AWS Certified Security Specialty Course SCS-C02 from Udemy

Are you ready to take your AWS Security knowledge to the next level and become an AWS Certified Security Specialist? Then this AWS Security Specialty instructor-led video course is for you. Designed for intermediate to advanced learners, this on-demand training will equip you with the knowledge and confidence you need to succeed in your SCS-C02 exam.

Your highly experienced instructor will guide you through the key concepts and best practices for securing your AWS environment. This hands-on training includes guided activities with security-specific scenarios, security deep dive lessons, and an exam-difficulty practice exam to test your progress. All the materials you need to succeed - including diagrams, code, links, files, and slides - are available for download.

You will gain a deep level of knowledge and expertise in AWS Security with the help of:

Over 9 hours of comprehensive video and hands-on lessons
Detailed presentations and diagrams
Exam cram lessons for quick revision of key facts
An complimentary practice exam to test your knowledge
A supportive community of students and instructors

This course is your key to acing the Certified Security Specialty exam. With our mixture of in-depth theory, architectural diagrams and hands-on training, you'll learn how to secure your AWS environment - fully preparing you for the SCS-C02 certification exam. With this comprehensive Udemy AWS Security Specialty training, you have everything you need to comfortably pass the SCS-C02 certification exam.

With our FREE previews you can see for yourself how we prepare you for the AWS Certified Specialty [SCS-C02] exam using guided AWS hands-on lessons. Check out the curriculum to see the vast amount of practical exercises combined with in-depth theoretical training.

THIS AWS SECURITY TRAINING COVERS THE FOLLOWING TOPICS IN-DEPTH:

AWS IAM User, Groups, Roles and Policies
AWS Security Token Service (STS)
Multi-Factor Authentication (MFA)
Identity-Based Policies and Resource-Based Policies
AWS Organizations and Service Control Policies (SCPs)
Use Cases for IAM Roles
AWS Directory Services, Identity Federation, AWS Single Sign-On, Amazon Cognito
Amazon VPC Security
Data Protection
Logging, Monitoring, and Compliance
Security Management and Automation
Infrastructure and Edge Security
Incident Response

Perfect for quick revision of the most important facts before you sit your exam

BONUS PRACTICE TEST: Our practice test is timed and scored mimicking the real exam environment so you get familiar with the real AWS exam format, style and difficulty

DETAILED As the founder of Digital Cloud Training, I'm deeply committed to providing top-quality AWS certification training resources. I created this comprehensive training course to help you excel in your AWS exam and achieve your professional goals. With over 20 years of hands-on experience in the Cloud space, I'm excited to share my expertise with you on Udemy.

7-star instructor rating from over 150,000 reviews

Our students pass the AWS exam with an average score of over 85%

MONEY-BACK GUARANTEE

We are totally confident in the value of our AWS Security Specialty course which comes with a 30-day unconditional money-back guarantee. Fast-track your AWS exam success and get lifetime access now - risk-free.

ENROLL NOW

Take the first step towards advancing your cloud career and becoming an AWS Certified Security Specialist.

By enrolling in our video course, you will not only pass the AWS Certified Security Specialty exam but also gain a comprehensive understanding of AWS security. Enhance your AWS knowledge and set yourself apart in the industry by taking this AWS Certified Security Specialty exam preparation course.

What's inside

Learning objectives

9 hours of instructor-guided lectures: with our practical exercises, you'll learn how to secure applications on amazon web services
Exam cram lectures: these fast-paced lectures are perfect for quick revision of the most important facts before sitting your exam
Practice exam: exam-difficulty practice exam included to test your progress and knowledge
Active q&a forum: our discussion board provides a platform for students to ask questions, share their recent exam experiences, and offer feedback on exam topics
Responsive support: our team of aws experts respond to all of your questions, concerns or feedback

Always up to date: our teachings reflect the latest scs-c02 exam. students have lifetime access to all future updates
Presented in a professional way: focused and to the point, clear language with professional subtitles
The ultimate exam prep: we’ll teach you everything you need to know to ace your exam
Show more
Show less

9 hours of instructor-guided lectures: with our practical exercises, you'll learn how to secure applications on amazon web services
Exam cram lectures: these fast-paced lectures are perfect for quick revision of the most important facts before sitting your exam
Practice exam: exam-difficulty practice exam included to test your progress and knowledge
Active q&a forum: our discussion board provides a platform for students to ask questions, share their recent exam experiences, and offer feedback on exam topics
Responsive support: our team of aws experts respond to all of your questions, concerns or feedback
Always up to date: our teachings reflect the latest scs-c02 exam. students have lifetime access to all future updates
Presented in a professional way: focused and to the point, clear language with professional subtitles
The ultimate exam prep: we’ll teach you everything you need to know to ace your exam
Show more
Show less

Syllabus

Let's Get Started!

