Defines near-term goals and strategic direction for secure AWS adoption, including identity and access management, network security, data protection, logging and monitoring, threat detection, vulnerability management, cloud governance, and regulatory compliance. Establish cloud security monitoring, logging, threat detection, and incident response capabilities using services such as AWS CloudTrail, Amazon GuardDuty, Amazon Detective, AWS Config, and Amazon CloudWatch.