Ship an AWS Security Quiz App

Build a no-code AWS Security quiz app using Amazon Quick Apps.

Introduction

30 Second Summary

You have already used a flow to quiz yourself on AWS Security content. But a flow is your personal workspace — steps, @references, an editor you navigate. What if you could package that same logic into a clean screen that anyone can open, press a button, and get a result?

In this project, you will build a no-code AWS Security quiz app using Amazon Quick Apps and conversational authoring. You will connect it to a Space as its knowledge base, polish the interface, and prove it works by handing it to a real person.

What You'll Build

A user opens your link, asks for a practice question about any AWS Security domain, submits their answer, and gets an explanation of why they were right or wrong. All powered by the Space you built, with zero coaching required.

By the end of this project, you'll have:

A working quiz interface where users request questions and get immediate, grounded responses from your AWS Security content.
A Space connection that transforms generic AI into your specific exam coach, pulling answers from your actual study material.
A polished UX with plain-language labels and a shareable link that passes the stranger test.
Secret Mission: Add persistent score tracking and a leaderboard so users can compete.

Are there any prerequisites?

You need an Amazon Quick Free account (sign up at aws.com/quick). No AWS account or credit card is required.

Ideally, you already have a Space with AWS Security exam content from a prior session. If you do not have one yet, the project includes instructions to create one in Step 3.

Before We Start

Before we start building, let's lock in what you're about to create and who it's for.

Think of one specific person in your life who would benefit from being able to practice AWS Security questions without needing to understand flows, spaces, or editors.

Set Up Your Amazon Quick Account

Before you build anything, you need an Amazon Quick Free account with the Apps feature accessible. This step confirms your account is ready and orients you to where apps live in the interface.

The Free tier includes apps, flows, and spaces at no cost. No AWS account or credit card is needed to get started.

In this step, get ready to:

Sign in to your Amazon Quick Free account.
Confirm the Apps (Preview) feature is visible in the navigation.
Create your AWS Security Space and upload exam content.
Open the Apps landing page and confirm the prompt area is ready.

Sign in to Amazon Quick

Open your browser and navigate to aws.com/quick.
Choose Sign up if you do not have an account yet, or Sign in if you already have one.
Use your email or social credentials (Google, Apple, GitHub, or Amazon) to complete sign-in.

Do I need an AWS account?

No. Amazon Quick Free is a standalone product. You sign up with a regular email or social login. No credit card, no AWS Management Console account required.

Open the Apps landing page

Once you are signed in, you will see a navigation pane on the left side of the screen. This is where all of Amazon Quick's features live.

In the navigation pane, choose Apps.
If you see a Preview badge next to Apps, that is expected and normal.

The Apps landing page opens. You should see a prompt area at the top of the page where you will describe the app you want to build.

You may also see rotating example prompts below the prompt area suggesting different app ideas.

Don't see Apps in the navigation?

Make sure you are signed in to the web version of Amazon Quick at aws.com/quick, not the desktop app. Apps is a web-only feature.

If you still do not see it, try refreshing the page. The Apps feature is available on all Free tier accounts.

Help me find the Apps feature in Amazon Quick.

Create your AWS Security Practice Exam in Space

A Space is where Amazon Quick stores your documents and data. When you connect a Space to an app later, the app grounds its responses in YOUR content instead of general AI knowledge.

You will create a Space now and upload an AWS Security exam content file so it is ready to power your quiz app.

In the left navigation pane, choose Spaces.
Choose Create Space.
Give your Space a name like AWS Security exam practice.
Choose Create.

Your Space is now created. Next, you will upload your AWS Security exam content into it.

Download the AWS Security exam content file below:

AWS_Cloud_Practitioner_Security_Mock_Exam.docx

In your Space, choose Add content or drag and drop the file you just downloaded.
Wait for the file to finish uploading. You should see it listed in your Space with a status of Ready or a checkmark.

What is this file?

