Security World 2 · Guardrails Above · Stage 6

Guardrail Detective

Five tickets caused by guardrails: what was denied, what was never logged, what should have been impossible, and what drifted.

  • Guardrail troubleshooting
  • Config timeline
  • Control Tower drift
Domain
Security
World
Security World 2: Guardrails Above (Professional)
Game type
Evidence desk: Each ticket is the reporter's words: find its cause in the evidence.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 4.1.2
  • SCS-C03Skill 6.1.1: Deploy and configure organizations by using AWS Organizations; Skill 6.1.3: Implement organization policies to manage permissions (for example, SCPs, RCPs, AI service opt-out policies, declarative policies); Skill 6.3.1: Create or enable rules to detect and remediate noncompliant AWS resources and to send notifications (for example, by using AWS Config to aggregate alerts and remediate non-compliant resources, Security Hub)