Monday, May 11, 2026

Cohort 3 | Project CloudIgnite Topics: Security Compliance, AWS Risk & Compliance, AWS Support Plans, Introduction to Programming Duration: ~3 hours

📌 Sections marked with [CLF-C02] are relevant to the AWS Certified Cloud Practitioner exam.

---

Key Takeaways

• Compliance: regulatory (government/industry) vs contractual (SLA/PLA); standards: PCI DSS, HIPAA, GDPR, PIPEDA
• AWS Artifact: portal for compliance reports and audit documentation
• AWS Support Plans: Developer (business hours) → Business (24/7, ≤4hr) → Enterprise (24/7, ≤15min + TAM)
• Python introduced: interpreted, dynamically typed, cross-platform; use Python 3
• Data types: int, float, bool, str; Python infers types automatically
• Python setup: install from python.org, add to PATH, VS Code + Python extension
• Key advice: "Don't ask AI to write the full solution — use AI to understand syntax, then write code yourself"

---

Table of Contents

1. Security Compliance
2. AWS Risk and Compliance Program
3. AWS Support & Resources
4. Knowledge Check Highlights
5. Introduction to Programming
6. Python Setup Guide

---

1. Security Compliance

Types of Compliance Requirements [CLF-C02]

Compliance requirements fall into two main categories:

• Regulatory – mandated by governments or industries
  • Country-specific laws
  • Industry-specific regulations (e.g. healthcare, finance)
• Contractual – agreed upon between parties
  • SLA (Service Level Agreement)
  • PLA (Privacy Level Agreement)

Compliance Authorities & Consequences of Non-Compliance

Note: Best practices are not legally binding but are widely followed (e.g. DevOps, software development principles).

Key Cybersecurity Standards [CLF-C02]

• ISO / IETF / IEEE – International engineering and security standards
• PCI DSS – Payment Card Industry Data Security Standard; governs how transactional/credit card data must be handled and stored
• HIPAA – Health Insurance Portability and Accountability Act; governs handling of healthcare information; consists of 5 titles

Regional Compliance Standards

💡 European Union is generally considered to have among the strictest data compliance rules.

---

2. AWS Risk and Compliance Program [CLF-C02]

Shared Responsibility Model (Recap)

• AWS is responsible FOR the cloud – physical infrastructure, hardware, networking
• Customer is responsible IN the cloud – applications, data, configurations

AWS Compliance Program – 3 Components

1. AWS Business Risk Management

   • Evaluates business plans bi-annually
   • Identifies and resolves risks
   • Maintains a register of known risks
   • Creates and maintains security policies
   • Provides security training to employees
   • Performs application security reviews

2. AWS Control Environment and Automation

   • Automates repetitive tasks to reduce human error
   • Ensures consistency (manual processes can deviate; automated ones do not)
   • Rules and regulations govern how automation is implemented

3. AWS Certification and Attestations

   • Third-party attestation audits confirm controls operate as intended
   • Audits performed against global/regional security frameworks and government regulatory requirements

AWS Artifact [CLF-C02]

• Portal where customers can access AWS security and compliance documentation
• Customers can retrieve third-party independent audit reports through AWS Artifact

Customer Compliance Responsibilities [CLF-C02]

• Maintain governance over own IT infrastructure
• Understand compliance objectives and control environments
• Understand the organisation's risk tolerance
• Evaluate effectiveness of their control environment

---

3. AWS Support & Resources [CLF-C02]

AWS Account Teams

• First point of contact for any AWS issue
• Guide customers toward the right resources to resolve security issues

AWS Support Plans [CLF-C02]

Additional AWS Resources

• AWS Trusted Advisor – Assesses your resources against best practices
• AWS Personal Health Dashboard – Personalised alerts about AWS service issues affecting your account
• AWS Advisories and Bulletins – Latest information on vulnerabilities, threats, and security issues; also used for penetration testing notifications
• AWS Professional Services & Partner Network
  • Partner networks help customers implement and manage AWS (e.g. system integrators, managed service providers)
  • Technology partners provide software tools and services
• AWS Auditor Learning Path – Specific training path for those in auditing, compliance, or legal roles

AWS Security Benefits (Summary)

• Flexible, secure data storage options
• Ability to securely scale infrastructure
• Automation of security tasks (e.g. using Python/SDK)
• Pre-built large infrastructure environments
• Security strategy covering: Prevent → Detect → Respond → Remediate

---

4. Knowledge Check Highlights

Security Practices KC

Compliance KC

Support Resources KC

---

5. Introduction to Programming

This section is foundational for Python scripting, which is used for automating AWS security tasks.