This file contains AWS Security exam content covering the five domains: incident response, logging and monitoring, infrastructure security, identity and access management, and data protection. Your quiz app will use this content to generate grounded practice questions.

🙋‍♀️ File not uploading?

Make sure the file is not open in another application. If the upload seems stuck, refresh the page and try again.

Help me upload a file to my Amazon Quick Space

Your account is ready, your Space is loaded with AWS Security content, and the Apps landing page is waiting for instructions. Next up, you will describe your quiz app in that prompt area and watch it come to life in real time.

Build the App Shell

Your Amazon Quick account is ready and the Apps landing page is open. Now it is time to build your first app by describing it in plain language.

The agent will generate a working quiz interface in seconds. But without your specific AWS Security content connected, the questions it produces will be generic guesses from general AI knowledge.

Amazon Quick has two ways to build. Flows let you chain AI-powered steps together inside an editor, using @references to connect your data sources.

I used a flow to create my own AWS certification exam. It works, but it lives inside the editor — steps, @references, configuration screens that only I can navigate.

Apps flip that around. Your teammate sees a box, a button, and a result. That is what shipping means. The kitchen is still doing all the work, but now there is a dining room.

In this step, get ready to:

Describe your quiz app using natural language in the prompt area.
Watch the agent generate a working preview in real time.
Test the app and identify the gap between generic AI and grounded content.

Describe your quiz app

Amazon Quick Apps uses conversational authoring. You describe what you want in everyday language, and the agent builds it for you.

In the prompt area at the top of the Apps landing page, type the following description of your quiz app:

Build an AWS Security certification practice quiz app. It should have a clean single screen where a user can request a practice question about AWS Security, see the question with multiple choice options, select their answer, and get told whether they are right or wrong with a brief explanation. Keep it simple: one question at a time, one screen.

What does this prompt tell the agent?

You are describing the app as if explaining it to a colleague. The prompt covers three things:

What the app does (serves quiz questions).
How it presents them (one at a time with multiple choice options).
What the user gets back (right or wrong with an explanation).

Choose Generate.

A permissions dialog appears. The app needs access to AI Inference to generate quiz questions on your behalf.

Select Allow on this app.
Click Continue.

The two-panel editor appears. The preview panel on one side shows your app being built in real time, and the chat panel on the other side is where you will converse with the agent to refine your app.

Click the Settings icon in the top right corner of the editor.

The Overview page shows your app's identity: its name, App ID, creation date, description, and a Delete app option at the bottom.

App not generating?

Make sure you typed your description in the prompt area at the top of the page, not in a search bar or another field.
If generation seems stuck, refresh the page and try choosing Generate again.
Help me troubleshoot my Amazon Quick app generation

Test the preview and feel the gap

The app looks ready. Before you interact with it, think about this: where will the quiz questions come from? The app has no study material loaded. No exam content. No documents.

Once generation completes, find the button in the preview panel that requests a practice question.
Before you press it, predict: will these questions reference your specific AWS Security exam domains, or will they be generic?
Press the button to get your first question.

A question appears with multiple choice options. Read it carefully.

The questions come from the AI's general knowledge. They have no connection to your specific AWS Security exam material. They might be roughly correct, but they are not grounded in the real content you studied.

Why does this matter?

This app is a dining room with no kitchen behind it. It looks ready to serve, but it has no real ingredients. The interface works. The interaction flow works. But the output is not grounded in YOUR content.

In the next step, you will connect your AWS Security Space as the knowledge base. That is the kitchen. It transforms this generic shell into a grounded exam coach.

You now have a working quiz interface in the preview panel. You can press a button and get a question back. The interaction works, but the content is generic. That gap is exactly what the next step closes.

Your app shell is live. Next up, you will connect your AWS Security Space as the engine behind this screen and watch generic guesses transform into grounded exam questions.

Connect the Engine

Your quiz app looks great. Users can press a button, get a question, and see an explanation. But right now, those questions come from the AI's general knowledge, not from your specific AWS Security exam content.

