Toggle Side Panel

Close search
Back to Course

AWS Certified Security Specialty Course

0% Complete
0/0 Steps

  1. About the course and exam

    About this course (please watch)
  2. About the exam
  3. [Cheat Sheet] Services you need to focus on learning
  4. Course resources and downloads
  5. Tips & tricks from learners who passed the exam
  6. Getting Started
    Our community
  7. Create and configure your AWS account
  8. Secure the root user
  9. Set up Budget Alarms
  10. Install tools and configure your machine
  11. Centrally deploy and manage AWS accounts
    The AWS SRA Project
  12. AWS Organizations
  13. About SCPs
  14. Deploying SCPs
  15. Testing SCPs
  16. Resource Control Policies (RCPs)
  17. AWS Control Tower
  18. [Quiz] Centrally deploy and manage AWS accounts
  19. Tagging best practices
  20. Design, implement, and troubleshoot authorization for AWS resources
    What are IAM roles?
  21. Managed vs. Inline Policies
  22. [Cheat Sheet] Anatomy of an IAM Policy
  23. Identity-based policies vs. resource-based policies
  24. IAM permissions boundaries
  25. Session control policies
  26. Policy evaluation flow
  27. Common policy conditions
  28. [Quiz] IAM Policies Roles and Permissions in AWS
  29. Trusted Entity Types
  30. Creating a service role
  31. Service-linked roles
  32. Cross-account access with roles
  33. [Quiz] Cross account access
  34. Cross-account roles for 3rd party access (prevent confused deputy)
  35. ABAC and RBAC for access control
  36. IAM Roles Anywhere
  37. [Quiz] IAM Advanced Access Control
  38. Design, implement, and troubleshoot authentication for AWS resources
    IAM Users vs. Identity Center Users
  39. Enable Identity Center (SSO)
  40. [Cheat Sheet] IAM Identity Center
  41. Delegating administration of Identity Center
  42. Creating permission sets (roles) from delegated admin
  43. Assuming roles created through Identity Center
  44. Centrally managing root access
  45. IAM Credentials Report
  46. AWS Directory Service
  47. About Amazon Cognito
  48. [Quiz] AWS Identity Center and Federated Access Management
  49. AWS security tools and services
    AWS Trusted Advisor
  50. About AWS CloudTrail
  51. Management, Data, and Insights Events
  52. The 3 ways of recording data
  53. [Cheat Sheet] CloudTrail Events and Data Recording
  54. Log file integrity
  55. Log file encryption
  56. Deploying AWS CloudTrail Organization Trail
  57. Centralized CloudTrail Lake for Incident Response
  58. [Quiz] CloudTrail Security and Logging
  59. About Amazon CloudWatch
  60. About Amazon GuardDuty
  61. [LAB] Amazon GuardDuty Demo
  62. Delegating and Centralizing GuardDuty
  63. Amazon EventBridge
  64. Amazon Detective
  65. Delegating and Centralizing Detective
  66. [LAB] Amazon Inspector
  67. About AWS Security Hub CSPM
  68. Delegating and Centralizing Security Hub CSPM
  69. [Quiz] Security Monitoring and Threat Detection
  70. Amazon S3 Security
    Managing access to S3 buckets
  71. [Cheat Sheet] S3 Bucket Policies vs. ACLs vs. IAM Policies
  72. [LAB] [Challenge] Create an IAM role for secure access to S3 based on a scenario
  73. Using Signed URLs
  74. [LAB] S3 Presigned URLs
  75. [Quiz] S3 Access Control
  76. Encrypting S3 data
  77. [Quiz] S3 Data Encryption
  78. S3 Access Points
  79. S3 Access Grants
