Detect threats and respond to incidents
Review managed findings, investigate vulnerable workloads, and connect security events to automatic containment.
Prepare with practical AWS security work
AWS Certified Security Specialty Hands-On Labs
Prepare for the certification and build practical AWS security skills. Work through threat detection, logging, infrastructure, identity, data protection, and governance scenarios.
Premium membership required
70,000+ people learn with Cybr
- Real AWS environments
- Skills across exam areas
- No cloud bill
Choose a featured certification lab
Prepare for the certification with practical AWS security work
Work through threat detection, incident response, security monitoring, network controls, identity, and encryption in real AWS environments.
PremiumThreat detectionAmazon GuardDuty Sandbox
Explore Amazon GuardDuty findings in a safe AWS environment.
Open lab
PremiumIncident responseAutomated Security Response with EventBridge and Lambda
Detect suspicious IAM activity and automate containment with AWS services.
Open lab
PremiumLogging and monitoringSecurity Observability with CloudWatch Dashboards
Turn CloudTrail activity into a CloudWatch security dashboard.
Open lab
PremiumInfrastructure securityConfigure Security Groups (SGs) and NACLs
Control network traffic with security groups and network access control lists.
Open lab
PremiumData protectionEncrypt and Decrypt Data with KMS and Data Keys
Encrypt data with AWS KMS, customer-managed keys, and data keys.
Open lab
AWS Security Specialty skill areas
Build practical AWS security skills
Build skills in detection, response, logging, monitoring, infrastructure protection, access control, encryption, and security governance.
Build security logging and monitoring
Collect host and network activity, then turn AWS records into dashboards and useful security signals.
Protect AWS infrastructure
Control network paths, protect web workloads, and find exposed services before attackers do.
Manage identity and access
Review credential status, create controlled service access, and assess policy changes before deployment.
Protect data with encryption
Use AWS key management and service controls to protect application, database, and object-storage data.
Apply security governance
Set policy checks, enforce access rules, and automate fixes for unsafe cloud settings.
Free cheat sheets
AWS Security Specialty cheat sheets and study references
Review SCS-C03 exam topics and key concepts in AWS identity, network security, logging, and encryption.
- AWS Security Specialty SCS-C03 exam reference
In-scope AWS services, features, concepts, and tools for the SCS-C03 exam.
- AWS native security services cheat sheet
Compare the roles of services used for identity, threat detection, infrastructure protection, and data security.
- AWS IAM policy anatomy cheat sheet
Policy syntax, role trust relationships, and cross-account access explained with annotated JSON examples.
- Security groups vs. NACLs cheat sheet
Compare statefulness, rule behavior, and scope for the two types of VPC network controls.
- KMS encryption and data keys cheat sheet
Encryption and decryption workflows using KMS keys and data keys.
- AWS CloudTrail security controls checklist
Logging coverage, encryption, log file validation, and monitoring controls for protecting CloudTrail evidence.
How the labs work
Prepare with real AWS security tasks
Cybr prepares the AWS environment for each lab. You can focus on practical security work instead of account setup, billing, and cleanup.
- Step 01
Choose a skill area
Choose a lab that matches the next part of your study plan.
- Step 02
Launch the environment
Get the AWS resources, access, tools, and instructions that the scenario requires.
- Step 03
Complete the security task
Apply the control, investigate the activity, and review why the result matters.
Isolated AWS training environments
Practice without changing personal or company resources. Cybr provides the lab environment and covers its AWS costs.
Follow a complete study plan
Connect hands-on labs to certification preparation
Use the Security Specialty path to organize your study. Use the Blue Team path to deepen practical detection, response, and governance skills.
- AWS Certified Security Specialty
Follow a structured plan through AWS security lessons, labs, quizzes, and practice exams.
- AWS Blue Team
Build practical skills in monitoring, detection, incident response, security automation, and governance.
Before you start
AWS Security Specialty hands-on lab FAQ
Do I need a Premium membership?
Yes. The featured certification labs require Premium membership. Access requirements appear on each featured lab.
Do I need my own AWS account?
No. Cybr supplies the AWS environment and lab access. Your personal and company AWS accounts stay separate.
Does this page depend on one exam version?
No. The page focuses on durable AWS security skills instead of a version number. Review the current AWS exam guide before scheduling your exam.
What certification skills can I practice?
Labs cover threat detection, incident response, security logging, monitoring, infrastructure protection, IAM, encryption, and governance.
How much AWS experience do I need?
Start with AWS and security foundations if these services are new to you. The labs then build practical experience across major security tasks.
Will AWS charge me for the lab resources?
No. Cybr provides the AWS environment, covers its cloud costs, and removes the resources after your session.
Start practicing AWS Security Specialty skills
Investigate GuardDuty findings in a guided AWS environment, then continue through response, monitoring, infrastructure, identity, encryption, and governance scenarios.
Premium membership required