Domain 1: Design Secure Architectures
30%- 1.1 Design secure access to AWS resourcesIAM, IAM Identity Center, STS, cross-account access, Control Tower, SCPs
- 1.2 Design secure workloads and applicationsSecurity groups, network ACLs, subnets, WAF, Shield, Secrets Manager, VPN, Direct Connect
- 1.3 Determine appropriate data security controlsKMS, ACM and TLS, key rotation, backups, lifecycle policies, compliance