Amazon Web Services Security Questions

Practical and design knowledge of Amazon Web Services native security and telemetry capabilities and how to use them for detection, investigation, and prevention. Topics include what each service records, how to centralize and normalize telemetry, and how to write detections for cloud native logs. Core areas include Amazon CloudTrail for control plane activity, Amazon GuardDuty for managed threat signals, Virtual Private Cloud flow logs for network telemetry, Identity and Access Management role and policy design, Key Management Service for encryption and key handling, secure object storage configuration, and integration of service telemetry with security information and event management and detection pipelines. Candidates should be able to design cross account logging and monitoring, tune detections for cloud telemetry, and leverage native configuration controls to reduce cloud attack surface.