AWS Certified Security Specialty (SCS-C02)

Categories: AWSPearson Skilling Suite

Security is a foundational aspect of cloud computing, and mastering it is essential for every AWS customer. Whether safeguarding sensitive data, ensuring compliance, or protecting against evolving threats, the knowledge covered in this certification is indispensable. This course targets the SCS-C02 version of the exam and provides a structured, comprehensive study path that aligns with the exam objectives while offering practical, real-world insights.

The goal of the course is to provide all the tools needed to pass the exam, including text explanations, video demos, lab activities, self-assessment questions, and a practice exam, to increase the chances of passing on the first try and earning the AWS Certified Security – Specialty certification.

Learning Outcomes:

Describe how to detect threats and the appropriate incident response
Explain security logging and monitoring
Design and implement infrastructure security concepts
Troubleshoot identity and access management issues
Describe how to protect data
Explain management and security governance

Optional Add-On Exam Voucher

Lesson 1: Threat Detection and Incident Response

Design and Implement an Incident Response Plan: incident response in AWS; preparation; deployment of security services; centralizing security management
Detect and Respond to Security Incidents: detection and analysis; categorizing and alerting on security incidents; containment, eradication, and recovery strategies; post-incident activities

Lesson 2: Security Logging and Monitoring

Security Monitoring and Troubleshooting: monitoring/alerting with CloudWatch Alarms; EventBridge Rules for event-driven pipelines; automating security alerts
Security Logging and Log Analysis: security logging in AWS; event/log-driven pipelines; permissions for log delivery; troubleshooting CloudTrail in multi-account environments; analyzing security logs

Lesson 3: Infrastructure Security

Design and Implement Edge and Network Security: network security at the edge; VPC security; encrypting data in transit; AWS Network Firewall
Compute Security and Security Troubleshooting: managing EC2 vulnerabilities; securing secrets and credentials for compute resources; troubleshooting connectivity

Lesson 4: Identity and Access Management

Design, Implement and Troubleshoot Authentication: identity management principles; temporary credentials; federating identities with Amazon Cognito; machine identities; secrets management; centralized identity providers; credential rotation
Design, Implement, and Troubleshoot Authorization: AWS policies; Well-Architected Framework security pillar; least privilege; emergency access processes; permission guardrails; lifecycle-based access; cross-account access; secure resource sharing

Lesson 5: Data Protection

In-transit Data Protection: goals of data encryption; network encryption; cross-region protection; ACM; Private CA; enforcing encryption in transit
At-rest Data Protection: protecting data at rest; symmetric encryption; AWS KMS and key types; S3 encryption and CloudHSM
Data Lifecycle, Credential, and Secret Management: data retention strategies; AWS Backup; asymmetric key encryption; managing/rotating credentials and secrets; Secrets Manager vs. SSM Parameter Store

Lesson 6: Management and Security Governance

AWS Resource Governance: AWS Organizations; Control Tower and Account Factory; Resource Groups; Tag Policies; Firewall Manager
AWS Security Compliance: Amazon Macie; Config, CloudWatch Logs, and Security Hub; Audit Manager; Well-Architected Framework; cost analysis and anomalies

Suitable for

IT professionals interested in cloud computing and want to increase their security skills
IT professionals in charge of securing data and workloads in the AWS cloud

Pre-requisite

Recommended 5 years of IT security experience in designing and implementing security solutions
At least 2 years of hands-on experience in securing AWS workloads
A working knowledge of AWS security

Duration

Certificate

AWS Certified Security – Specialty

Governing Body

Amazon Web Services (AWS)

Examination Body

Pearson VUE

SKILLING SUITE FEATURES

In-Demand And Up To Date Courseware

Choose from over 60 titles of engaging and in-demand content from leading industry authors. All courseware aligns with the latest exam requirements and is continuously updated and improved.

Live Contextualised Labs

Improve the experience by offering a handson, live environment where learners can test their knowledge and practice new skills.

Practice Tests And Exam Pass Pledge

Help learners increase their certification readiness with practice tests designed to improve pass rates. If needed, our Exam Pass Pledge means you can give learners a free retake within 30 days of passing their last practice test.