Welcome and How to Use this Course

The SCS-C02 Exam

Hands-On Practice: Free Tier vs Sandbox

Course Download

Getting Started - AWS Accounts

Section 2 - Introduction

AWS Account Overview

[HOL] Create your AWS Free Tier Account

[HOL] Configure Account and Create a Budget and Alarm

[HOL] Install Tools

AWS IAM Fundamentals

Section 3 - Introduction

AWS IAM Overview

IAM Users, Groups, Roles and Policies

[HOL] Create an IAM User and Group

IAM Authentication and MFA

[HOL] Enable Multi-Factor Authentication (MFA)

AWS Security Token Service (STS)

[HOL] IAM Password Policy

IAM Access Control

Section 4 - Introduction

Identity-Based Policies and Resource-Based Policies

Access Control Methods - RBAC & ABAC

Permissions Boundaries

IAM Policy Evaluation

IAM Policy Structure

[HOL] Using Role-Based Access Control (RBAC)

[HOL] Using Attribute-Based Access Control (ABAC)

[HOL] Apply Permissions Boundary

[HOL] AWS Policy Generator

[HOL] IAM Policy Simulator

IAM Best Practices

AWS Organizations and Control Tower

Section 5 - Introduction

Overview of AWS Organizations

[HOL] Create Organization and Add Account

Service Control Policies (SCPs)

[HOL] Create Service Control Policy (SCP)

Use Cases for IAM Roles

[HOL] Cross-Account Access to S3

AWS Control Tower

[HOL] Create a Landing Zone

Infrastructure Security

Section 6 - Introduction

Secure VPC Design

[HOL] Create a Custom VPC with Subnets

[HOL] Launch Instances and Test VPC

Stateful and Stateless Firewalls

Security Groups and Network ACLs

[HOL] Configure Security Groups and NACLs

VPC Peering

[HOL] Configure VPC Peering

VPC Endpoints

[HOL] Create VPC Endpoint

AWS Site-to-Site VPN

Securing AWS Direct Connect

[HOL] VPC Flow Logs

Accessing Services – Access Keys and IAM Roles

[HOL] Access Keys and IAM Roles

Managing Amazon EC2 Security

[HOL] EC2 Host-Based Security

AWS Services in Amazon VPC

Automating Infrastructure as Code

[HOL] Create Amazon VPC with CloudFormation

AWS Config

[HOL] AWS Config Rule with Remediation

AWS Transit Gateway

VPC Sharing

Network Access Analyzer

[HOL] Reviewing Findings with Network Access Analyzer

Edge Security

Section 7 - Introduction

DNS Name Resolution and Routing

[HOL] CNAME and Alias Records

Secure Content Delivery with CloudFront

[HOL] Configure Distribution Settings

CloudFront SSL/TLS and SNI

Lambda@Edge

AWS Web Application Firewall (WAF)

AWS Shield

Network Firewall and DNS Firewall

[HOL] AWS Firewall Manager

Data and Application Protection

Section 8 - Introduction

Encryption at Rest and in-Transit

AWS Certificate Manager (ACM)

[HOL] Create SSL/TLS Certificate

AWS Key Management Service (KMS)

[HOL] Create Custom KMS Keys

AWS CloudHSM

Protecting Data on S3, EBS, and EFS

[HOL] Enforce KMS Encryption for S3 Bucket

[HOL] Copy Encrypted Snapshot Across Accounts

Database Protection - DynamoDB and RDS

[HOL] Encryption Options for AWS Databases

[HOL] Schedule Key Deletion

Storing Secrets

Security for Lambda Functions

AWS Step Functions

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Includes hands-on labs and guided activities with security-specific scenarios, providing practical experience for real-world AWS security implementations

Offers exam cram lessons for quick revision of key facts, which is useful for reinforcing knowledge before taking the certification exam

Covers topics such as IAM, VPC security, data protection, and incident response, which are essential for securing AWS environments

Explores AWS Organizations and Service Control Policies (SCPs), which are critical for managing security across multiple AWS accounts

Includes a practice exam that mimics the real AWS exam format, style, and difficulty, helping learners get familiar with the testing environment

Requires learners to create an AWS Free Tier account and install tools, which may present a barrier to some learners without prior AWS experience

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in AWS Certified Security Specialty Course SCS-C02 with these activities:

Review IAM Fundamentals

Show steps

Solidify your understanding of IAM concepts before diving into more advanced security topics. This will provide a strong foundation for understanding access control and permissions.

Browse courses on IAM Users

Show steps

Review the core concepts of IAM users, groups, roles, and policies.
Practice creating and managing IAM entities in the AWS console.
Familiarize yourself with different types of IAM policies.

Review: AWS Certified Security Specialty Study Guide

Show steps

Supplement your learning with a dedicated study guide for the AWS Certified Security Specialty exam. This will provide additional practice questions and help you identify areas where you need to improve.

