AWS Certified Security Specialty
Master AWS cloud security, including identity management, threat detection, data protection, encryption, and incident response, while preparing for the AWS Certified Security Specialty certification.
About this course
Develop advanced cloud security skills with Amazon Web Services (AWS) in this comprehensive course designed to prepare you for the AWS Certified Security – Specialty (SCS-C03) exam. Explore the principles and practices of securing cloud infrastructure, applications, and sensitive data in AWS environments. Learn how to identify security threats, implement protective controls, respond to incidents, and maintain secure and compliant cloud architectures. Discover how to manage authentication, authorization, and access permissions using AWS Identity and Access Management (IAM), IAM Identity Center, and AWS Organizations. Understand how to apply least-privilege access, manage roles and policies, and secure multi-account AWS environments. Learn to detect, investigate, and respond to security threats using Amazon GuardDuty, Amazon Inspector, AWS Security Hub, Amazon Detective, AWS CloudTrail, and Amazon CloudWatch. Explore security monitoring, automated incident response, vulnerability management, and forensic investigation techniques. You'll also learn how to protect data using AWS Key Management Service (KMS), AWS Secrets Manager, encryption, and secure storage configurations. Explore network security using Amazon VPC, security groups, network ACLs, AWS WAF, and AWS Shield to protect cloud workloads against unauthorized access and attacks. Understand security governance, compliance frameworks, security policies, infrastructure protection, and disaster recovery controls. Develop the ability to evaluate security risks, troubleshoot misconfigurations, and implement effective security solutions across AWS environments. Through short, focused lessons, visual explanations, realistic security scenarios, and interactive challenges, you'll reinforce advanced concepts, test your knowledge, and build confidence in making security decisions. Whether you're a cloud security engineer, cybersecurity professional, solutions architect, or experienced AWS practitioner, this course will help you deepen your cloud security expertise and prepare for the AWS Certified Security – Specialty certification.
What you will learn
Identity and Access Management
- IAM Identities, Policies, and Evaluation LogicFree
- IAM Permissions Boundaries and Delegation ControlsFree
- Role-Based and Attribute-Based Access ControlFree
- AWS Security Token Service and Identity FederationFree
- Active Directory Integration and Enterprise SSOFree
- Amazon Cognito Authentication and AuthorizationFree
- Fine-Grained Authorization and Policy AnalysisFree
Infrastructure and Network Security
- VPC Perimeters, Security Groups, and NACLsFree
- Network Traffic Inspection and Reachability AnalysisFree
- Perimeter Defense with AWS WAF, AWS Shield, and Firewall ManagerFree
- AWS Network Firewall and Host-Based DefenseFree
- Hybrid Network Connectivity and Zero-Trust Remote AccessFree
- Compute Workload Hardening: EC2, ECR, and ContainersFree
- Kubernetes and Big Data Analytics SecurityFree
- Edge Protection and Serverless Application SecurityFree
Data Protection and Cryptography
- AWS KMS Architecture and Cryptographic OperationsFree
- KMS Key Policies, Grants, and Encryption ContextFree
- Key Material Management, Key Rotation, and CloudHSMFree
- Certificate Management with ACM and AWS Private CAFree
- Data in Transit and Inter-Resource Transport EncryptionFree
- Data at Rest Protection: S3, EBS, and DynamoDBFree
- Secrets Management and Dynamic Credential StorageFree
- Sensitive Data Discovery and Data MaskingFree
- Secure Backup, Replication, and Ransomware ProtectionFree
Logging, Monitoring, and Threat Detection
- Centralized Auditing with CloudTrail and CloudTrail Lake
- Metric Filtering, Alarms, and Dashboards with CloudWatch and Grafana
- Intelligent Threat Detection with Amazon GuardDuty
- Continuous Vulnerability Management with Amazon Inspector
- Security Analytics and Finding Aggregation
Incident Response, Remediation, and System Resilience
- Automated Security Event Response and Orchestration
- Forensic Artifact Acquisition and Impact Assessment
- Systems Manager Operations and Configuration State Enforcement
- Chaos Engineering, Application Resilience, and Operational Health
Governance, Compliance, and Emerging Technologies
- Multi-Account Governance with AWS Organizations and Control Tower
- Organizational Guardrails: SCPs, RCPs, and Declarative Policies
- Continuous Compliance, Policy-as-Code, and Audit Management
- AWS Well-Architected Framework: Security Pillar
- IoT Security Architecture and Fleet Defense
- Generative AI Security and Developer Tool Guardrails
- Amazon OpenSearch Service Security and Log Analytics