CY0-001: CompTIA SecAI+

IAM and resource policies govern identities and access to cloud resources. Prompt-injection controls belong at the prompt firewall, with output monitoring observing generated responses. A WAF validates incoming requests and enforces rate limits. Front-end API guardrails and quotas constrain AI use, while the API gateway validates caller tokens and distributes traffic across available backends. Prompt shields are a recognized protection against adversarial prompt inputs, and API gateways commonly provide request throttling controls.