AWS Certified Security - Specialty
Prepare for the SCS-C03 exam by mastering AWS security services, data protection, identity management, and incident response for cloud workloads.
Spend your points to unlock real exam questions
Use your points to unlock real SCS-C03 exam questions — 20 free to try right now.
Practice for SCS-C03Course Content
6 modules · 79 lessons
Module 1: Detection
Design and implement threat detection and security monitoring solutions. (16% of exam)
Threat Detection Services
Implement threat detection using AWS security services.
- Lesson Amazon GuardDuty Configuration 12 min
- Quiz Amazon GuardDuty Configuration Quiz 5 questions
- Lesson GuardDuty Runtime Monitoring 12 min
- Quiz GuardDuty Runtime Monitoring Quiz 5 questions
- Lesson Security Hub Aggregation 12 min
- Quiz Security Hub Aggregation Quiz 5 questions
- Lesson AWS Security Finding Format (ASFF) 12 min
- Quiz AWS Security Finding Format (ASFF) Quiz 5 questions
- Lesson Amazon Inspector Scanning 12 min
- Quiz Amazon Inspector Scanning Quiz 5 questions
Logging and Analysis
Configure and analyze security logs for threat detection.
- Lesson CloudTrail Event Analysis 12 min
- Quiz CloudTrail Event Analysis Quiz 5 questions
- Lesson CloudTrail Lake Queries 12 min
- Quiz CloudTrail Lake Queries Quiz 5 questions
- Lesson VPC Flow Logs Analysis 12 min
- Quiz VPC Flow Logs Analysis Quiz 5 questions
- Lesson CloudWatch Logs Insights 12 min
- Quiz CloudWatch Logs Insights Quiz 5 questions
Detection Automation
Automate detection and alerting processes.
- Lesson EventBridge Security Rules 12 min
- Quiz EventBridge Security Rules Quiz 5 questions
- Lesson CloudWatch Metric Filters 12 min
- Quiz CloudWatch Metric Filters Quiz 5 questions
- Lesson Amazon Detective Investigation 12 min
- Quiz Amazon Detective Investigation Quiz 5 questions
- Lesson SIEM Integration Patterns 12 min
- Quiz SIEM Integration Patterns Quiz 5 questions
Module 2: Incident Response
Design and implement incident response strategies and automation. (14% of exam)
Incident Response Planning
Design incident response plans and playbooks.
- Lesson AWS Incident Response Framework 12 min
- Quiz AWS Incident Response Framework Quiz 5 questions
- Lesson Security Runbooks Design 12 min
- Quiz Security Runbooks Design Quiz 5 questions
- Lesson Forensics and Evidence Collection 12 min
- Quiz Forensics and Evidence Collection Quiz 5 questions
- Lesson Containment Strategies 12 min
- Quiz Containment Strategies Quiz 5 questions
Response Automation
Automate incident response actions.
- Lesson Systems Manager Incident Response 12 min
- Quiz Systems Manager Incident Response Quiz 5 questions
- Lesson Lambda Auto-Remediation 12 min
- Quiz Lambda Auto-Remediation Quiz 5 questions
- Lesson Step Functions for IR Workflows 12 min
- Quiz Step Functions for IR Workflows Quiz 5 questions
- Lesson Automated Isolation Patterns 12 min
- Quiz Automated Isolation Patterns Quiz 5 questions
Post-Incident Activities
Conduct post-incident analysis and improvement.
Module 3: Infrastructure Security
Design and implement secure network architectures and edge protection including GenAI security. (18% of exam)
VPC Security
Design secure VPC architectures with defense in depth.
- Lesson VPC Security Best Practices 12 min
- Quiz VPC Security Best Practices Quiz 5 questions
- Lesson Security Groups and NACLs 12 min
- Quiz Security Groups and NACLs Quiz 5 questions
- Lesson VPC Endpoints and PrivateLink 12 min
- Quiz VPC Endpoints and PrivateLink Quiz 5 questions
- Lesson Network Segmentation 12 min
- Quiz Network Segmentation Quiz 5 questions
Edge Protection
Implement edge protection with WAF, Shield, and CloudFront.
