AWS Certified Security - Specialty (Legacy)
Prepare for the SCS-C02 exam and validate your expertise in securing AWS workloads and environments.
Spend your points to unlock real exam questions
Use your points to unlock real SCS-C02 exam questions — 20 free to try right now.
Practice for SCS-C02Course Content
6 modules · 79 lessons
Module 1: Threat Detection and Incident Response
Design and implement threat detection strategies, incident response plans, and security automation. (14% of exam)
Incident Response Planning
Design and implement AWS incident response processes and runbooks.
- Lesson AWS Incident Response Framework 12 min
- Quiz AWS Incident Response Framework Quiz 5 questions
- Lesson Security Runbooks with Systems Manager 12 min
- Quiz Security Runbooks with Systems Manager Quiz 5 questions
- Lesson Forensics and Evidence Collection 12 min
- Quiz Forensics and Evidence Collection Quiz 5 questions
- Lesson Containment and Eradication Strategies 12 min
- Quiz Containment and Eradication Strategies Quiz 5 questions
Threat Detection Services
Implement threat detection using AWS security services.
- Lesson Amazon GuardDuty Deep Dive 12 min
- Quiz Amazon GuardDuty Deep Dive Quiz 5 questions
- Lesson Security Hub and ASFF Format 12 min
- Quiz Security Hub and ASFF Format Quiz 5 questions
- Lesson Amazon Detective for Investigation 12 min
- Quiz Amazon Detective for Investigation Quiz 5 questions
- Lesson Inspector for Vulnerability Assessment 12 min
- Quiz Inspector for Vulnerability Assessment Quiz 5 questions
- Lesson Custom Threat Detection with EventBridge 12 min
- Quiz Custom Threat Detection with EventBridge Quiz 5 questions
Automated Response
Implement automated security responses and remediation.
Module 2: Security Logging and Monitoring
Design and implement security logging, monitoring, and alerting solutions. (18% of exam)
AWS Logging Services
Configure and manage AWS logging services for security monitoring.
- Lesson CloudTrail Configuration and Analysis 12 min
- Quiz CloudTrail Configuration and Analysis Quiz 5 questions
- Lesson CloudTrail Lake and Athena Queries 12 min
- Quiz CloudTrail Lake and Athena Queries Quiz 5 questions
- Lesson VPC Flow Logs Deep Dive 12 min
- Quiz VPC Flow Logs Deep Dive Quiz 5 questions
- Lesson S3 Access Logging and Analysis 12 min
- Quiz S3 Access Logging and Analysis Quiz 5 questions
- Lesson ELB and CloudFront Logging 12 min
- Quiz ELB and CloudFront Logging Quiz 5 questions
CloudWatch Security Monitoring
Implement security monitoring with CloudWatch.
- Lesson CloudWatch Logs Insights 12 min
- Quiz CloudWatch Logs Insights Quiz 5 questions
- Lesson Metric Filters for Security Events 12 min
- Quiz Metric Filters for Security Events Quiz 5 questions
- Lesson CloudWatch Alarms and SNS Integration 12 min
- Quiz CloudWatch Alarms and SNS Integration Quiz 5 questions
- Lesson Cross-Account Log Aggregation 12 min
- Quiz Cross-Account Log Aggregation Quiz 5 questions
Centralized Logging Architecture
Design centralized logging solutions for multi-account environments.
- Lesson OpenSearch for Log Analytics 12 min
- Quiz OpenSearch for Log Analytics Quiz 5 questions
- Lesson Kinesis for Real-Time Log Processing 12 min
- Quiz Kinesis for Real-Time Log Processing Quiz 5 questions
- Lesson Multi-Account Logging Strategy 12 min
- Quiz Multi-Account Logging Strategy Quiz 5 questions
- Lesson Log Retention and Compliance 12 min
- Quiz Log Retention and Compliance Quiz 5 questions
- Lesson SIEM Integration Patterns 12 min
- Quiz SIEM Integration Patterns Quiz 5 questions
Module 3: Infrastructure Security
Design and implement secure network architectures and edge protection. (20% of exam)
VPC Security Design
Design secure VPC architectures with defense in depth.
- Lesson VPC Security Best Practices 12 min
- Quiz VPC Security Best Practices Quiz 5 questions
- Lesson Security Groups vs Network ACLs 12 min
- Quiz Security Groups vs Network ACLs Quiz 5 questions
- Lesson VPC Endpoints and PrivateLink 12 min
- Quiz VPC Endpoints and PrivateLink Quiz 5 questions
- Lesson Network Segmentation Strategies 12 min
- Quiz Network Segmentation Strategies Quiz 5 questions
Edge Protection
Implement edge protection with WAF, Shield, and CloudFront.
- Lesson AWS WAF Rules and Managed Rules 12 min
- Quiz AWS WAF Rules and Managed Rules Quiz 5 questions
- Lesson OWASP Top 10 Protection with WAF 12 min
- Quiz OWASP Top 10 Protection with WAF Quiz 5 questions
- Lesson AWS Shield Standard and Advanced 12 min
- Quiz AWS Shield Standard and Advanced Quiz 5 questions
- Lesson CloudFront Security Features 12 min
- Quiz CloudFront Security Features Quiz 5 questions
- Lesson DDoS Mitigation Strategies 12 min
- Quiz DDoS Mitigation Strategies Quiz 5 questions
Network Security Services
Implement network security with AWS Network Firewall and other services.
