AWS Certified Security - Specialty (Legacy)
Prepare for the SCS-C02 exam and validate your expertise in securing AWS workloads and environments.
Spend your points to unlock exam-style practice questions
Use your points to unlock SCS-C02 exam-style practice questions — up to 20 free to try right now.
Practice for SCS-C02Course Content
6 modules · 79 lessons
Module 1: Threat Detection and Incident Response
Design and implement threat detection strategies, incident response plans, and security automation. (14% of exam)
Incident Response Planning
Design and implement AWS incident response processes and runbooks.
- Lesson AWS Incident Response Framework 12 min
- Quiz AWS Incident Response Framework Quiz 5 questions
- Lesson Security Runbooks with Systems Manager 12 min
- Quiz Security Runbooks with Systems Manager Quiz 5 questions
- Lesson Forensics and Evidence Collection 12 min
- Quiz Forensics and Evidence Collection Quiz 5 questions
- Lesson Containment and Eradication Strategies 12 min
- Quiz Containment and Eradication Strategies Quiz 5 questions
Threat Detection Services
Implement threat detection using AWS security services.
- Lesson Amazon GuardDuty Deep Dive 12 min
- Quiz Amazon GuardDuty Deep Dive Quiz 5 questions
- Lesson Security Hub and ASFF Format 12 min
- Quiz Security Hub and ASFF Format Quiz 5 questions
- Lesson Amazon Detective for Investigation 12 min
- Quiz Amazon Detective for Investigation Quiz 5 questions
- Lesson Inspector for Vulnerability Assessment 12 min
- Quiz Inspector for Vulnerability Assessment Quiz 5 questions
- Lesson Custom Threat Detection with EventBridge 12 min
- Quiz Custom Threat Detection with EventBridge Quiz 5 questions
Automated Response
Implement automated security responses and remediation.
Module 2: Security Logging and Monitoring
Design and implement security logging, monitoring, and alerting solutions. (18% of exam)
AWS Logging Services
Configure and manage AWS logging services for security monitoring.
- Lesson CloudTrail Configuration and Analysis 12 min
- Quiz CloudTrail Configuration and Analysis Quiz 5 questions
- Lesson CloudTrail Lake and Athena Queries 12 min
- Quiz CloudTrail Lake and Athena Queries Quiz 5 questions
- Lesson VPC Flow Logs Deep Dive 12 min
- Quiz VPC Flow Logs Deep Dive Quiz 5 questions
- Lesson S3 Access Logging and Analysis 12 min
- Quiz S3 Access Logging and Analysis Quiz 5 questions
- Lesson ELB and CloudFront Logging 12 min
- Quiz ELB and CloudFront Logging Quiz 5 questions
CloudWatch Security Monitoring
Implement security monitoring with CloudWatch.
- Lesson CloudWatch Logs Insights 12 min
- Quiz CloudWatch Logs Insights Quiz 5 questions
- Lesson Metric Filters for Security Events 12 min
- Quiz Metric Filters for Security Events Quiz 5 questions
- Lesson CloudWatch Alarms and SNS Integration 12 min
- Quiz CloudWatch Alarms and SNS Integration Quiz 5 questions
- Lesson Cross-Account Log Aggregation 12 min
- Quiz Cross-Account Log Aggregation Quiz 5 questions
Centralized Logging Architecture
Design centralized logging solutions for multi-account environments.
- Lesson OpenSearch for Log Analytics 12 min
- Quiz OpenSearch for Log Analytics Quiz 5 questions
- Lesson Kinesis for Real-Time Log Processing 12 min
- Quiz Kinesis for Real-Time Log Processing Quiz 5 questions
- Lesson Multi-Account Logging Strategy 12 min
- Quiz Multi-Account Logging Strategy Quiz 5 questions
- Lesson Log Retention and Compliance 12 min
- Quiz Log Retention and Compliance Quiz 5 questions
- Lesson SIEM Integration Patterns 12 min
- Quiz SIEM Integration Patterns Quiz 5 questions
Module 3: Infrastructure Security
Design and implement secure network architectures and edge protection. (20% of exam)
VPC Security Design
Design secure VPC architectures with defense in depth.
- Lesson VPC Security Best Practices 12 min
- Quiz VPC Security Best Practices Quiz 5 questions
- Lesson Security Groups vs Network ACLs 12 min
- Quiz Security Groups vs Network ACLs Quiz 5 questions
- Lesson VPC Endpoints and PrivateLink 12 min
- Quiz VPC Endpoints and PrivateLink Quiz 5 questions
- Lesson Network Segmentation Strategies 12 min
- Quiz Network Segmentation Strategies Quiz 5 questions
Edge Protection
Implement edge protection with WAF, Shield, and CloudFront.
