Security World 1 · Who Can Do What · Stage 5

Who Are You

Six populations, six doors: pick the identity service each one needs, then fix the permission set the adjusters sign in with.

Domain: Security
World: Security World 1: Who Can Do What (Associate)
Game type: Policy stepper: Edit identity, resource and key policies; the matrix shows the gate that decided.
Time: About 25 minutes on a first attempt (estimated)
Exam guides: SAA-C03Task 1.1: Design secure access to AWS resources; Task 1.2: Design secure workloads and applications
SOA-C03Skill 4.1.1: Implement IAM features (for example, password policies, multi-factor authentication [MFA], roles, federated identity, resource policies, policy conditions)
SAP-C02Task 1.2: Prescribe security controls
SCS-C03Skill 4.1.1: Design and establish identity solutions for human, application, and system authentication (for example, AWS IAM Identity Center, Amazon Cognito, multi-factor authentication [MFA], identity provider [IdP] integration); Skill 4.1.2: Configure mechanisms to issue temporary credentials (for example, AWS STS, Amazon S3 presigned URLs)
MLA-C02Skill 4.3.5: Troubleshoot and debug security issues in ML and AI systems
AIP-C01Skill 2.3.3: Create secure access frameworks to ensure appropriate security controls (for example, by using identity federation between FM services and enterprise systems, role-based access control for model and data access, least privilege API access to FMs)