📅 Date: August 11, 2026 (Tuesday)
🎯 Topic: Final Review of Security/Monitoring/CI/CD
⏱️ Study Time: Approximately 120 minutes
KMS Direct Encryption: Max 4KB
Envelope Encryption: GenerateDataKey, for data >4KB
CMK: $1/month, key policy required
Secrets Manager: Auto rotation, $0.40/secret, 65KB
Parameter Store: Standard free, SecureString = KMS encrypted
Cognito User Pool: JWT, API Gateway Authorizer
Cognito Identity Pool: JWT → IAM temporary credentials → AWS resources
WAF: Layer 7, SQL/X