What is AWS Config, and what are its proactive vs detective evaluation modes?

Into which three perimeter categories do AWS services fall, by their relationship to your VPC?

What is Amazon Macie, and how does it help protect SAP-related data privacy?

How can you query the compliance status of specific SAP resources beyond the AWS Config dashboard?

What are the native ways to encrypt SAP data at rest on AWS?

Which access protocols can serve as the identity federator (IdF) in SAP SSO, and with which products?

Why can't you secure customer-facing SAP applications with SGs/NACLs alone, and what do you use instead?