View AWS Certified Cloud Practitioner Study Guide... on Amazon

Show steps

Read through the chapters covering key security concepts.
Complete the practice questions at the end of each chapter.
Review the answers and explanations to identify areas for improvement.

Secure a Sample Web Application

Show steps

Apply the security concepts learned in the course to a real-world scenario. This will help you understand how to implement security best practices in a practical setting.

Show steps

Deploy a simple web application on EC2 or Elastic Beanstalk.
Configure security groups and NACLs to restrict access to the application.
Implement encryption for data at rest and in transit.
Set up logging and monitoring to detect security threats.

Four other activities

Expand to see all activities and additional details

Show all seven activities

Develop a CloudFormation Template for a Secure VPC

Show steps

Automate the creation of a secure VPC using Infrastructure as Code. This will help you understand how to define security configurations in a repeatable and consistent manner.

Show steps

Design a secure VPC architecture with public and private subnets.
Create a CloudFormation template to define the VPC resources, including subnets, security groups, and NACLs.
Implement security best practices in the template, such as restricting access to resources and enabling encryption.
Test the template to ensure it creates the VPC as expected.

Practice IAM Policy Scenarios

Show steps

Sharpen your IAM policy creation skills through repetitive exercises. This will help you become more comfortable with the IAM policy syntax and best practices.

Show steps

Create IAM policies for common use cases, such as granting access to S3 buckets or EC2 instances.
Test your policies using the IAM policy simulator to ensure they work as expected.
Refactor policies to adhere to the principle of least privilege.

Document an Incident Response Plan

Show steps

Reinforce your understanding of incident response by creating a detailed plan. This will help you think through the steps involved in responding to security incidents.

Show steps

Identify potential security incidents that could affect your AWS environment.
Define roles and responsibilities for incident response.
Outline the steps to take in the event of a security incident.
Document communication procedures and escalation paths.

Review: Practical AWS Security

Show steps

Expand your knowledge of AWS security best practices with a practical guide. This will provide real-world examples and help you understand how to apply security concepts in your own environment.

View Putting Knowledge to Work on Amazon

Show steps

Read through the chapters covering topics of interest.
Implement the security best practices described in the book in your own AWS environment.
Experiment with different security tools and techniques.

Career center

Learners who complete AWS Certified Security Specialty Course SCS-C02 will develop knowledge and skills that may be useful to these careers:

Cloud Security Specialist

A Cloud Security Specialist focuses on the security aspects of cloud computing. This includes implementing security controls, monitoring for threats, and ensuring compliance with security policies. This course is specifically designed for those wanting to become an AWS Certified Security Specialist. The course material, which includes a practice exam, exam cram sessions, and hands-on security-specific exercises, will equip one for this career. It gives a deep level of expertise in AWS security, which is exactly the type of knowledge that someone in the Cloud Security Specialist role must have to succeed.

See salaries and explore the career path for Cloud Security Specialist

Cloud Security Engineer

A Cloud Security Engineer is responsible for implementing and maintaining security measures in cloud computing environments. This role involves designing secure cloud architectures, configuring security controls, and responding to security incidents. This course, with its focus on AWS security best practices, IAM, network security, and data protection, helps build a foundation for a successful career as a Cloud Security Engineer. The hands-on labs and deep dives into security-specific scenarios provide practical experience crucial for this role. Understanding how to secure AWS environments, as taught in this course, is directly applicable to the day-to-day responsibilities of a Cloud Security Engineer.

See salaries and explore the career path for Cloud Security Engineer

Security Architect

A Security Architect designs the security infrastructure for an organization, including cloud environments. This role requires a deep understanding of security principles, technologies, and best practices. This course provides a comprehensive overview of AWS security services, such as IAM, VPC security, and data protection, which are vital for a Security Architect. The architectural diagrams and in-depth theory, coupled with hands-on training, make this course particularly valuable. This course helps a Security Architect learn how to make informed decisions about security design and implementation within the AWS ecosystem.

See salaries and explore the career path for Security Architect

Information Security Analyst

An Information Security Analyst monitors and analyzes security events, identifies vulnerabilities, and helps develop security policies. This role is crucial for protecting an organization's information assets. This course helps build a strong understanding of AWS security services and their configurations. The course's focus on logging, monitoring, and compliance provides the practical knowledge needed for someone in this role. The hands-on exercises, especially the ones that involve security-specific scenarios, are directly relatable to the work of an Information Security Analyst.

See salaries and explore the career path for Information Security Analyst

DevOps Engineer

A DevOps Engineer works to automate and streamline the software development lifecycle, often in cloud environments. This role requires a security-conscious approach. This course, with its deep dive into AWS security, offers valuable insights that a DevOps Engineer can use. This course helps a DevOps Engineer understand how to implement security best practices, and the lessons on infrastructure as code, AWS Config, and automation are directly relevant to this job. This also helps a DevOps Engineer gain a better perspective of how security fits into infrastructure.

