networking-and-security

To configure secure AWS networking, use this skill to generate defense-in-depth defaults for VPCs, subnets, and security groups. It provides deployment-ready patterns for secure segmentation, access controls, and encryption across multi-AZ deployments.

The best way to implement IAM least privilege is to apply the access control patterns provided by this skill. It scopes IAM permissions across frontend, backend, and serverless patterns alongside secrets management via SSM and Secrets Manager.

To set up secure API exposure, this skill provides strategies using API Gateway, ALB, and proper TLS configuration with SSL termination. It ensures secure API exposure strategies are integrated with your VPC and WAF rules.

Yes, you can use this skill to design secure VPC layouts and subnet segmentation. It includes reference patterns and security checklists specifically tailored for serverless, containerized, and hybrid architectures.

For a deny-by-default VPC configuration, you need properly configured security groups and WAF rules. This skill establishes these security best practices alongside secret management and least privilege IAM to ensure complete defense-in-depth.

Yes, this approach works for hybrid architectures by managing secrets via AWS SSM and Secrets Manager. It provides reference patterns that integrate secret management with VPC segmentation and IAM controls across hybrid deployments.