Why Programming?

• Powers all software: operating systems, applications, web services
• Automation is a key use case – especially relevant for cloud and IT operations
• Python is particularly well-suited for automating repetitive/daily tasks

Automation Principles

• Identify which tasks to automate (repeated, predictable tasks)
• Find the balance between over-automation and under-automation
• Do not automate a bad process – fix the process first

What is a Programming Language?

• A way for humans to communicate instructions to a computer
• Computers only understand machine language (0s and 1s)
• Programming languages use interpreters or compilers to translate code

Interpreted vs Compiled Languages

Python is an interpreted language – errors are shown one at a time, line by line.

Key Programming Concepts

• IDE vs Code Editor: An IDE has built-in code runner + debugger + editor (e.g. PyCharm). VS Code is a text editor/code editor (with extensions it can approximate an IDE).
• Debugging: The process of finding and fixing errors ("bugs") in code. Loop: Run → Debug → Fix → Run again.
• Software is written iteratively: Write a little → Test → Fix → Write more.

Data Types

💡 In Python, you do not need to declare the type – Python infers it automatically (dynamically typed).

Variables

• A variable is a named container for storing a value in memory
• Use = for assignment (not mathematical equality)
• Double == is used for comparison
• Python syntax: variable_name = value (no type declaration needed)

ASCII Values (Homework Task)

• Every character has a numeric ASCII value stored in memory
• Example: Capital A = 65, small a = 97
• Task assigned: Fill in character values from an ASCII table (solution covered next session)

---

6. Python Setup Guide

Installation (Windows)

1. Go to python.org and download the standalone installer (not MSIX)
2. Run installer → select "Add python.exe to PATH" before clicking Install Now
3. If Windows Defender blocks it, click More Info → Run Anyway
4. Verify install: open Command Prompt/PowerShell → type python → press Enter

Common Issue: Python Not Recognised

• Likely cause: Python not added to PATH, or Microsoft App Execution Alias is interfering
• Fix for App Execution Alias conflict:
  1. Go to Settings → Apps → App Execution Aliases
  2. Find python.exe and turn both Python aliases OFF
  3. Reopen terminal and try again
• Manual PATH fix (if needed):
  1. Find Python install folder in File Explorer
  2. Copy the path (e.g. C:\Users\<name>\AppData\Local\Programs\Python\Python310)
  3. Search Windows for "Environment Variables" → Edit User Variable Path → click New → paste path → OK

VS Code Setup

1. Download from code.visualstudio.com
2. Open VS Code → File → Add Folder to Workspace (create a Python folder to store all code)
3. Go to Extensions (sidebar icon) → search Python → install the first result (Microsoft)
4. Create a new file: right-click folder → New File → name it hello.py
5. Write: print("Hello, Python")
6. Save with Ctrl+S
7. Open terminal: Terminal → New Terminal → type python hello.py → Enter

Instructor's Advice on Using AI While Learning

"Don't ask AI to write the full solution. Use AI to understand syntax, then write the code yourself."

• Ask AI: "How do I compare two numbers in Python?" ✅
• Don't ask AI: "Write me code to find the bigger number" ❌
• Reading AI-generated code ≠ understanding it
• Writing code yourself builds real skill and prepares you for roles that require problem-solving without AI

"Junior Developer Paradox" (instructor's concept):

Junior developers who rely too heavily on AI to match senior productivity will never develop the deep understanding of internal architecture that defines a senior developer. Use AI as a learning aid, not a solution machine.

---

CLF-C02 Exam Relevance Summary

The following topics from today's lecture map directly to the AWS Certified Cloud Practitioner (CLF-C02) exam:

📚 Recommended study resource: AWS Skill Builder | AWS Artifact | AWS Whitepapers on Security & Compliance

---

Notes compiled from lecture – May 11, 2026.

Next session: Python basics continuation + lab exercises.