Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
AWS · SAA-C03

Protecting applications

SAA-C03 · Lesson 4 of 23 · 25:20

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the SAA-C03 exam (AWS Certified Solutions Architect – Associate). In this lesson: threats from outside, AWS Shield and AWS WAF, Firewall Manager and Network Firewall, threat detection with GuardDuty, Inspector, Macie, Security Hub, and Detective, Amazon Cognito user pools and identity pools, and application credentials with Secrets Manager and Parameter Store. Includes three original practice questions.

Try the 3 quick checks →
Preview the topics
  • The tracking website receives thousands of requests per minute from a few addresses that try SQL injection in the search form. What should the architect add in front of the Application Load Balancer?
  • Drivers sign in to the mobile app, which must upload delivery photos directly to S3, without storing any AWS keys in the app. What should the architect use?
  • The tracking API connects to Amazon RDS, and the database password must change every 30 days, without redeploying the application. What should the architect use?