In this step, you will connect your Amazon Quick Space as a knowledge base. This transforms the app from a generic quiz into a grounded exam coach that serves YOUR content.

In this step, get ready to:

Connect your Quick Space as the app's knowledge base.
Verify the connection appears in your app settings.
Test that quiz questions now reference specific AWS Security exam domains.

Connect your Space as a knowledge base

When you connect a Space to your app, the app creates its own agent instance that answers questions based on the documents and data in that Space. This is what grounds the output in your actual content instead of general AI knowledge.

You already created your AWS Security Space and uploaded exam content in Step 1. That Space is ready to connect now.

Now you will tell the app agent to connect your Space. The agent will ask you to authorize the connection when it finds your Space.

In the chat panel, type the following instruction and press Enter:

Connect my AWS Security exam practice space as a knowledge base for this app. Ground all quiz questions in the content from that space instead of general knowledge. At the same time, ensure that the content will be integrated properly to prevent unexpected responses.

When the agent prompts you to authorize the Space connection, choose Allow or confirm the authorization.

What just happened?

The app created its own agent instance backed by your Space. All quiz questions will now be answered based on the documents and data in that Space, not from the AI's general training.

Think of it as plugging in the kitchen behind the dining room. The front of the app looks the same, but the source of its answers has completely changed.

🙋‍♀️ Space not appearing in the connection prompt?

Make sure you created the Space in the same Amazon Quick account you are using to build the app. If you just created the Space, give it a moment to finish processing your uploaded content before trying again.

Help me connect my Space to my Amazon Quick app

Verify the connection in app settings

A successful connection should be visible in your app's configuration. You will confirm it shows up in the right place.

Choose the settings icon (gear icon) in the app editor to open your app settings.
Choose the Assets tab.
Confirm your AWS Security Space is listed with a type of AI or Knowledge.

You should see your Space name in the Assets list. This confirms the connection is active and your app will pull content from it.

Don't see your Space in Assets?

Close the settings panel and try the connection instruction again in the chat panel. Make sure the agent confirms the connection was successful before checking Assets.

Help me verify my Space connection in app settings

Test the grounded output

The connection is in place. Now you will run the app again and see whether the output has actually changed.

Before you test, think about this: in Step 2, your app gave generic security questions from the AI's general knowledge. What do you expect to see now that your Space is connected?

In the preview panel, interact with your app by pressing the button to request a question.
Read the question that appears. Look for references to specific AWS Security exam domains: incident response, logging and monitoring, infrastructure security, identity and access management, or data protection.
Request 2-3 more questions to confirm the pattern. Each question should feel like a realistic exam question grounded in your uploaded content.

Errors are part of the process

When you're building and iterating on an app, you will run into errors. A question might fail to generate, the app might return an unexpected response, or something might just not look right. This is completely normal.

Building an app is rarely a straight line from start to finish. You try something, it breaks, you adjust, and you try again. That loop is not a sign you're doing it wrong. It's how real development works. Give it another go.

The difference should be obvious. Questions now reference specific domains and content from your Space instead of vague, general security topics.

Why does grounding matter?

Without the Space, the app uses built-in AI inference. It can generate plausible-sounding questions, but they are not tied to the actual AWS Security Specialty exam content.

With the Space connected, every response is grounded in the documents you uploaded. The app becomes an exam coach that knows exactly what you need to study.

🙋‍♀️ Questions still seem generic?

Check that your Space contains enough content. If you only uploaded a few sentences, the agent may fall back to general knowledge. Upload more AWS Security exam material (practice questions, domain descriptions, study notes) and test again.

Help me get grounded quiz questions from my Space

Your app now has the engine behind it. The dining room is connected to the kitchen. Next up, you will polish the experience so that a complete stranger can use this app without any coaching from you.

Polish the UX and Run the Stranger Test

Your app is connected to the engine. It pulls real AWS Security content from your Space and serves grounded exam-style questions.

