Skip to main content

Milestone 2: Domain 6 readiness assessment

Complete:

  • 25 IAM and policy-evaluation scenarios,
  • 10 federation, STS, and workload-identity cases,
  • 12 secrets, KMS, encryption, and certificate cases,
  • 12 network-security cases,
  • 15 organization governance and Config cases,
  • 20 GuardDuty, Inspector, Macie, Security Hub, and Access Analyzer cases,
  • 10 audit-evidence and response scenarios,
  • one complete multi-account security capstone.

Passing standard: 80%, no long-lived workload credentials, no misunderstanding that SCPs or permission boundaries grant access, and every automated remediation is scoped and exception aware.