docs.aws.amazon.com

Generate a data encryption key with AWS KMS GenerateDataKey for envelope encryption

Configure AWS KMS key policies, IAM policies, and grants for least-privilege key access

Use AWS KMS EncryptionContext as additional authenticated data to bind ciphertext to its context

Set up AWS KMS multi-Region keys for cross-Region encryption and decryption

Initialize an AWS CloudHSM cluster and perform key operations from an EC2 application

Design an envelope encryption system distinguishing DEK and KEK roles and responsibilities

Configure AWS IAM Roles Anywhere to grant AWS credentials to on-premises workloads using X.509 certificates

Exchange a GitHub Actions OIDC token for AWS credentials using AssumeRoleWithWebIdentity

Configure automatic key rotation in AWS KMS and Azure Key Vault and manage the rotation lifecycle

Download and decompress a gzip-encoded Amazon SP-API report (e.g., GET_MERCHANT_LISTINGS_ALL_DATA) and parse the tab-delimited result

Upload A+ Content to Amazon using the SP-API A+ Content API: create a content document, submit for ASIN association, and check approval status

Configure an Amazon SP-API Restricted Data Token (RDT) to access PII fields in order reports and decrypt buyer address data

Use the Amazon SP-API FBA Inbound v2024 API to create an inbound shipment plan and confirm a send-to-Amazon (STA) workflow

Submit a Listings Items PATCH request to the Amazon SP-API to update price and quantity for an existing listing without a full feed upload

Register a Kinesis enhanced fan-out consumer with RegisterStreamConsumer and manage per-shard subscriptions via SubscribeToShard

Configure SQS FIFO high-throughput mode and choose deduplication scope for predictable ordering at scale

Build an EventBridge Pipe from an SQS source to an EventBridge event bus with batch filtering and Lambda enrichment

Import DICOM P10 files from S3 into an AWS HealthImaging datastore using a DICOM import job

Apply a lifecycle policy to AWS ECR repositories created automatically by pull-through cache rules using a repository creation template

Configure an Amazon ECR pull-through cache rule to automatically sync images between two ECR private registries across AWS accounts

Create an Amazon IVS low-latency channel and broadcast via RTMPS

Create an Amazon IVS Real-Time stage and publish via WHIP from OBS

Send timed metadata to an Amazon IVS low-latency channel during a live stream

Harvest a live-to-VOD clip from an AWS MediaPackage live channel

Monitor live stream health metrics and set alarms for frame drop and ingest bitrate

Configure AWS MediaPackage V2 live channel with SPEKE v2 DRM encryption for HLS and DASH outputs

Enable Amazon IVS real-time stage participant recording to S3

Create an Amazon Personalize recommender for ecommerce product recommendations and call GetRecommendations in real time

Send real-time behavioral events to Amazon Personalize with PutEvents to power live personalization

Record an Amazon Chime SDK meeting to S3 using a Media Capture Pipeline and concatenate the MP4 chunks

Set up an Amazon Chime SDK Voice Connector with a SIP Media Application and Lambda handler

Set up Amazon SES domain identity and Easy DKIM with automatic key rotation

Create an AWS WAF web ACL and attach managed rule groups via the WAFV2 API

Configure AWS WAF Bot Control managed rule group to detect and manage bot traffic

Run an AWS Transcribe batch job to produce SRT and VTT subtitle files

Fan out messages from an SNS FIFO topic to a Lambda function

Create an AWS CloudWatch Synthetics canary in Node.js to monitor a critical API endpoint and trigger alarms on failure

Export Amazon GuardDuty findings and automate responses via EventBridge

Author and test GameLift FlexMatch rule sets for skill-based team matchmaking

Configure Aurora Serverless v2 auto-pause (scale-to-zero) to minimize idle costs

Enable DynamoDB point-in-time recovery (PITR) and restore a table to a previous state

Stream DynamoDB changes to Lambda via DynamoDB Streams for CDC

Perform an Aurora MySQL blue/green deployment for a zero-downtime major version upgrade

Configure SQS FIFO queue deduplication and message groups

Tune SQS visibility timeout and configure a redrive policy

Set up SNS fanout to multiple SQS queues with subscription filter policies

Create EventBridge rules, archive events, and replay them

Scale Amazon Kinesis Data Streams shards and reshard safely

Set up Amazon MQ broker for ActiveMQ or RabbitMQ workloads

Create CloudWatch metric math expressions and composite alarms

Run CloudWatch Logs Insights queries programmatically via the AWS API

Manage AWS IoT Device Shadow within the 8 KB document size limit

Submit an AWS Elemental MediaConvert transcoding job

AWS Glue start job run

S3 multipart upload for large files

Redshift COPY from S3

Implement envelope encryption using AWS KMS

Set up automatic secret rotation in AWS Secrets Manager

Query AWS CloudTrail Lake for security events

Retrieve and filter Amazon GuardDuty findings via API

Aggregate and normalize findings from AWS Security Hub