Play free

Security World 3 · Lock and Key · Stage 4

On the Wire

TLS where connections terminate: the listener, the certificate, the bucket, the private path, and the links between nodes.

  • ELB security policies
  • ACM and Private CA
  • aws:SecureTransport
  • PrivateLink
  • Client VPN
  • Inter-node encryption
Domain
Security
World
Security World 3: Lock and Key (Professional)
Game type
Wire: Choose where each connection's encryption starts and ends.
Time
About 30 minutes on a first attempt (estimated)
Exam guides
  • SAA-C03Task 1.3: Determine appropriate data security controls
  • SOA-C03Skill 4.2.3
  • DEA-C01Skill 4.3.4: Enable encryption in transit or before transit for data
  • SCS-C03Skill 5.1.1: Design and configure mechanisms to require encryption when connecting to connect to resources (for example, by configuring Elastic Load Balancing [ELB] security policies, by enforcing TLS configurations); Skill 5.1.2: Design and configure mechanisms for secure and private access to resources; Skill 5.1.3: Design and configure inter-resource encryption in transit (for example, inter-node encryption configurations for Amazon EMR, Amazon EKS, SageMaker AI, Nitro encryption)
  • AIP-C01Skill 3.2.1: Develop protected AI environments to ensure comprehensive security for FM deployments (for example, by using VPC endpoints to isolate networks, IAM policies to enforce secure data access patterns, AWS Lake Formation to provide granular data access, CloudWatch to monitor data access)