Data GovernanceThe Evolving Data Governance ChallengeThe Growth of Unstructured DataGovernment Regulations for Data and AIData Governance for Generative and Agentic AIThe Shared Responsibility ModelAWS Identity and Access Management (AWS IAM)PrincipalsEntities, Roles, and PoliciesThe Anatomy of an IAM PolicyPrinciple of Least PrivilegeIAM Authentication for Data ServicesEncryption for Data ProtectionEncryption Key ManagementAWS-Owned Keys and Customer-Managed KeysCustom Key StoreExternal Key StoreEncryption Across RegionsEncrypting Data-at-RestEncrypting Data-in-TransitSensitive Data Detection and RedactionData Governance on AWSData Governance RolesFine-Grained Access Control for DataGenerative and Agentic AI SecuritySupply Chain AttackSensitive Data LeakageConfused DeputyHallucinationPrompt Injection AttackGuardrailsSafeguards in Amazon BedrockAI-Powered Security with the AWS Security AgentModel Context Protocol (MCP) SecurityInbound and Outbound AuthenticationOAuth for MCPMCP Servers As OAuth Resource ServerMCP Client-Server Request and Authorization FlowsMCP Client-Server Initialization and HandshakeMCP Metadata DiscoveryDynamic Client Registration (optional, but not really)Requesting the Authorization CodeExchange the Authorization Code for the Access TokenRequest for MCP Resource with Access TokenConsent Fatigue from the Human-in-the-Loop Approval FlowClient Credentials Flow for Private MCP ClientsIAM Authentication with SigV4 for MCPCompliance and AuditingAWS ConfigAWS CloudTrailAmazon S3 Server LoggingAWS Security HubAWS Audit ManagerDisaster Recovery, High Availability, and BackupsDisaster RecoveryBackup and RestorePilot LightWarm StandbyMultiregion Active-ActiveHigh AvailabilitySummary
