Your question is Prevent Common Web App Vulnerabilities. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
What are the most prevalent vulnerabilities in modern web applications, and how do you prevent them at scale at Amazon?
Address the question as a practical security engineering design discussion. Prioritize vulnerabilities such as injection, broken access control, authentication failures, security misconfiguration, vulnerable dependencies, SSRF, and insufficient logging. Explain preventive controls, deployment gates, monitoring, and incident response using AWS technologies where appropriate.