> For the complete documentation index, see [llms.txt](https://awsinpractice.itassist.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://awsinpractice.itassist.com/study-group/aws-certified-solutions-architect-associate/domain-1-design-secure-architectures/task-statement-1.3-determine-appropriate-data-security-controls/hands-on-labs-and-final-challenge.md).

# Hands-on Labs & Final Challenge

#### **Scenario:**

SecureCart’s security team must **audit and implement robust data security controls** across **all data assets**.

#### **Final Study Group Challenges:**

✅ **Scenario 1:** Apply IAM Policies & SCPs to Restrict Data Access\
✅ **Scenario 2:** Encrypt S3, RDS, and EBS Data Using AWS KMS\
✅ **Scenario 3:** Implement Data Retention Policies Using S3 Lifecycle Rules\
✅ **Scenario 4:** Automate Backups & Disaster Recovery Using AWS Backup\
✅ **Scenario 5:** Monitor Sensitive Data Using Amazon Macie & AWS Config

🔹 **Outcome:** Learners **demonstrate expertise in securing AWS data assets**.

***

### **📚 Recommended Study Resources**

✅ **AWS Well-Architected Framework – Security & Reliability Pillars**\
✅ **AWS Key Management Service (KMS) Documentation**\
✅ **Amazon Macie for Data Classification**\
✅ **AWS Backup & Disaster Recovery Strategies**\
✅ **AWS IAM & Resource Policies Best Practices**

### **🚀 Next Steps**

Would you like:\
✅ **Terraform automation scripts for data security implementation?**\
✅ **Scenario-based quizzes for each study group session?**\
✅ **Instructor-led deep-dive workshops?**