- Lesson AWS Network Firewall 12 min
- Quiz AWS Network Firewall Quiz 5 questions
- Lesson Route 53 Resolver DNS Firewall 12 min
- Quiz Route 53 Resolver DNS Firewall Quiz 5 questions
- Lesson Firewall Manager Policies 12 min
- Quiz Firewall Manager Policies Quiz 5 questions
- Lesson Traffic Mirroring for Analysis 12 min
- Quiz Traffic Mirroring for Analysis Quiz 5 questions
Compute Security
Secure EC2, containers, and serverless workloads.
Module 4: Data Protection
Design and implement data protection solutions for data at rest and in transit. (18% of exam)
Encryption at Rest
Implement encryption for data at rest using AWS KMS and other services.
- Lesson AWS KMS Key Management 12 min
- Quiz AWS KMS Key Management Quiz 5 questions
- Lesson KMS Key Policies and Grants 12 min
- Quiz KMS Key Policies and Grants Quiz 5 questions
- Lesson Customer Managed vs AWS Managed Keys 12 min
- Quiz Customer Managed vs AWS Managed Keys Quiz 5 questions
- Lesson S3 Encryption Options 12 min
- Quiz S3 Encryption Options Quiz 5 questions
- Lesson EBS and RDS Encryption 12 min
- Quiz EBS and RDS Encryption Quiz 5 questions
Encryption in Transit
Implement encryption for data in transit.
Secrets Management
Manage secrets and credentials securely.
Data Lifecycle and Classification
Implement data lifecycle management and classification.
Module 5: Identity and Access Management
Design and implement identity and access management solutions. (16% of exam)
IAM Policies and Permissions
Design and troubleshoot IAM policies and permissions.
- Lesson IAM Policy Evaluation Logic 12 min
- Quiz IAM Policy Evaluation Logic Quiz 5 questions
- Lesson Permission Boundaries 12 min
- Quiz Permission Boundaries Quiz 5 questions
- Lesson Service Control Policies 12 min
- Quiz Service Control Policies Quiz 5 questions
- Lesson IAM Access Analyzer 12 min
- Quiz IAM Access Analyzer Quiz 5 questions
- Lesson Troubleshooting IAM Conflicts 12 min
- Quiz Troubleshooting IAM Conflicts Quiz 5 questions
Identity Federation
Implement identity federation with external identity providers.
- Lesson IAM Identity Center (SSO) 12 min
- Quiz IAM Identity Center (SSO) Quiz 5 questions
- Lesson SAML and OIDC Federation 12 min
- Quiz SAML and OIDC Federation Quiz 5 questions
- Lesson Cognito User and Identity Pools 12 min
- Quiz Cognito User and Identity Pools Quiz 5 questions
- Lesson Cross-Account Access Patterns 12 min
- Quiz Cross-Account Access Patterns Quiz 5 questions
Privileged Access Management
Implement least privilege and privileged access controls.
- Lesson Least Privilege Implementation 12 min
- Quiz Least Privilege Implementation Quiz 5 questions
- Lesson IAM Roles for Service Accounts 12 min
- Quiz IAM Roles for Service Accounts Quiz 5 questions
- Lesson Session Policies and Tagging 12 min
- Quiz Session Policies and Tagging Quiz 5 questions
- Lesson Root Account Protection 12 min
- Quiz Root Account Protection Quiz 5 questions
Module 6: Management and Security Governance
Design and implement security governance and compliance strategies. (14% of exam)
Multi-Account Security
Implement security governance across multiple AWS accounts.
- Lesson AWS Organizations Security 12 min
- Quiz AWS Organizations Security Quiz 5 questions
- Lesson Control Tower Security Features 12 min
- Quiz Control Tower Security Features Quiz 5 questions
- Lesson Delegated Administrator Pattern 12 min
- Quiz Delegated Administrator Pattern Quiz 5 questions
- Lesson Resource Sharing with RAM 12 min
- Quiz Resource Sharing with RAM Quiz 5 questions
Compliance and Audit
Implement compliance monitoring and audit capabilities.
Security Deployment
Implement secure deployment strategies.
- Lesson CloudFormation Security 12 min
- Quiz CloudFormation Security Quiz 5 questions
- Lesson Service Catalog for Governance 12 min
- Quiz Service Catalog for Governance Quiz 5 questions
- Lesson Trusted Advisor Security Checks 12 min
- Quiz Trusted Advisor Security Checks Quiz 5 questions
- Lesson Cost Explorer Security Insights 12 min
- Quiz Cost Explorer Security Insights Quiz 5 questions
Your Progress
Spend your points to unlock real exam questions
Spend points to unlock real SCS-C02 questions.
Practice for SCS-C02Enjoying the courses?
Everything stays free. Pro shows fewer ads, doubles the points you earn on every lesson and quiz so you progress twice as fast, unlocks half of every practice exam — plus full case studies — with the Learn & Exam study modes, and lets you read each lesson on one page.
- ✓ Fewer advertisements
- ✓ 2× points per lesson & quiz
- ✓ 50% of every exam unlocked
- ✓ Learn & Exam modes
- ✓ Distraction-free lessons