsibility for their code, configuration, access control, and deployment artifacts and they control when to publish, keep, or roll back function versions.

Under the AWS shared responsibility model AWS manages the service infrastructure, the hosts, the operating systems, and the managed runtimes and customers are responsible for what they deploy into the service. That means customers must handle application lifecycle tasks such as Create and manage Lambda function versions and related configuration and IAM settings.

Build and manage all runtime environments for Lambda is incorrect because AWS provides and maintains the managed runtimes and the platform that executes Lambda functions so customers do not build the underlying runtimes.

Provision and operate the underlying network infrastructure for Lambda is incorrect because AWS operates the service networking and data center infrastructure and customers only configure VPC access for functions when that is needed.

Apply operating system patches to the Lambda service infrastructure is incorrect because AWS is responsible for patching and maintaining the hosts and operating systems that run the Lambda service.

Full AWS Practitioner Certification Question