HTTPS, WAF, private subnets for DB, managed identity, least privilege IAM, rate limits. ShopNest DB has no public IP.
EY rounds often probe: Client scenarios.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.