ISC2 CISSP: Cloud Security Architecture
Cloud security architecture requires security leaders to understand how identity, network, data, platform, application, and provider responsibilities change when systems move into shared…
Read articleEDITORIAL TOPIC / EXAMTOPICS EDITORIAL
Cloud Computing.
Cloud platforms, workload architecture, operations, storage, and infrastructure.
PUBLISHED COVERAGECurated by subject
AWS SCS-C03: Security Hub for Multi-Account Security Posture
AWS Security Hub CSPM provides centralized security-posture management across AWS accounts and Regions by collecting security findings, evaluating enabled security controls, and organizing…
Read articleAWS SCS-C03: Secrets Manager vs Systems Manager Parameter Store
AWS Secrets Manager and AWS Systems Manager Parameter Store can both store values securely, but AWS currently positions them for different primary use…
Read articleAWS SCS-C03: S3 Data Protection with Object Lock and Encryption
Amazon S3 data protection is strongest when encryption, versioning, retention, access control, logging, and recovery are designed together. Encryption protects object contents from…
Read articleAWS SCS-C03: PrivateLink and VPC Endpoints
AWS PrivateLink and VPC endpoints let workloads reach supported AWS services or private endpoint services without sending traffic across the public internet. The…
Read articleAWS SCS-C03: Permission Boundaries, SCPs, and IAM Roles
AWS organizations need a way to delegate administration without giving every team unrestricted power. IAM roles, permissions boundaries, and AWS Organizations service control…
Read articleAWS SCS-C03: KMS Key Policies and Envelope Encryption
AWS Key Management Service protects cryptographic keys and provides APIs for encryption, decryption, data-key generation, signing, verification, and related cryptographic operations. Two concepts…
Read articleAWS SCS-C03: Incident Response in AWS Accounts
Incident response in AWS combines classic security-response principles with cloud-specific capabilities such as temporary credentials, account isolation, IAM policy changes, centralized logging, infrastructure…
Read articleAWS SCS-C03: GuardDuty Findings and Investigation Workflows
Amazon GuardDuty detects suspicious or malicious activity across AWS accounts, workloads, identities, data, and supported protection plans, then represents those detections as findings.…
Read articleAWS SCS-C03: Cross-Account Access Without Static Keys
Cross-account access should normally rely on temporary AWS Security Token Service credentials rather than long-lived access keys copied between accounts. The standard pattern…
Read articleAWS SCS-C03: CloudTrail for Security Investigations
AWS CloudTrail records evidence about activity in AWS accounts: who or what made an API request, which action was attempted, which resources and…
Read articleAWS SCS-C03: WAF and Shield for Public Applications
Internet-facing applications must handle both application-layer abuse and volumetric denial-of-service attacks. AWS WAF and AWS Shield address different parts of that problem. AWS…
Read articleAWS SCS-C03: IAM Policy Evaluation
AWS Identity and Access Management does not evaluate one policy in isolation. When a principal sends a request, AWS builds a request context…
Read articleAWS AIP-C01: Vector Search and Embeddings for AWS GenAI
Embeddings convert text, images, and other supported content into numerical vectors so software can compare semantic similarity rather than relying only on exact…
Read articleAWS AIP-C01: Prompt Management for Production GenAI Systems
A prompt becomes production configuration once applications, users, and business processes depend on it. It should therefore be versioned, tested, reviewed, deployed, observed,…
Read article