AWS Certified Solutions Architect Study Guide with 900 Practice Test Questions, 4th Edition

Chapter 12Secure Architectures

THE AWS CERTIFIED SOLUTIONS ARCHITECT ASSOCIATE EXAM OBJECTIVES COVERED IN THIS CHAPTER MAY INCLUDE, BUT ARE NOT LIMITED TO, THE FOLLOWING:

• Domain 1: Design Secure Architectures

Introduction

The primary goal of information security is to protect data, which of course entails protecting the resources that store and provide access to that data. To effectively protect data, you need to ensure three elements of the data (known collectively as “CIA”):

• Confidentiality The only people or systems that can access data are those authorized to access it. Encryption and access control lists (ACLs) are two common mechanisms for enforcing confidentiality.
• Integrity The data has not been maliciously or accidentally changed. ...