Welcome to your interview.
The question is on your right: Threat Model Acquired Infrastructure. Take a moment with it first.
Talk your thinking through with me if you like - when you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes). Discussion and graded submissions share your five interviewer interactions, so spend them well.
You've been asked to assess the security posture of a newly acquired company's infrastructure before deeper integration work begins. The environment likely spans multiple AWS accounts, legacy identity systems, third-party SaaS, and undocumented data flows, and you need to create a practical threat model that can guide near-term risk reduction without blocking the acquisition timeline.
Walk me through the steps you would take to threat model a newly acquired company's infrastructure.