Exam Therapy — Infrastructure Security: WAF vs Shield, and the Security Group Mind Game (SCS-C03)

Andrew and Ava unpack two classic AWS Security Specialty traps: where AWS WAF actually works (edge vs regional) and what Security Groups can’t do (deny, ordering, subnet-level magic). Plus: exam keyword tells, misdirection, and a tiny bit of emotional damage recovery.