application security architecture , OpenID Connect (OIDC), Service Control Policies (SCPs), API security, Jwt, Kms, Iam, VPC security, AWS security, secure software development, Security Hub, OAuth 2.0, CI/CD pipelines, GuardDuty, threat modelling, authentication and authorization, CloudTrail, secure code reviews