VENDOR / EXAMTOPICS EDITORIAL
Amazon is the issuing vendor for the AWS certification program.
AWS Security Hub CSPM provides centralized security-posture management across AWS accounts and Regions by collecting security findings, evaluating enabled security controls, and organizing…
Read articleAWS Secrets Manager and AWS Systems Manager Parameter Store can both store values securely, but AWS currently positions them for different primary use…
Read articleAmazon S3 data protection is strongest when encryption, versioning, retention, access control, logging, and recovery are designed together. Encryption protects object contents from…
Read articleAWS PrivateLink and VPC endpoints let workloads reach supported AWS services or private endpoint services without sending traffic across the public internet. The…
Read articleAWS organizations need a way to delegate administration without giving every team unrestricted power. IAM roles, permissions boundaries, and AWS Organizations service control…
Read articleAWS Key Management Service protects cryptographic keys and provides APIs for encryption, decryption, data-key generation, signing, verification, and related cryptographic operations. Two concepts…
Read articleIncident response in AWS combines classic security-response principles with cloud-specific capabilities such as temporary credentials, account isolation, IAM policy changes, centralized logging, infrastructure…
Read articleAmazon GuardDuty detects suspicious or malicious activity across AWS accounts, workloads, identities, data, and supported protection plans, then represents those detections as findings.…
Read articleCross-account access should normally rely on temporary AWS Security Token Service credentials rather than long-lived access keys copied between accounts. The standard pattern…
Read articleAWS CloudTrail records evidence about activity in AWS accounts: who or what made an API request, which action was attempted, which resources and…
Read articleInternet-facing applications must handle both application-layer abuse and volumetric denial-of-service attacks. AWS WAF and AWS Shield address different parts of that problem. AWS…
Read articleAWS Identity and Access Management does not evaluate one policy in isolation. When a principal sends a request, AWS builds a request context…
Read articleEmbeddings convert text, images, and other supported content into numerical vectors so software can compare semantic similarity rather than relying only on exact…
Read articleGenerative AI security spans identity, data, prompts, models, retrieval, tools, logs, network paths, secrets, and downstream actions. A production Bedrock application can be…
Read articleA prompt becomes production configuration once applications, users, and business processes depend on it. It should therefore be versioned, tested, reviewed, deployed, observed,…
Read article