  80. [Quiz] Managing S3 Access at Scale
  81. IAM Access Analyzer for S3
  82. S3 CORS
  83. [DEMO] Enable S3 Object Versioning
  84. S3 Object Lock
  85. [Cheat Sheet] Amazon S3 Protection Summary
  86. [Cheat Sheet] Create a least privilege S3 bucket policy
  87. [Quiz] Protecting S3 Data
  88. Amazon S3 Storage Classes
  89. Amazon S3 Glacier
  90. [Quiz] S3 Storage Classes
  91. Protecting data, credentials, and secrets
    AWS KMS
  92. The lifecycle of a KMS key
  93. Cross-account and multi-region keys
  94. Key aliases
  95. [DEMO] Creating a Symmetric Encryption KMS Key
  96. [Cheat Sheet] Encrypt and Decrypt Data with KMS and Data Keys
  97. [LAB] Encrypt and Decrypt Data with KMS and Data Keys
  98. [Scenario] [FREE] S3 bucket access denied issues
  99. Imported keys and external key stores
  100. Monitoring keys and encryption
  101. EBS Volume Encryption
  102. Amazon Elastic File System (EFS)
  103. AWS Secrets Manager
  104. Rotating secrets
  105. Replicate secrets across regions
  106. Cross-account secrets access
  107. AWS Systems Manager Parameter Store
  108. Securing Amazon RDS
  109. [LAB] Encrypting an unencrypted RDS database
  110. Creating and managing certificates
  111. Data replication and backups
  112. GenAI Security Controls in AWS and OWASP Top 10
  113. Secure and consistent deployment strategy for cloud resources
    About AWS CloudFormation
  114. Deploying resources with CloudFormation
  115. Multi-account and multi-region deployments
  116. Detecting and fixing drift
  117. [LAB] CloudFormation Guard
  118. [Quiz] CloudFormation
  119. Using AWS Service Catalog - Part 1
  120. Using AWS Service Catalog - Part 2
  121. About AWS Firewall Manager
  122. Using AWS RAM to share resources across accounts
  123. [Quiz] Service Catalog and Firewall Manager
  124. Security tools for code vulnerabilities
  125. Compliance and automatic remediation of AWS resources
    About AWS Config
  126. Delegating AWS Config
  127. AWS Config Initial Setup
  128. About AWS Systems Manager (SSM)
  129. AWS Config Automated Remediation with SSM
  130. [LAB] Automated S3 Remediation to Enforce Block Public Access
  131. [LAB] Remediate Open SSH Security Groups with AWS Config and SSM
  132. Monitoring AWS Config with EventBridge
  133. Customizing and monitoring EventBridge rules
  134. Transforming events with EventBridge
  135. Multi-account AWS Config
  136. AWS Config Aggregators and Advanced Queries
  137. AWS Config Multi-Account Conformance Packs
  138. [Quiz] AWS Config and EventBridge
  139. AWS SSM Patch Manager and Run Command
  140. About Amazon Macie
  141. Deploying Amazon Macie
  142. About AWS Audit Manager
  143. Running assessments with Audit Manager
  144. Evidence and generating reports with Audit Manager
  145. AWS Artifact
  146. About Amazon SNS for Data Protection
  147. [Quiz] Macie, SNS, and Audit Manager
  148. Securely deploying and accessing compute resources
    VPCs and their components
  149. [LAB] [DEMO] Launch and connect to EC2 instances
  150. SSM Session Manager
  151. [LAB] Secure EC2 Access with SSM Session Manager and KMS
  152. Hardening EC2 AMIs and Container Images
  153. [Quiz] Securely deploying and accessing compute resources
  154. Elastic Load Balancers
  155. ELB Health Checks and Encryption
  156. ELB Logging and Metrics
  157. VPC Endpoints and AWS PrivateLink