See salaries and explore the career path for DevOps Engineer

Network Security Engineer

A Network Security Engineer designs, implements, and maintains network security infrastructure. This role requires a strong understanding of network protocols, firewalls, and intrusion detection systems. This course delves into network security within AWS, including topics such as VPC security, security groups, Network ACLs, and VPC peering. For a Network Security Engineer this course offers the AWS-specific training, which is paramount with the increasing movement to the cloud. A Network Security Engineer will find that the practical activities in the course aid in skill growth.

See salaries and explore the career path for Network Security Engineer

Solutions Architect

A Solutions Architect designs and plans technology solutions for an organization, often using cloud services. This role requires a broad understanding of different technologies and architecture patterns. This course helps a Solutions Architect understand how to properly incorporate security into the solutions they create within AWS. It provides essential knowledge on AWS security services and best practices. This course helps a Solutions Architect learn how to develop secure and compliant solutions, using diagrams and hands-on training. A Solutions Architect will find the architectural focus of this course particularly beneficial.

See salaries and explore the career path for Solutions Architect

Systems Administrator

A Systems Administrator is responsible for the upkeep, configuration, and reliable operation of computer systems, including cloud-based infrastructure. This course provides critical knowledge on securing AWS environments. A Systems Administrator would use the detailed lessons on IAM, network security, and data protection directly in their daily work. The hands-on activities of this course, along with the focus on security management, will help a Systems Administrator develop the skills required to maintain secure systems, especially within the AWS context.

See salaries and explore the career path for Systems Administrator

Compliance Analyst

A Compliance Analyst ensures that an organization's operations adhere to legal and regulatory requirements. This role often involves assessing security controls and identifying areas of non-compliance. This course provides an in-depth look at AWS security, including how to configure logging, monitoring, and compliance settings. This information may be helpful to this role, especially since it provides ways to assess the security posture of systems. A Compliance Analyst may find that this course's focus on compliance, along with information on data protection, is helpful to their job responsibilities.

See salaries and explore the career path for Compliance Analyst

Security Consultant

A Security Consultant advises organizations on how to improve their security posture. This role requires a broad understanding of security principles, technologies, and best practices. This course provides a comprehensive overview of AWS security services and their configurations, which is important for providing informed advice. The course's focus on in-depth theory, architectural diagrams, and hands-on training makes it useful. A Security Consultant may use this course to deepen their expertise on AWS and provide well-informed security guidance.

See salaries and explore the career path for Security Consultant

Cloud Engineer

A Cloud Engineer is responsible for the implementation, management, and maintenance of cloud-based systems and infrastructure. This job role needs a strong understanding of cloud security to properly implement and manage systems. This course provides knowledge on key security concepts within the AWS environment. This course may help a Cloud Engineer learn how to build secure environments, manage access with IAM, and provide data protection with different AWS services. The guided activities and practical exercises that are in the course may help a Cloud Engineer develop practical skills.

See salaries and explore the career path for Cloud Engineer

Software Developer

A Software Developer writes and debugs code to create applications. While security is not the main function of this role, a security-conscious approach is necessary for building secure applications. This course may be useful to a Software Developer because it provides a basic understanding of AWS security practices, especially as software increasingly utilizes cloud resources. The course's material on security for Lambda functions and data protection may be useful to a Software Developer who wishes to build more secure applications.

See salaries and explore the career path for Software Developer

IT Project Manager

An IT Project Manager is responsible for planning, executing, and closing IT projects, which often include cloud implementations. This job role needs a base understanding of security concepts, especially in cloud projects. This course may help an IT Project Manager understand the fundamentals of AWS security. The course provides a good overview of the topics, and it will be helpful for IT Project Managers to be aware of key AWS security factors. This awareness may help in project planning and implementation.

See salaries and explore the career path for IT Project Manager

Technical Support Specialist

A Technical Support Specialist provides technical assistance to users. This role can benefit from a basic understanding of security, as it gives them tools to diagnose and resolve security-related issues. This course may help a Technical Support Specialist gain some insight into security best practices within AWS. Especially useful might be the material on IAM, authentication, and general security concepts. This knowledge may improve their ability to assist users with security issues.

See salaries and explore the career path for Technical Support Specialist

Database Administrator

A Database Administrator manages and maintains database systems. While not exclusively focused on security, the role benefits from an understanding of data protection and security measures. This course may be helpful as it covers database security within AWS, such as encryption options for DynamoDB and RDS. The course's material on storing secrets and the general principles of data protection may aid a Database Administrator who wishes to improve security practices in their job.

See salaries and explore the career path for Database Administrator

AWS Certified Security Specialty Course SCS-C02

What's inside

Learning objectives

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses