https://aws.org.im/面向 API 应用的凭证与数据边界https://aws.org.im/guides/credential-rotation-drill/https://aws.org.im/guides/credential-rotation-drill/从使用清单到撤销验证，减少替换凭证时的遗漏与暴露。https://aws.org.im/guides/prompt-data-minimization/https://aws.org.im/guides/prompt-data-minimization/通过字段清单、样本替换和保留规则控制不必要的数据流动。https://aws.org.im/guides/untrusted-content-tool-boundaries/https://aws.org.im/guides/untrusted-content-tool-boundaries/让外部文本只能提供信息，不能悄悄获得发邮件、改文件或访问内部系统的权限。