Security World 3 · Lock and Key · Stage 5

Secrets and Masks

Secrets that rotate themselves, a secret shared across accounts under the right key, and personal data that never reaches the wrong screen.

Domain: Security
World: Security World 3: Lock and Key (Professional)
Game type: Policy stepper: Edit identity, resource and key policies; the matrix shows the gate that decided.
Time: About 30 minutes on a first attempt (estimated)
Exam guides: SAA-C03Task 1.2: Design secure workloads and applications
SOA-C03Skill 4.2.4
DEA-C01Skill 4.1.3: Create and rotate credentials for password management (for example, AWS Secrets Manager); Skill 4.2.2: Store application and database credentials (for example, Secrets Manager, AWS Systems Manager Parameter Store)
SCS-C03Skill 5.3.1: Design management and rotation of credentials and secrets (for example, AWS Secrets Manager); Skill 5.3.4: Mask sensitive data (for example, CloudWatch Logs data protection policies, Amazon SNS message data protection)
AIP-C01Skill 3.2.2: Develop privacy-preserving systems to protect sensitive information during FM interactions (for example, by using Amazon Comprehend and Amazon Macie to detect personally identifiable information [PII], Amazon Bedrock native data privacy features, Amazon Bedrock guardrails to filter outputs)