But a working app is not a shipped app. The gap between "it works for me" and "anyone can use this" is where real product thinking lives. In this step, you close that gap and prove it with a real person.

In this step, get ready to:

Clean up labels and remove clutter so the interface speaks plain language.
Frame the output with headings so responses are scannable.
Publish the app and run the stranger test with a real person.

Clean the labels and cut the clutter

Labels that made sense while you were building might confuse someone seeing the app cold. Technical jargon, extra buttons, and empty input fields with no guidance all create hesitation.

In the chat panel on the right side of the editor, type the following instruction and press Enter:

Rename any technical labels to plain language. Remove anything the user does not strictly need. Add a short placeholder or example in the input field so the user knows what to type, like 'Ask for a question about any AWS Security domain.'

What does this instruction do?

You are using conversational authoring to refine your app. The agent reads your plain-language request and modifies the app's interface in real time.

The placeholder text in the input field is critical. Without it, a new user stares at an empty box and wonders what to type. With it, they immediately know the app expects a question about AWS Security domains.

Watch the preview panel update as the agent applies your changes.
Check that the input field now shows a placeholder like "Ask for a question about any AWS Security domain" in grey text.
Confirm that any technical labels or unnecessary elements have been simplified or removed.

Preview not updating?

The editor uses a WebSocket for real-time streaming. If the preview is not updating, check your internet connection. An unstable connection can cause prompts to fail silently.

If the agent seems stuck, try rephrasing your instruction more specifically. For example, ask it to change one label at a time.

help me debug why the chat panel agent is not responding to my instructions

Frame the output for readability

When the app returns a quiz question and explanation, it can appear as a wall of text. Adding simple headings makes the output scannable at a glance.

In the chat panel, type the following instruction and press Enter:

Add a brief heading above the quiz response so it does not appear as a wall of text. Something like 'Your Question' above the question and 'Result' above the explanation.

Why frame the output?

Framing transforms a blob of text into two distinct sections the user can scan. "Your Question" tells them what to read. "Result" tells them whether they got it right. This small structural change makes the app feel polished instead of raw.

In the preview panel, press the button to request a question.
Confirm you see a "Your Question" heading above the question text and a "Result" heading above the explanation.

Your app now has clean labels, a helpful placeholder, and framed output. Ask yourself: would someone who has never seen this know what to do?

Headings not appearing?

If the agent added the headings but they do not show in the response area, try requesting a new question. The headings only appear once the app generates a response.

If the headings still do not appear, instruct the agent more explicitly: "Add an H3 element with text 'Your Question' above where the question displays, and an H3 with text 'Result' above the explanation area."

help me get the output headings to display correctly in my quiz app

Share, publish, and run the stranger test

The ultimate proof that your app works is not whether YOU can use it. It is whether someone who has never seen it can walk up, use it, and get value without a single word of coaching from you.

What is the stranger test?

The stranger test is simple: hand your app to someone who did not build it. Give them zero instructions. Watch silently. If they hesitate anywhere, that hesitation is your to-do list.

Passing the stranger test means a real person opened the link, requested a question, answered it, and saw the explanation without any coaching from you.

💡 Why Account level instead of Public?

Your app uses an Amazon Quick Space as its knowledge base. Public apps cannot use Spaces. Setting the access level to Account means everyone in your Amazon Quick account can access the app while keeping the Space connection active.

Choose Share to open the sharing controls.
Set the access level to Account.
Choose Publish.
Choose Copy link to copy the published URL.

What happens when you publish?

Publishing creates a snapshot of your current app. You can continue editing after publishing. Changes do not affect the published version until you publish again.

💡 Is my app safe to share?

Your app is set to Account access, which means only people signed into your Amazon Quick account can open it. The link requires authentication. No anonymous viewer, no search engine crawler, and no Google dorking technique can reach it.

