Design least-privilege access for engineers, CI/CD systems, and workloads using IAM roles, short-lived credentials, permission boundaries, and managed secrets.

Define service SLIs and SLOs, then map them to actionable metrics, logs, traces, dashboards, burn-rate or symptom-based alerts, and error-budget decisions.

Design and defend a tested backup and disaster-recovery strategy that distinguishes Multi-AZ high availability from regional recovery and satisfies stated RTO and RPO targets.