1.1.2 - Designing a flexible authorization model that includes IAM users, groups, roles, and policies

1.1.3 - Designing a role-based access control strategy

1.1.4 - Designing a security strategy for multiple Aws accounts

1.1.5 - Determining the appropriate use of resource policies for Aws services

1.1.6 - Determining when to federate a directory service with IAM roles

1.2.1 - Designing VPC architectures with security components

1.2.2 - Determining network segmentation strategies

1.2.3 - Integrating Aws services to secure applications

1.2.4 - Securing external network connections to and from the Aws Cloud

1.3.1 - Aligning Aws technologies to meet compliance requirements

1.3.2 - Encrypting data at rest

1.3.3 - Encrypting data in transit

1.3.4 - Implementing access policies for encryption keys

1.3.5 - Implementing data backups and replications

1.3.6 - Implementing policies for data access, lifecycle, and protection

1.3.7 - Rotating encryption keys and renewing certificates

2.1.1 - Designing event-driven, microservice, and/or multi-tier architectures based on requirements

2.1.2 - Determining scaling strategies for components used in an architecture design

2.1.3 - Determining the Aws services required to achieve loose coupling based on requirements

2.1.4 - Determining when to use containers

2.1.5 - Determining when to use serverless technologies and patterns

2.1.6 - Recommending appropriate compute, storage, networking, and database technologies based on requirements

2.1.7 - Using purpose-built Aws services for workloads

2.2.1 - Determining automation strategies to ensure infrastructure integrity

2.2.2 - Determining the Aws services required to provide a highly available and/or fault-tolerant architecture across Aws Regions or Availability Zones

2.2.3 - Identifying metrics based on business requirements to deliver a highly available solution

2.2.4 - Implementing designs to mitigate single points of failure

2.2.5 - Implementing strategies to ensure the durability and availability of data

2.2.6 - Selecting an appropriate DR strategy to meet business requirements

2.2.7 - Using Aws services that improve the reliability of legacy applications and applications not built for the cloud

2.2.8 - Using purpose-built Aws services for workloads