Instiq

3Security

Practice questions →Glossary →
  • 3.1IAM and Authorizing Applications

    Understand authorizing applications: temporary credentials via IAM roles (no embedded keys on Lambda/EC2), least-privilege policies, and assuming roles (AssumeRole). The core of "Security" in DVA-C02.

  • 3.2User Authentication with Amazon Cognito

    Understand Cognito user pools (sign-up/sign-in, JWT issuance) vs. identity pools (exchange tokens for temporary AWS credentials) and the app user-auth flow.

  • 3.3Encryption and Secrets (KMS, Secrets Manager)

    Understand key management and encryption at rest with AWS KMS, and securely storing/fetching/rotating secrets with Secrets Manager / SSM Parameter Store.