- Lesson AWS WAF Rules and Managed Rules 12 min
- Quiz AWS WAF Rules and Managed Rules Quiz 5 questions
- Lesson OWASP Top 10 Protection with WAF 12 min
- Quiz OWASP Top 10 Protection with WAF Quiz 5 questions
- Lesson AWS Shield Standard and Advanced 12 min
- Quiz AWS Shield Standard and Advanced Quiz 5 questions
- Lesson CloudFront Security Features 12 min
- Quiz CloudFront Security Features Quiz 5 questions
- Lesson DDoS Mitigation Strategies 12 min
- Quiz DDoS Mitigation Strategies Quiz 5 questions
Network Security Services
Implement network security with AWS Network Firewall and other services.
- Lesson AWS Network Firewall 12 min
- Quiz AWS Network Firewall Quiz 5 questions
- Lesson Route 53 Resolver DNS Firewall 12 min
- Quiz Route 53 Resolver DNS Firewall Quiz 5 questions
- Lesson Firewall Manager Policies 12 min
- Quiz Firewall Manager Policies Quiz 5 questions
- Lesson Traffic Mirroring for Analysis 12 min
- Quiz Traffic Mirroring for Analysis Quiz 5 questions
Compute Security
Secure EC2, containers, and serverless workloads.
Module 4: Data Protection
Design and implement data protection solutions for data at rest and in transit. (18% of exam)
Encryption at Rest
Implement encryption for data at rest using AWS KMS and other services.
- Lesson AWS KMS Key Management 12 min
- Quiz AWS KMS Key Management Quiz 5 questions
- Lesson KMS Key Policies and Grants 12 min
- Quiz KMS Key Policies and Grants Quiz 5 questions
- Lesson Customer Managed vs AWS Managed Keys 12 min
- Quiz Customer Managed vs AWS Managed Keys Quiz 5 questions
- Lesson S3 Encryption Options 12 min
- Quiz S3 Encryption Options Quiz 5 questions
- Lesson EBS and RDS Encryption 12 min
- Quiz EBS and RDS Encryption Quiz 5 questions
Encryption in Transit
Implement encryption for data in transit.
Secrets Management
Manage secrets and credentials securely.
Data Lifecycle and Classification
Implement data lifecycle management and classification.
Module 5: Identity and Access Management
Design and implement identity and access management solutions. (16% of exam)
IAM Policies and Permissions
Design and troubleshoot IAM policies and permissions.
- Lesson IAM Policy Evaluation Logic 12 min
- Quiz IAM Policy Evaluation Logic Quiz 5 questions
- Lesson Permission Boundaries 12 min
- Quiz Permission Boundaries Quiz 5 questions
- Lesson Service Control Policies 12 min
- Quiz Service Control Policies Quiz 5 questions
- Lesson IAM Access Analyzer 12 min
- Quiz IAM Access Analyzer Quiz 5 questions
- Lesson Troubleshooting IAM Conflicts 12 min
- Quiz Troubleshooting IAM Conflicts Quiz 5 questions
Identity Federation
Implement identity federation with external identity providers.
- Lesson IAM Identity Center (SSO) 12 min
- Quiz IAM Identity Center (SSO) Quiz 5 questions
- Lesson SAML and OIDC Federation 12 min
- Quiz SAML and OIDC Federation Quiz 5 questions
- Lesson Cognito User and Identity Pools 12 min
- Quiz Cognito User and Identity Pools Quiz 5 questions
- Lesson Cross-Account Access Patterns 12 min
- Quiz Cross-Account Access Patterns Quiz 5 questions
Privileged Access Management
Implement least privilege and privileged access controls.
- Lesson Least Privilege Implementation 12 min
- Quiz Least Privilege Implementation Quiz 5 questions
- Lesson IAM Roles for Service Accounts 12 min
- Quiz IAM Roles for Service Accounts Quiz 5 questions
- Lesson Session Policies and Tagging 12 min
- Quiz Session Policies and Tagging Quiz 5 questions
- Lesson Root Account Protection 12 min
- Quiz Root Account Protection Quiz 5 questions
Module 6: Management and Security Governance
Design and implement security governance and compliance strategies. (14% of exam)
Multi-Account Security
Implement security governance across multiple AWS accounts.
- Lesson AWS Organizations Security 12 min
- Quiz AWS Organizations Security Quiz 5 questions
- Lesson Control Tower Security Features 12 min
- Quiz Control Tower Security Features Quiz 5 questions
- Lesson Delegated Administrator Pattern 12 min
- Quiz Delegated Administrator Pattern Quiz 5 questions
- Lesson Resource Sharing with RAM 12 min
- Quiz Resource Sharing with RAM Quiz 5 questions
Compliance and Audit
Implement compliance monitoring and audit capabilities.
Security Deployment
Implement secure deployment strategies.
- Lesson CloudFormation Security 12 min
- Quiz CloudFormation Security Quiz 5 questions
- Lesson Service Catalog for Governance 12 min
- Quiz Service Catalog for Governance Quiz 5 questions
- Lesson Trusted Advisor Security Checks 12 min
- Quiz Trusted Advisor Security Checks Quiz 5 questions
- Lesson Cost Explorer Security Insights 12 min
- Quiz Cost Explorer Security Insights Quiz 5 questions
Your Progress
Spend your points to unlock exam-style practice questions
Spend points to unlock SCS-C02 exam-style practice questions.
Practice for SCS-C02