  158. AWS hybrid and remote connectivity
  159. Amazon VPC Network Access Analyzer
  160. Code Signing with AWS Signer
  161. Design, Implement, and Troubleshoot CloudWatch Logging
    Centralized CloudWatch Logging
  162. Configure the Amazon unified CloudWatch agent
  163. [LAB] Install and Configure the Amazon CloudWatch Unified Agent on EC2
  164. CloudWatch Logs data protection policies
  165. [LAB] Protect CloudWatch Logs data with masking policies
  166. [Cheat Sheet] Troubleshoot CloudWatch Agent configurations
  167. [Quiz] CloudWatch logging
  168. Working with security logs
    [LAB] Amazon VPC Flow Logs
  169. Transit Gateway Flow Logs
  170. Amazon Route 53 Resolver query logs
  171. [DEMO] Enable S3 Server Access Logs
  172. [LAB] S3 Server Access Logs – AWS Console
  173. [LAB] S3 Server Access Logs – CLI
  174. [Quiz] Network Flow Logs and Access Logs
  175. About Athena
  176. [DEMO] Using Athena with CloudTrail logs
  177. About AWS Glue
  178. Amazon Security Lake
  179. [DEMO] Enable Amazon Security Lake
  180. [DEMO] Querying Security Lake data with Athena
  181. Amazon OpenSearch
  182. Amazon Managed Grafana
  183. [Quiz] Security Log Analysis and Visualization
  184. Infrastructure, Network, and Edge Security
    About Amazon CloudFront
  185. CloudFront Origin Access Control (OAC)
  186. CloudFront and Geo Restrictions
  187. CloudFront Headers
  188. CloudFront Logging
  189. CloudFront Signed URL and Cookies
  190. CloudFront Field-Level Encryption
  191. AWS WAF and Rate Limiting
  192. About the AWS WAF
  193. AWS Shield Advanced
  194. API Gateway Security
  195. [LAB] API Gateway Lambda Authorizer Bypass
  196. Design and implement an incident response plan
    Incident response planning basics for AWS
  197. Automating Incident Response in AWS
  198. Playbooks and runbooks
  199. [Cheat Sheet] The 6 phases of IR mapped to AWS services
  200. [Checklist] AWS Incident Response Planning Checklist
  201. [Quiz] Incident response planning
  202. Incident containment in AWS
  203. [Quiz] Choosing the Right EC2 Containment Layer
  204. Test and validate your Incident Response plans
  205. Detect security threats and anomalies
    About IAM Access Analyzer
  206. IAM Access Analyzer Unused Access
  207. [LAB] Check policies for new access before deployment with IAM Access Analyzer
  208. [LAB] Check IAM policies against a deny list with IAM Access Analyzer
  209. Deploying Access Analyzer Multi-Account
  210. [Quiz] IAM Access Analyzer
  211. [Scenario] Alert and monitoring for all root activities
  212. [LAB] Security Observability with CloudWatch Dashboards
  213. Respond to compromised resources and workloads
    [LAB] Automated security response with EventBridge and Lambda
  214. Incident management with SSM OpsCenter and Explorer
  215. Using Step Functions for Automated Security Workflows
  216. Automatically remediating incidents
  217. Using SageMaker AI Notebooks for Incident Response
  218. [Quiz] Automatically remediate incidents
  219. Practice Exams
    Where can I find the practice exams?
  220. Live Practice Exams Study Group Session 1
  221. Live Practice Exams Study Group Session 2
  222. Conclusion
    What to do once you pass the exam
  1. AWS Certified Security Specialty Course
  2. About this course (please watch)
Lesson 1 of 222
In Progress

