SECURITY

Category: 10. Cloud / DevOps / Platform
Section: Phase 3: Execution & Quality

12. SECURITY.md

Purpose: To define IAM, secrets management, network security, and compliance.

Act as a cloud security engineer.
Using the System Architecture and Infrastructure Spec below, create a Security document for a DevOps hackathon project.

ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]
INFRASTRUCTURE_SPEC: [PASTE INFRASTRUCTURE_SPEC]

Provide:
1. Identity and Access Management (IAM roles, Least privilege, MFA)
2. Secrets management (Vault, AWS Secrets Manager, GitHub Secrets)
3. Network security (VPC, Security Groups, Firewalls, Private subnets)
4. Container security (Image scanning, Non-root user, Read-only FS)
5. Supply chain security (Dependency scanning, SBOM)
6. Encryption (At rest, In transit, Key management)
7. Compliance considerations (GDPR, SOC 2, HIPAA)
8. Audit logging (CloudTrail, Cloud Audit Logs)
9. Incident response integration
10. A pre-submission security checklist

Keep the security measures practical and easy to implement within a hackathon timeframe.
Explain each concept in beginner-friendly language.
Never commit secrets to Git.