Course Overview
Welcome! I'm here to help you prepare and PASS the newest AWS Certified Security Specialty exam.
I'm so excited to have you here, but first, let's make sure this AWS Certified Security Specialty course is the right one for you
[Jan 2026 Update]: The course is fully updated for SCS-C03
[Jun 2023 Update]: The course is fully updated for SCS-C02
-- -- -- -- -- -- --
**PLEASE READ**:
The course is MOSTLY SLIDES-BASED: If you're new to AWS, just finished AWS Certified Solutions Architect Associate and need to acquire some hands-on experience, I strongly recommend doing the following courses: AWS Certified Developer Associate, AWS Certified SysOps Administrator Associate, AWS Certified DevOps Engineer.
Expert course - you MUST have AT LEAST the AWS Certified Solutions Architect Associate: a lot of pre-requisite knowledge is assumed for that course. If you don't feel confident, please review the AWS Certified Solutions Architect Associate course first. Other certifications and extra-hands on experience is a huge plus.
This course is FAST-PACED: You must be ready to learn fast. I will not waste time over some basics. The slides are downloadable. I advise you to use the slides for some offline review after your session. I also recommend to not hesitate to go over some lectures you might have not understood fully.
NO PRACTICE EXAM INCLUDED: This course does not contain a practice exam. Please enroll in a separate course for that. This course focuses on teaching you the knowledge to ace the exam.
-- -- -- -- -- -- --
The AWS Certified Security Specialty certification is a fun certification and a challenging exam. It requires some substantial hands-on and real-world experience for you to pass. This course is going to help you solidify the knowledge you already have and put it in perspective through the study of various solutions architectures and services.
With the right dedication and thanks to this course, you should be prepared for your exam and maximize your chances of passing your AWS Certified Security Specialty certification!
I am dedicated to helping people pass AWS certifications on Udemy, and have been teaching about how to pass all Associate Level, Professional Level, and all Specialty certifications. People who learn with me pass their exams with great confidence!
-- -- -- -- -- -- --
Instructor
My name is Stéphane Maarek, I am passionate about Cloud Computing, and I will be your instructor in this course. I teach about AWS certifications, focusing on helping my students improve their professional proficiencies in AWS.
I have already taught 2,000,000+ students and gotten 500,000+ reviews throughout my career in designing and delivering these certifications and courses!
With AWS becoming the centerpiece of today's modern IT architectures, I have decided it is time for students to learn how to be an AWS Security Specialty expert. So, let’s kick start the course! You are in good hands!
-- -- -- -- -- -- --
This course also comes with:
Lifetime access to all future updates
A responsive instructor in the Q&A Section
Udemy Certificate of Completion Ready for Download
A 30 Day "No Questions Asked" Money Back Guarantee!
Join me in this course if you want to become an AWS Certified Security Specialty and master the AWS platform!
FAQ
FAQ area empty
Course curriculum
-
Amazon GuardDuty
239 -
Amazon GuardDuty - Findings & Automation
220 -
Amazon GuardDuty - Multi-account Strategy
191 Xem trước -
Amazon GuardDuty - Advanced
190 -
[CCP] Security Hub Overview
163 Xem trước -
Security Hub - Advanced
520 -
Amazon Detective
206 Xem trước -
Detective - Architectures
66 -
[CCP/SAA/SOA] Amazon Inspector
148 -
[SOA] Logging in AWS for Security and Compliance
165 -
[SOA] CloudWatch - Unified CloudWatch Agent - Overview
