A privacy officer asks which AWS Well-Architected pillar most directly covers identity controls and encryption choices. Which pillar should be cited?
Select an answer to reveal the explanation.
Short Explanation
Who can get in, and how data is scrambled when it sits or travels — that is Security’s beat. The Security pillar covers identity and encryption among its protective practices. Operational Excellence runs the shop, Performance Efficiency picks efficient resources, and Cost Optimization watches spend.
Full Explanation
Security is the Well-Architected pillar that most directly covers identity controls and encryption choices for a privacy officer. Protecting confidentiality and integrity through IAM, encryption, key management, and related controls sits squarely in Security for municipal sensitive data.
Operational Excellence covers operating and improving processes, not the primary home for encryption and identity design. Performance Efficiency covers efficient resource use. Cost Optimization covers spend. Pointing the privacy officer there dilutes accountability for protective controls.
Exam caveat: Identity + encryption language → Security pillar. Operational check: review IAM least privilege for the workload, verify encryption at rest and in transit with managed keys where appropriate, enable access logging, and file residual risks with the privacy office.
Municipal teams should keep a one-page decision record linking this Cloud Practitioner concept to resident outcomes, revisit it after major traffic or compliance changes, and ensure runbooks still match the chosen design.
Municipal teams should keep a one-page decision record linking this Cloud Practitioner concept to resident outcomes, revisit it after major traffic or compliance changes, and ensure runbooks still match the chosen design.