AWS Certified Security Specialty (SCS-C01)
Course Description
AWS Certified Security – Specialty (SCS-C01) is an advanced, hands-on training program designed to help cloud security professionals, architects, and engineers master the skills required to secure workloads on AWS. This course provides in-depth coverage of AWS security services, best practices, identity and access management, data protection, incident response, threat detection, and compliance—fully aligned with the competencies measured in the SCS-C01 certification exam.
You’ll explore real-world architectures and scenarios that demonstrate how to design secure cloud solutions, implement layered security controls, protect sensitive data, and build resilient infrastructures using AWS-native tools such as IAM, KMS, CloudTrail, CloudWatch, GuardDuty, WAF, Security Hub, Shield, VPC security features, and more.
Through detailed walkthroughs, hands-on labs, and scenario-based exercises, this course equips you with the practical skills needed to identify risks, remediate vulnerabilities, and operate secure environments in alignment with AWS security best practices.
What You’ll Learn
AWS security principles, shared responsibility, and risk management
Identity and Access Management (IAM), permissions boundaries, and access control
Designing secure network architectures using VPC, subnets, security groups, and NACLs
Data protection strategies using KMS, encryption at rest/in transit, and key policies
Logging, monitoring, and threat detection with CloudTrail, CloudWatch, GuardDuty, and Detective
Incident response workflows and automation using AWS tools
Application-layer protection with AWS WAF, Shield, and API Gateway security features
Governance, compliance, auditing, and continuous security posture management
Best practices for securing workloads, serverless services, containers, and multi-account environments
Who This Course Is For
Cloud security engineers and architects
Security analysts and SOC/incident response professionals
DevOps and cloud engineers responsible for securing AWS workloads
IT professionals preparing for the SCS-C01 certification
Organizations migrating applications to AWS requiring strong security architecture