191 -
[Important] AWS Console UI Update
74 -
[SOA/DOP] CloudWatch - Unified CloudWatch Agent - Hands On
996 -
CloudWatch Unified Agent - Troubleshooting
94 -
[SAA/DVA/SOA] CloudWatch Logs
361 -
[SAA/DVA/SOA] CloudWatch Logs Hands On
530 -
[SAA/DVA/SOA] CloudWatch Alarms
253 -
[SAA/DVA/SOA] CloudWatch Alarms Hands On
278 -
CloudWatch Contributor Insights
76 -
[SAA/DVA/SOA] Amazon EventBridge
419 -
[SAA/DVA/SOA] Amazon EventBridge - Hands On
358 -
[SAA/DVA/SOA] Amazon Athena
327 -
[SAA/DVA/SOA] Amazon Athena - Hands On
340 -
Amazon Athena - Troubleshooting
85 -
[SAA] CloudTrail
342 -
[CCP/SAA/DVA/SOA] CloudTrail Hands On
90 -
CloudTrail - Data Lake
98 -
[SAA/DVA/SOA] CloudTrail - EventBridge Integration
98 -
[SOA] CloudTrail for SysOps
186 -
CloudTrail to CloudWatch Metrics Filter - Example
62 -
CloudTrail - Integration with Athena
43 -
Monitoring Account Activity
85 -
[CCP/SAA/SOA] Macie
63 -
Macie - Advanced
226 -
[SAA/DVA/SOA] S3 Event Notifications
210 -
[SAA/DVA/SOA] S3 Event Notifications - Hands On
342 -
[SAA/SOA] VPC Flow Logs
256 -
[SAA/SOA] VPC Flow Logs Hands On
611 -
VPC Flow Logs - Advanced
45 -
[SAA/SOA] VPC Traffic Mirroring
130 -
VPC Traffic Mirroring - Architectures
223 -
VPC Network Access Analyzer
135 -
Route 53 - Query Logging
138 -
[SAA] OpenSearch
231 -
OpenSearch - Advanced
191 -
Domain 1 - Quiz
-
Definitions & Terms
-
[CCP/SOA] Penetration Testing on AWS
108 -
DDoS Simulation Testing on AWS
64 -
Compromised AWS Resources
344 -
Compromised AWS Credentials
155 -
EC2 Key Pairs & Remediating Exposed EC2 Key Paris
235 -
EC2 Instance Connect
169 -
EC2 Serial Console
111 -
Lost EC2 Key Pair - Linux
302 -
Lost EC2 Key Pair - Windows
186 -
EC2 Rescue Tool for Linux & Windows
182 -
AWS Abuse Report
115 -
[SOA] Systems Manager Overview
215 -
[SOA] Start EC2 Instances with SSM Agent
211 -
[SOA] AWS Tags & SSM Resource Groups
264 -
[SOA] SSM Documents & SSM Run Command
692 -
[SOA] SSM Automations
429 -
[SAA/DVA/SOA] SSM Parameter Store Overview
256 -
[SAA/DVA/SOA] SSM Parameter Store Hands On (CLI)
415 -
[SOA] SSM Inventory & State Manager
456 -
[SOA] SSM Patch Manager and Maintenance Windows
285 -
[SOA] SSM Patch Manager and Maintenance Windows - Hands On
318 -
[SOA] SSM Session Manager Overview
167 -
[SOA] SSM Session Manager Hands On
145 -
[SOA] SSM Cleanup
20 -
Domain 2 - Quiz
-
[SAA/SOA] Bastion Host
161 -
[SAA/SOA] Bastion Host - Hands On
302 -
[SAA/SOA] NAT Gateway
227 -
[SAA/SOA] NAT Gateway - Hands On
183 -
[SAA/SOA] Site to Site VPN
237 -
[SAA/SOA] Site to Site VPN - Hands On
114 -
[CCP] Client VPN
80 -
Client VPN - Client Authentication Types
122 -
[SAA/SOA] VPC Peering
126 -
[SAA/SOA] VPC Peering - Hands On
347 -
[SOA] DNS Resolution Options in VPC
174 -
[SOA] DNS Resolution Options in VPC - Hands On
201 -
VPC Endpoints - Overview
326 -
VPC Endpoint Policies
322 -
VPC Endpoint - Examples
383 -
[SOA] PrivateLink
186 -
[SOA] PrivateLink - Hands On
73 -
[SAA/SOA] NACL & Security Groups
643 -
[SAA/SOA] NACL & Security Groups - Hands On
392 -
Security Groups Outbound Rules & Managed Prefixes
105 -
Security Groups - Extras
102 -
[SAA/SOA] AWS Transit Gateway
310 -
[SAA/SOA] Direct Connect
387 -
[SAA/SOA] Direct Connect + S2S VPN
60 -
[CCP/SAA/DVA/SOA] CloudFront Overview
322 -
[CCP/SAA/DVA/SOA] CloudFront Hands On
338 -
[SAA/DVA/SOA] CloudFront - ALB/EC2 as an Origin
156 -
[SAA/DVA/SOA] CloudFront - Geo Restriction
99 -
[DVA] CloudFront - Signed URL & Cookies
219 -
[DVA] CloudFront - Signed URL & Cookies - Hands On
284 -
[DVA] CloudFront - Field Level Encryption
132 -
CloudFront - Origin Access Control and Origin Access Identity (OAC & OAI)
119 -
CloudFront - Other
209 -
WAF - Web Application Firewall
285 -
[SAA] Shield
124 -
[SAA] AWS Firewall Manager
162 -