- Lesson AWS WAF Rule Configuration 12 min
- Quiz AWS WAF Rule Configuration Quiz 5 questions
- Lesson Managed Rule Groups 12 min
- Quiz Managed Rule Groups Quiz 5 questions
- Lesson AWS Shield Advanced 12 min
- Quiz AWS Shield Advanced Quiz 5 questions
- Lesson CloudFront Security 12 min
- Quiz CloudFront Security Quiz 5 questions
Network Security Services
Implement network security with AWS services.
GenAI Security
Implement protections and guardrails for generative AI applications.
Module 4: Identity and Access Management
Design and implement identity and access management solutions. (20% of exam)
IAM Policies
Design and implement IAM policies.
- Lesson IAM Policy Evaluation Logic 12 min
- Quiz IAM Policy Evaluation Logic Quiz 5 questions
- Lesson Resource-Based Policies 12 min
- Quiz Resource-Based Policies Quiz 5 questions
- Lesson Permission Boundaries 12 min
- Quiz Permission Boundaries Quiz 5 questions
- Lesson Service Control Policies 12 min
- Quiz Service Control Policies Quiz 5 questions
- Lesson Policy Conditions 12 min
- Quiz Policy Conditions Quiz 5 questions
IAM Tools and Analysis
Use IAM analysis and validation tools.
- Lesson IAM Access Analyzer 12 min
- Quiz IAM Access Analyzer Quiz 5 questions
- Lesson IAM Policy Simulator 12 min
- Quiz IAM Policy Simulator Quiz 5 questions
- Lesson Troubleshooting Access Issues 12 min
- Quiz Troubleshooting Access Issues Quiz 5 questions
- Lesson Credential Reports 12 min
- Quiz Credential Reports Quiz 5 questions
Identity Federation
Implement identity federation with external providers.
Privileged Access
Implement least privilege and privileged access management.
Module 5: Data Protection
Design and implement data protection solutions. (18% of exam)
Encryption at Rest
Implement encryption for data at rest.
- Lesson AWS KMS Architecture 12 min
- Quiz AWS KMS Architecture Quiz 5 questions
- Lesson Key Policies and Grants 12 min
- Quiz Key Policies and Grants Quiz 5 questions
- Lesson Multi-Region Keys 12 min
- Quiz Multi-Region Keys Quiz 5 questions
- Lesson S3 Encryption Options 12 min
- Quiz S3 Encryption Options Quiz 5 questions
- Lesson Database Encryption 12 min
- Quiz Database Encryption Quiz 5 questions
Encryption in Transit
Implement encryption for data in transit.
Secrets Management
Manage secrets and credentials securely.
Data Classification
Implement data classification and protection.
Module 6: Security Foundations and Governance
Design and implement security governance and compliance strategies. (14% of exam)
Multi-Account Security
Implement security governance across multiple accounts.
- Lesson AWS Organizations Security 12 min
- Quiz AWS Organizations Security Quiz 5 questions
- Lesson Control Tower Governance 12 min
- Quiz Control Tower Governance Quiz 5 questions
- Lesson Delegated Administrator 12 min
- Quiz Delegated Administrator Quiz 5 questions
- Lesson Resource Access Manager 12 min
- Quiz Resource Access Manager Quiz 5 questions
Compliance
Implement compliance monitoring and reporting.
Security Operations
Implement security operations best practices.
- Lesson Trusted Advisor Security 12 min
- Quiz Trusted Advisor Security Quiz 5 questions
- Lesson Well-Architected Security 12 min
- Quiz Well-Architected Security Quiz 5 questions
- Lesson Security Automation 12 min
- Quiz Security Automation Quiz 5 questions
- Lesson Shared Responsibility Model 12 min
- Quiz Shared Responsibility Model Quiz 5 questions
Your Progress
Spend your points to unlock real exam questions
Spend points to unlock real SCS-C03 questions.
Practice for SCS-C03Enjoying the courses?
Everything stays free. Pro shows fewer ads, doubles the points you earn on every lesson and quiz so you progress twice as fast, unlocks half of every practice exam — plus full case studies — with the Learn & Exam study modes, and lets you read each lesson on one page.
- ✓ Fewer advertisements
- ✓ 2× points per lesson & quiz
- ✓ 50% of every exam unlocked
- ✓ Learn & Exam modes
- ✓ Distraction-free lessons