AWS DevOps Engineer Professional — Teil 6

Security and Compliance

Dieser Band folgt DOP-C02 Domain 6 mit 17 Prozent Prüfungsgewicht.

Er behandelt:

• IAM Entities, Federation, Policy Evaluation, RBAC, ABAC, Boundaries und SCPs,
• STS, Workload Identities, Secrets Rotation, KMS und Data Encryption,
• Network Security, WAF, Shield, Network Firewall, ACM und PKI,
• Organizations, Control Tower, Config, Compliance Automation und Pipeline Controls,
• Security Hub, GuardDuty, Inspector und Macie,
• CloudTrail, Config, Flow Logs, Access Analyzer, Finding Response und Audit Readiness.