Behind the scenes, Amazon Quick is built on Amazon Bedrock and inherits its safety, security, and responsible AI controls. The AWS Responsible AI Policy prohibits using AI services for disinformation, privacy violations, and harmful content. AWS also commits to never using your data to improve models for others. Your data stays yours.

If you ever need to revoke access, change the access level back to Limited in the Share dialog. The link stops working immediately.

Now it is time to run the stranger test. Before you hand the link over, predict: will your tester know what to do without any help from you?

Find someone nearby who did not build the app. A colleague, a friend, or anyone with an Amazon Quick Free account in your organization.
Send them the link you just copied. Say nothing else.
Watch them silently. Do not coach, hint, or point.
Observe whether they successfully request a question, answer it, and see the explanation on their own.

If they hesitate at any point, that hesitation is a UX fix you can make right now.

If your tester stumbled on something, return to the chat panel and fix one thing they hesitated on. For example, if they did not notice the input field, ask the agent to make it more prominent.
If they hesitated, choose Publish again to push the fix live.

Can't find someone to test with?

If you are working solo, send the link to yourself in a different browser where you are signed into the same Amazon Quick account. Try to use the app as if seeing it for the first time. Note any moment where you had to remember how it works instead of the interface telling you.

The stranger test is most powerful with a real other person, but a fresh-eyes pass in a new browser still catches obvious friction.

help me think of ways to test my app's usability when I do not have someone nearby

If your tester opened the link, requested a question, answered it, and saw the explanation without coaching from you, your app passes the stranger test. You just shipped a real product.

Up next, the Secret Mission challenges you to add score tracking and a leaderboard so users can compete.

Secret mission

Add a Customizable Countdown Timer

A quiz with no time pressure is just a reading exercise. In this extension, you'll add a countdown timer that creates urgency and let users choose how long they get per question. No external tools required.

Clean Up Your Resources

This project runs entirely on Amazon Quick's Free tier, so there are no ongoing costs. Decide whether to keep your app published, unpublish it for later, or delete it entirely.

Resources you used:

AWS Security Quiz App (hosted by Amazon Quick, no cost).
Space connection linking your AWS Security Space to the app (no cost).
Built-in app storage holding scores and leaderboard data (no cost).

Keep everything running

No action needed. Choose this if you want your app to stay published and accessible to anyone in your Amazon Quick account.

Your quiz app remains live at its published URL.
The Space connection stays active, keeping quiz questions grounded in your AWS Security content.
Scores and leaderboard data persist in built-in shared storage.
Your Amazon Quick Free account persists indefinitely at no cost.

Pause - I'll come back to this later

Unpublish the app so it is no longer accessible to others. The app remains in your account for you to re-publish later.

In the app editor, choose Share to open the sharing controls.
Remove the Account access level. This reverts the app to Limited access, meaning only you can see it.
Your app, Space connection, and stored scores all remain intact. You can re-publish at any time by setting the access level back to Account.

Delete - I don't want to use this again

Remove the app and all associated data permanently.

Open your app in the editor, then choose the settings icon to open app settings.
On the Overview tab, choose Delete to remove the app entirely.
This removes the app, its Space connection, and all built-in storage data (scores and leaderboard). Your Space itself is not deleted.

What about my Space?

Deleting the app only removes the connection to your Space. The Space itself and all its AWS Security content remain in your Amazon Quick account. You can connect it to a new app at any time.

That's a Wrap!

Nice work. You just shipped a fully functional AWS Security quiz app using nothing but natural language and Amazon Quick Apps.

You've learned how to:

Built a no-code app using conversational authoring in Amazon Quick Apps (Preview), going from a plain-language description to a working quiz interface.
Connected a Space as a knowledge base to ground the app's output in real AWS Security exam content, transforming generic AI into a specific exam coach.
Polished the UX with plain-language labels and framed output, then proved the app passes the stranger test with a real person using it without coaching.
Secret Mission: Added persistent score tracking and a ranked leaderboard using built-in shared storage, turning the quiz into a competitive experience for multiple users.

Ready to quiz yourself?