Reviewed by Aditya Kumar · Last reviewed 2026-03-24
Control plane = resource management (create, delete, configure). Auth: MFA; minimal service accounts. Authorization: IAM least privilege; no broad admin. Audit: CloudTrail, immutable logs. Network: Private endpoints, VPC. Secrets: Rotate; secrets manager. Compliance: Encryption,...
Control plane = resource management (create, delete, configure). Auth: MFA; minimal service accounts. Authorization: IAM least privilege; no broad admin. Audit: CloudTrail, immutable logs. Network: Private endpoints, VPC. Secrets: Rotate; secrets manager. Compliance: Encryption, retention. For EMR/Glue: Limit cluster create/delete; permission boundaries. Separate dev/prod; IaC for audit.
Red Flag: 'We use IAM.' Pro-Move: 'MFA for console; scoped roles; CloudTrail for all API; we use Terraform so all changes are audited.'
According to DataEngPrep.tech, this is one of the most frequently asked General/Other interview questions, reported at 1 company. DataEngPrep.tech maintains an editor-reviewed database of 1,863 data engineering interview questions across 7 categories.