AWS Certified Security - Specialty
Prepare for the SCS-C03 exam by mastering AWS security services, data protection, identity management, and incident response for cloud workloads.
Spend your points to unlock exam-style practice questions
Use your points to unlock SCS-C03 exam-style practice questions — up to 20 free to try right now.
Practice for SCS-C03Course Content
6 modules · 79 lessons
Module 1: Detection
Design and implement threat detection and security monitoring solutions. (16% of exam)
Threat Detection Services
Implement threat detection using AWS security services.
- Lesson Amazon GuardDuty Configuration 12 min
- Quiz Amazon GuardDuty Configuration Quiz 5 questions
- Lesson GuardDuty Runtime Monitoring 12 min
- Quiz GuardDuty Runtime Monitoring Quiz 5 questions
- Lesson Security Hub Aggregation 12 min
- Quiz Security Hub Aggregation Quiz 5 questions
- Lesson AWS Security Finding Format (ASFF) 12 min
- Quiz AWS Security Finding Format (ASFF) Quiz 5 questions
- Lesson Amazon Inspector Scanning 12 min
- Quiz Amazon Inspector Scanning Quiz 5 questions
Logging and Analysis
Configure and analyze security logs for threat detection.
- Lesson CloudTrail Event Analysis 12 min
- Quiz CloudTrail Event Analysis Quiz 5 questions
- Lesson CloudTrail Lake Queries 12 min
- Quiz CloudTrail Lake Queries Quiz 5 questions
- Lesson VPC Flow Logs Analysis 12 min
- Quiz VPC Flow Logs Analysis Quiz 5 questions
- Lesson CloudWatch Logs Insights 12 min
- Quiz CloudWatch Logs Insights Quiz 5 questions
Detection Automation
Automate detection and alerting processes.
- Lesson EventBridge Security Rules 12 min
- Quiz EventBridge Security Rules Quiz 5 questions
- Lesson CloudWatch Metric Filters 12 min
- Quiz CloudWatch Metric Filters Quiz 5 questions
- Lesson Amazon Detective Investigation 12 min
- Quiz Amazon Detective Investigation Quiz 5 questions
- Lesson SIEM Integration Patterns 12 min
- Quiz SIEM Integration Patterns Quiz 5 questions
Module 2: Incident Response
Design and implement incident response strategies and automation. (14% of exam)
Incident Response Planning
Design incident response plans and playbooks.
- Lesson AWS Incident Response Framework 12 min
- Quiz AWS Incident Response Framework Quiz 5 questions
- Lesson Security Runbooks Design 12 min
- Quiz Security Runbooks Design Quiz 5 questions
- Lesson Forensics and Evidence Collection 12 min
- Quiz Forensics and Evidence Collection Quiz 5 questions
- Lesson Containment Strategies 12 min
- Quiz Containment Strategies Quiz 5 questions
Response Automation
Automate incident response actions.
- Lesson Systems Manager Incident Response 12 min
- Quiz Systems Manager Incident Response Quiz 5 questions
- Lesson Lambda Auto-Remediation 12 min
- Quiz Lambda Auto-Remediation Quiz 5 questions
- Lesson Step Functions for IR Workflows 12 min
- Quiz Step Functions for IR Workflows Quiz 5 questions
- Lesson Automated Isolation Patterns 12 min
- Quiz Automated Isolation Patterns Quiz 5 questions
Post-Incident Activities
Conduct post-incident analysis and improvement.
Module 3: Infrastructure Security
Design and implement secure network architectures and edge protection including GenAI security. (18% of exam)
VPC Security
Design secure VPC architectures with defense in depth.
- Lesson VPC Security Best Practices 12 min
- Quiz VPC Security Best Practices Quiz 5 questions
- Lesson Security Groups and NACLs 12 min
- Quiz Security Groups and NACLs Quiz 5 questions
- Lesson VPC Endpoints and PrivateLink 12 min
- Quiz VPC Endpoints and PrivateLink Quiz 5 questions
- Lesson Network Segmentation 12 min
- Quiz Network Segmentation Quiz 5 questions
Edge Protection
Implement edge protection with WAF, Shield, and CloudFront.
