In the AWS Well-Architected Framework, which of the following is NOT a Security design principle to design solutions in AWS?

Answer options:

A.Apply Security only at the edge of the network.
B.Protect Data at rest & in transit.
C.Implement a strong Identity foundation.
D.Enable Traceability.

Correct Answer: A
Security needs to be applied at all network layers, like edge of network, VPC, all instances & application with the VPC. Applying Security controls at the edge of the network is not an efficient security control & against security design principles.
As per AWS Well-Architected Framework, the following are the design principles for security in the cloud:
· Implement a strong identity foundation.
· Enable traceability.
· Apply security at all layers.
· Automate security best practices.
· Protect data in transit and at rest.
· Keep people away from data.
· Prepare for security events.
Options B, C, & D are incorrect as these are part of security design principles that need to be followed while implementing security controls in the cloud.
For more information on Security Design Principle with AWS Well-Architected Framework, refer to the following URL:
https://docs.aws.amazon.com/wellarchitected/latest/framework/sec-design.html