This course covers the Data Security and Governance portion of the AWS Certified Data Engineer - Associate exam. This exam domain makes up 18% of the total scoring on the certification exam. Starting with foundational concepts around Identity and Access Management, we will systematically peel back the many layers of security that are available for data store management on AWS. We will cover networking concepts for connecting to private data stores in your VPC, as well as connecting to services such as S3 from private compute instances. We will also overview database authentication options on AWS. By the end of this course, you should understand the basics of data encryption on AWS, and you should be familiar with the encryption options that AWS provides for various data services. Another challenge we will address for data administrators on AWS is protecting PII across many accounts and many roles accessing your data stores. We will explore how to define super fine-grained custom permissions for data stored in your enterprise data warehouse or data lake on AWS. Finally, we will go over logging and monitoring of your data resources on AWS. Not only do we need to understand how to proactively secure our data sources, we also need to have the ability to react to actions and security events. Once you've completed this course, you should have the foundation you need to understand data security and governance in the context of the Data Engineer - Associate Exam.