Instiq

6Security and Compliance

Practice questions →Glossary →
  • 6.1Identity and Secrets Management

    Understand authorization for pipelines and runtimes—IAM roles, temporary credentials, Secrets Manager/Parameter Store, and OIDC federation. Eliminate long-lived keys and run securely with least privilege.

  • 6.2Threat Detection and Compliance Automation

    Understand continuous security governance—GuardDuty, Security Hub, AWS Config, Inspector, Macie, and auto-remediation. Run detect/evaluate/remediate automatically.

  • 6.3Data Protection and Auditing

    Understand data protection and trails—KMS (encryption), encryption at rest/in transit, CloudTrail (API auditing), S3 Object Lock/versioning, and tamper-proof trails. Meet compliance requirements.