- Lesson AWS WAF Rule Configuration 12 min
- Quiz AWS WAF Rule Configuration Quiz 5 questions
- Lesson Managed Rule Groups 12 min
- Quiz Managed Rule Groups Quiz 5 questions
- Lesson AWS Shield Advanced 12 min
- Quiz AWS Shield Advanced Quiz 5 questions
- Lesson CloudFront Security 12 min
- Quiz CloudFront Security Quiz 5 questions
Network Security Services
Implement network security with AWS services.
GenAI Security
Implement protections and guardrails for generative AI applications.
Module 4: Identity and Access Management
Design and implement identity and access management solutions. (20% of exam)
IAM Policies
Design and implement IAM policies.
- Lesson IAM Policy Evaluation Logic 12 min
- Quiz IAM Policy Evaluation Logic Quiz 5 questions
- Lesson Resource-Based Policies 12 min
- Quiz Resource-Based Policies Quiz 5 questions
- Lesson Permission Boundaries 12 min
- Quiz Permission Boundaries Quiz 5 questions
- Lesson Service Control Policies 12 min
- Quiz Service Control Policies Quiz 5 questions
- Lesson Policy Conditions 12 min
- Quiz Policy Conditions Quiz 5 questions
IAM Tools and Analysis
Use IAM analysis and validation tools.
- Lesson IAM Access Analyzer 12 min
- Quiz IAM Access Analyzer Quiz 5 questions
- Lesson IAM Policy Simulator 12 min
- Quiz IAM Policy Simulator Quiz 5 questions
- Lesson Troubleshooting Access Issues 12 min
- Quiz Troubleshooting Access Issues Quiz 5 questions
- Lesson Credential Reports 12 min
- Quiz Credential Reports Quiz 5 questions
Identity Federation
Implement identity federation with external providers.
Privileged Access
Implement least privilege and privileged access management.
Module 5: Data Protection
Design and implement data protection solutions. (18% of exam)
Encryption at Rest
Implement encryption for data at rest.
- Lesson AWS KMS Architecture 12 min
- Quiz AWS KMS Architecture Quiz 5 questions
- Lesson Key Policies and Grants 12 min
- Quiz Key Policies and Grants Quiz 5 questions
- Lesson Multi-Region Keys 12 min
- Quiz Multi-Region Keys Quiz 5 questions
- Lesson S3 Encryption Options 12 min
- Quiz S3 Encryption Options Quiz 5 questions
- Lesson Database Encryption 12 min
- Quiz Database Encryption Quiz 5 questions
Encryption in Transit
Implement encryption for data in transit.
Secrets Management
Manage secrets and credentials securely.
Data Classification
Implement data classification and protection.
Module 6: Security Foundations and Governance
Design and implement security governance and compliance strategies. (14% of exam)
Multi-Account Security
Implement security governance across multiple accounts.
- Lesson AWS Organizations Security 12 min
- Quiz AWS Organizations Security Quiz 5 questions
- Lesson Control Tower Governance 12 min
- Quiz Control Tower Governance Quiz 5 questions
- Lesson Delegated Administrator 12 min
- Quiz Delegated Administrator Quiz 5 questions
- Lesson Resource Access Manager 12 min
- Quiz Resource Access Manager Quiz 5 questions
Compliance
Implement compliance monitoring and reporting.
Security Operations
Implement security operations best practices.
- Lesson Trusted Advisor Security 12 min
- Quiz Trusted Advisor Security Quiz 5 questions
- Lesson Well-Architected Security 12 min
- Quiz Well-Architected Security Quiz 5 questions
- Lesson Security Automation 12 min
- Quiz Security Automation Quiz 5 questions
- Lesson Shared Responsibility Model 12 min
- Quiz Shared Responsibility Model Quiz 5 questions
Your Progress
Spend your points to unlock exam-style practice questions
Spend points to unlock SCS-C03 exam-style practice questions.
Practice for SCS-C03