Security & Compliance: Implement zero-trust and least-privilege principles, manage IAM roles/policies, enforce MFA, manage encryption and keys (KMS/Secrets Manager), perform security hardening, and support audit/compliance readiness. Networking & Connectivity: Configure and troubleshoot AWS networking components, including VPCs, subnets, route tables, DNS, transit gateways, load balancers, and private endpoints.