https://zhenye-na.github.io//aws-certs-cheatsheet/posts/security-and-encryption/