| 1.1 · Design and implement monitoring and alerting solutions for an AWS account or organization |
01 Monitoring & Audit, 08 Detection Engineering and Incident Response |
| 1.2 · Design and implement logging solutions |
01 Monitoring & Audit, 08 Detection Engineering and Incident Response |
| 1.3 · Troubleshoot security monitoring, logging, and alerting solutions |
01 Monitoring & Audit, 08 Detection Engineering and Incident Response |
| 2.1 · Design and test an incident response plan |
08 Detection Engineering and Incident Response |
| 2.2 · Respond to security events |
08 Detection Engineering and Incident Response |
| 3.1 · Design, implement, and troubleshoot security controls for network edge services |
04 Networking: VPC, 05 S3 security |
| 3.2 · Design, implement, and troubleshoot security controls for compute workloads |
03 Security & Encryption, 06 Containers on AWS, 08 Detection Engineering and Incident Response |
| 3.3 · Design and troubleshoot network security controls |
04 Networking: VPC |
| 4.1 · Design, implement, and troubleshoot authentication strategies |
02 IAM Advanced, 09 Policy Evaluation and Security at Scale |
| 4.2 · Design, implement, and troubleshoot authorization strategies |
02 IAM Advanced, 09 Policy Evaluation and Security at Scale |
| 5.1 · Design and implement controls for data in transit |
03 Security & Encryption, 05 S3 security |
| 5.2 · Design and implement controls for data at rest |
03 Security & Encryption, 05 S3 security |
| 5.3 · Design and implement controls to protect confidential data, credentials, secrets, and cryptographic key materials |
03 Security & Encryption, 07 AI Security, Privacy and Governance, 09 Policy Evaluation and Security at Scale |
| 6.1 · Develop a strategy to centrally deploy and manage AWS accounts |
02 IAM Advanced, 09 Policy Evaluation and Security at Scale |
| 6.2 · Implement a secure and consistent deployment strategy for cloud resources |
09 Policy Evaluation and Security at Scale, 10 CloudFormation and Systems Manager Operations |
| 6.3 · Evaluate the compliance of AWS resources |
01 Monitoring & Audit, 09 Policy Evaluation and Security at Scale |
