Answer: Threat detection

## Explanation The correct answer is **Threat detection** because: - **Threat detection** in the AWS CAF security perspective focuses on identifying security misconfigurations, vulnerabilities, and unexpected behaviors through continuous monitoring and analysis - This capability helps organizations understand their security posture and prioritize protective controls based on detected threats - It enables proactive identification of security issues before they can be exploited **Why other options are incorrect:** - **Identity and access management**: Focuses on authentication, authorization, and access control, not specifically on identifying misconfigurations - **Platform engineering**: Deals with building secure infrastructure foundations, not threat identification - **Availability and continuity management**: Focuses on business continuity and disaster recovery, not security threat detection Threat detection capabilities in AWS CAF include using services like AWS GuardDuty, AWS Security Hub, and AWS Config to continuously monitor for security issues and misconfigurations.

Author: Ritesh Yadav