AWS Certified Security – Specialty (SCS-C01) Certification Training

About Course

The AWS Certified Security – Specialty (SCS-C01) Certification Training equips individuals with advanced skills in securing applications and data within the Amazon Web Services (AWS) environment. This comprehensive course covers various security aspects, including identity and access management, encryption, incident response, and compliance. Participants gain expertise in designing and implementing secure solutions, assessing risk, and protecting AWS resources from potential threats. Successful completion of the certification validates proficiency in securing AWS workloads, making certified individuals valuable assets in safeguarding cloud infrastructures and data.

Course Content

Module 1

1.01 Cloud Security fundamentals
08:46
1.02, 1.03, 1.04 AWS security model, Shared Responsibility, Exam outline
07:49
Quiz Module- 01
Section 1: Short Answer Questions
Section 2: Scenario-Based Questions
Section 3: Practical Task

About Course

What Will You Learn?

Course Content

Module 1

1.01 Cloud Security fundamentals

1.02, 1.03, 1.04 AWS security model, Shared Responsibility, Exam outline

Quiz Module- 01

Section 1: Short Answer Questions

Section 2: Scenario-Based Questions

Section 3: Practical Task

Module 2

2.01 Given an AWS abuse notice, evaluate the suspected compromised instance or exposed access keys

2.02 Preparation stages for incident response

2.03 Mitigation steps to perform Incident response steps

2.04 Verify that the Incident Response plan includes relevant AWS services

2.05 Dealing with exposed access keys

2.06 Evaluated suspected compromised EC2 Instances

2.07 Evaluate the configuration of automated alerting, and execute possible remediation of security-related incidents and emerging issues

2.08 AWS Guard duty

2.09 Penetration testing

Quiz Module- 02

Section 1: Short Answer Questions

Section 2: Scenario-Based Questions

Section 3: Practical Task

Module 3

3.01,3.02 Design and implement security monitoring and alerting, Design and implement a logging solution

3.03, 3.04 Continuous Security Monitoring, Introduction to Vulnerability Assessment

3.05, 3.06 AWS Inspector, AWS Inspector Assessment targets

3.07 AWS EC2 systems manager

3.08 AWS Config (1)

3.09 Understanding CloudWatch

3.10 VPC Flow Logs

3.11 CloudWatch Events

3.12 AWS Cloud Trail

3.13 AWS Macie

3.14 AWS Detective

3.15 AWS Security Hub

3.16 S3 Event notifications

3.17 Trusted advisor recommendations

3.18, 3.19 Troubleshoot security monitoring and alerting, Troubleshoot logging solutions

Quiz Module- 03

Module 4

4.01 Design edge security on AWS

4.02 Design and implement a secure network infrastructure

4.03 AWS Organizations

4.04 Managing OUs

4.05 CloudFront

4.06 AWS CloudFront Custom SSL

4.07 Firewalls

4.08 Security groups

4.09 Network ACLs

4.10 IPS-IDS concepts in cloud

4.11 AWS Web Application Firewall (WAF)

4.12 AWS Shield concepts

4.13 DDoS Mitigation

4.14 Network Segmentation

4.15 Bastion Hosts

4.16 Virtual Private Cloud (VPC)

4.17 VPC Endpoints

4.18, 4.19 EC2 Tenancy, Compliance Frameworks

4.20 AWS lambda fundamentals

4.21 AWS Simple Email Service

4.22 AWS Route53 DNS

4.23 Troubleshoot a secure network infrastructure

4.24 Design and implement host-based security

Module 5

5.01 Design and implement a scalable authorization and authentication system to access AWS resources.

5.02 Understand the Principle of Least Privilege

5.03 IAM Policies

5.04 IAM JSON Policy Elements

5.05 IAM Roles

5.06 IAM Permission boundaries

5.07 Evaluating effective permissions

5.08 Understanding Delegation

5.09 Cross account policies & roles

5.10 Understanding Federation

5.11 AWS Directory services

5.12 AWS Organizations

5.13 Single Sign-On

5.14 SAML Overview Concepts