AWS DevOps Engineer Professional — Part 6

Security and Compliance

This volume maps to DOP-C02 Domain 6, weighted at 17% of the scored exam.

It covers:

• IAM entities, federation, policy evaluation, RBAC, ABAC, boundaries, and SCPs,
• STS, workload identities, secrets rotation, KMS, and data encryption,
• network security, WAF, Shield, Network Firewall, ACM, and PKI,
• Organizations, Control Tower, Config, compliance automation, and pipeline controls,
• Security Hub, GuardDuty, Inspector, and Macie,
• CloudTrail, Config, Flow Logs, Access Analyzer, finding response, and audit readiness.