About this course (please watch)

Christophe
Christophe January 2, 2024

Hi, I’m Christophe Limpalair, Founder & Trainer at Cybr. This course is going to be a collection of 9+ years’ worth of AWS experience, as well as my research, notes, cheat sheets, labs, and everything else I could muster up to help you pass your exam.

Huge thanks to Sonrai Security for sponsoring this course!

I was able to make this entire course free thanks to our sponsor, Sonrai Security. They’re supporting free, high-quality cloud security education, and they made it possible for me to publish all of these lessons openly.

I’ll share more about their Cloud Permissions Firewall and Just-In-Time access throughout the course, but in the meantime you can check them out here!

What’s free and what’s not

This course has:

  • Video & text lessons (with full transcripts) (this is all free thanks to Sonrai)
  • Hands-On Labs (a few are free but most are premium)
  • Quizzes (a few are free but most are premium)
  • Practice exams (premium)
  • Study tips and tricks (free)
  • Cheat sheets (free)

The video and text lessons are available for free. The labs, quizzes, and practice exams are available to Cybr Premium Members. There are a few exceptions since we have a few free labs and quizzes sprinkled throughout the syllabus, but most will require a membership (either monthly or yearly) to access.

FAQs

Some frequently asked questions:

  • Do I need a premium membership to pass my exam? Nope! We designed as much free content as possible to help you pass the exam without having to have a Cybr Premium membership. With that said, you might still want to consider a membership to access our premium version of this course. This Premium Edition is designed for professionals who want to learn AWS security in practice, not just theory. It will also give you a lot more practice with quizzes and practice exams.
  • Why can’t I mark a lesson as complete? Lessons that have videos require that you watch the video in order to be able to mark them as complete. If the “Mark Complete” button is missing, that’s why!
  • What prerequisites do I need? We highly recommend having at least 1 year of experience working in AWS. This is not an entry level certification, and that’s important to keep in mind. If you’re not already at least a little bit familiar with the AWS CLI, what a VPC is, what an AWS Organization is, etc…then we do not recommend enrolling in this course right now. Instead, go for the AWS Cloud Practitioner or AWS Certified Solutions Architect – Associate first, and then come back to this. Our Intro to AWS Security course is also a great starting point.

Let’s get started!

If you know anyone else studying for this cert or interested in passing it, don’t forget to share with them!

Otherwise, let’s get AWS Security Specialty Certified! See you in the course.

Responses

Your email address will not be published. Required fields are marked *

  2. iceberg07 January 4, 2024

    I’m preparing for SCS-C02 as well.
    I’ve been working relatively in a good pace, but that has been disturbed over the Christmas and New Year. Now I need to get back on track and prepare well for my soon to be exam!

  3. lmcybr2024 January 14, 2024

    Hello everyone, Glad to be here and to take part of this journey.
    I’m preparing for SCS-C02 as well and will be more than happy to learn and share with you all 🙂.

    1. Christophe September 26, 2024

      Hey welcome to Cybr! Please keep in mind this course is in very early stages and still in active development. We’ve got quite a bit of content coming for it soon, including videos 🙂 happy learning!

  23. asayed February 11, 2025

    I successfully passed the previous version of this certification (Security Specialty) in early 2021, but it has now lapsed. Since taking the exam my role at work took me into a different direction, – to GCP Cloud, and I’ve taken and passed almost all GCP certification except 1. I’m now thinking about retaking this exam. I still have my notes from the previous version. Is there much difference this version and the previous version? I’m thinking of saving time and only going through the delta that has changed.

  29. chadjsdev May 14, 2025

    Been thinking about looking into this cert for about 6 months. This course may have just solidified my choice. Thank you!

  34. jesusjammaita May 29, 2025

    Thank you very much Chris for taking your time and creating this course I want to prepare for this certification, therefore I will encourage while studying with your material

  39. Mohamed June 11, 2025

    Thank you, Christophe, for this content, which I find both interesting and informative.
    The course was created on October 10, 2024, and many sections are still in the process of being developed or completed.
    Do you have an estimated date for when the full course will be available?

  49. xtofor August 1, 2025

    Does the premium AWS Certified Security Specialty and the free version become linked like the experience is one course?

  52. bluesentinel November 27, 2025

    Hello everyone, excited to join this journey toward the AWS Security Specialty (SCS-C02) certification, ready to learn, share, and grow together with the community.

  53. rkg December 1, 2025

    I am a DevSecOps engineer currently preparing for SCS-C03. Hoping to give the certification within a month. I was looking for resources to prepare and came upon this course. Thanks for offering this course.

  54. lionelpj January 13, 2026

    I am preparing for SCS-C03 as its my certification renewal time.

    PS: I have been following you since you were in Linux Academy and check your posts on LinkedIn from time to time.

    1. Christophe January 13, 2026

      This just made my day! Love to see Linux Academy folks here! You should DM me on LinkedIn so we can catch up and I can see what you’re up to 🙂

    1. Christophe February 3, 2026

      I covered this in the video 🙂 please watch! But no, this course and certification exam is NOT for absolute beginners to AWS/cloud. I would recommend starting with our other courses first

  61. kayazar February 28, 2026

    Hi Could you please let me know the answer for the following questions?
    is this course is completed one or still in progress? if it is still in progress how long will it takes?

Report

Harassment or bullying behavior
Contains mature or sensitive content
Contains misleading or false information
Contains abusive or derogatory content
Contains spam, fake content or potential malware

Block Member?

Please confirm you want to block this member.

You will no longer be able to:

  • See blocked member's posts
  • Mention this member in posts

Please allow a few minutes for this process to complete.

Report

You have already reported this .