Security Engineer signal: bitmask DP + state compression in a authorization policy engine context. This is a ProdMatch-owned security engineer drill, framed as a April 2026 Amazon Identity simulation, not a copied platform question.
Company context
Amazon · Identity
Freshness
April 2026
Product surface
authorization policy engine
ProdMatch interview simulation based on product-team patterns; not a claim of a real company question.
For authorization policy engine, each rules requires a subset of capabilities. Choose the smallest team of services covering all required capabilities; tie-break by lowest total risk.
Input
Output
Constraints
Concepts
required={A,B,C}, services=[AB risk 4, C risk 1] -> count=2, risk=5
Try framing your own approach first. The 30 seconds you think before peeking is where learning happens.
Reveal the approach first.
Your rating tunes when this problem shows up again.