thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

Data Perimeter

Set of preventive guardrails ensuring only trusted identities access trusted resources from expected networks.

Definition

An AWS data perimeter combines SCPs, RCPs, resource-based policies and VPC endpoint policies with condition keys such as aws:PrincipalOrgID, aws:ResourceOrgID and aws:SourceVpce. It mitigates data exfiltration through unintended access paths.

Example

A VPC endpoint policy only allows access to S3 buckets owned by the organization, blocking uploads to personal buckets.

Exam tip

Data perimeter questions combine identity, resource and network conditions; VPC endpoint policies address the network dimension.

Related terms