[SAA] WAF & Shield - Hands On
348 -
WAF - Hands On
524 -
AWS Shield Advanced - Metrics
53 -
[SAA] DDoS Attack Protection
353 -
[SAA/DVA] API Gateway
397 -
[SAA/DVA] API Gateway - Hands On
619 -
API Gateway - Advanced
182 -
[CCP/SOA] AWS Artifact
119 -
Route 53 - DNSSEC
463 -
[SAA/SOA] AWS Network Firewall
180 -
AWS Network Firewall - Advanced
220 -
Amazon SES
168 -
Domain 3 - Quiz
-
IAM Policies in Depth
389 -
IAM Condition Operators
136 -
IAM Global condition context keys
425 -
IAM Permission Boundaries
132 -
IAM Policy Evaluation Logic
353 -
Identity-Based Policies vs. Resource-Based Policies
279 -
ABAC (Attribute based access control)
219 -
IAM MFA
305 -
IAM Credentials Report
85 -
IAM Roles and PassRole to Services
131 -
IAM Roles Anywhere
206 -
IAM Trust Policies
102 -
[CCP/SAA/DVA/SOA] IAM Security Tools
54 -
[CCP/SAA/DVA/SOA] IAM Security Tools - Hands On
143 -
IAM Access Analyzer
156 -
[SOA] STS Overview
227 -
STS Version 1 & Version 2
139 -
STS External ID
218 -
STS - Revoking IAM Role Temporary Security Credentials
116 -
Sample SCP
-
EC2 Instance Metadata Overview
242 -
EC2 Instance Metadata - IMDSv1 vs IMDSv2
276 -
S3 - Authorization Evaluation Process
331 -
S3 - Cross Account Access and Canned ACL
300 -
S3 - Samples S3 Bucket Policies
87 -
S3 - VPC Endpoint Strategy
275 -
S3 - Regain Access to Locked S3 Bucket
56 -
S3 - Block Public Access Settings
54 -
[SAA/DVA/SOA] S3 Access Points
214 -
[SOA] S3 Access Points - Hands On
256 -
[SOA] S3 Multi-Region Access Points
160 -
[SOA] S3 Multi-Region Access Points - Hands On
223 -
[SAA/DVA/SOA] S3 CORS
259 -
[SAA/DVA/SOA] S3 CORS - Hands On
443 -
[SAA/DVA/SOA] S3 Access Logs
76 -
S3 Access Logs - Permissions
47 -
[SAA/DVA/SOA] S3 Access Logs - Hands On
212 -
[DVA/SOA] Cognito User Pools
205 -
[DVA] Cognito Identity Pools
440 -
Cognito User Pool User Groups
94 -
Identity Federation & Cognito
530 -
SAML 2.0 Metadata File Troubleshooting
167 -
[SAA/SOA] AWS IAM Identity Center
405 -
AWS IAM Identity Center - Extras
347 -
AWS Directory Services
790 -
Domain 4 - Quiz
-
[SAA/DVA/SOA] Encryption 101
239 -
CloudHSM
309 -
CloudHSM - Advanced
142 -
KMS
494 -
[SAA] KMS Multi Region Key
371 -
[DVA] KMS Envelope Encryption
448 -
[SOA] KMS Key Rotation
223 -
KMS Key Deletion
260 -
KMS Key Policies Deep Dive
261 -
KMS Grants
276 -
KMS Condition Keys
96 -
KMS Key Policies Evaluation Process
312 -
KMS Key Cross-Account Access
208 -
KMS Asymmetric Encryption
236 -
KMS API Calls Limits and Data Key Caching
117 -
KMS Encryption Context
98 -
KMS with EBS
124 -
EFS Encryption
47 -
KMS with ABAC
47 -
KMS with Parameter Store
89 -
[SAA] Secrets Manager
130 -
[SAA] Secrets Manager - Hands On
240 -
Secrets Manager - Advanced
270 -
[SAA/DVA/SOA] S3 Encryption
485 -
S3 Encryption Summary
77 -
[SAA/DVA/SOA] S3 Default Encryption
80 -
S3 Bucket Policies Examples
59 -
[DVA] S3 Bucket Key
173 -
Large File Upload to S3 with KMS Key
85 -
S3 Batch Encryption
71 -
[SAA/SOA] S3 Object Lock & Glacier Vault Lock
253 -
Glacier Vault Lock - Deep Dive
119 -
[SOA] Glacier Vault Lock - Hands On
237 -
[SAA/DVA/SOA] S3 Lifecycle Rules (with S3 Analytics)
260 -
[SAA/DVA/SOA] S3 Lifecycle Rules - Hands On
144 -
[CCP/SAA/DVA/SOA] S3 Replication
85 -
[CCP/SAA/DVA/SOA] S3 Replication - Hands On
389 -
[SAA/DVA/SOA] S3 Replication - Notes
57 -
RDS & Aurora Security
199 -
[CCP] Elastic Load Balancing Overview
391 -
[SAA/DVA/SOA] Network Load Balancer Overview
204 -
Network Load Balancer Advanced
187 -
[SAA/DVA/SOA] ELB Sticky Sessions
351 -
[SAA/DVA/SOA] ELB SSL Certificates
364 -
ELB - SSL Certificates - Advanced
360 -
Network Load Balancer - TLS Listeners
159 -
AWS Certificate Manager (ACM)
213 -
[DVA/SOA] AWS Certificate Manager (ACM) - Hands On
424 -
ACM - Advanced
389 -
[SAA/SOA] AWS Backup
190 -
[SAA/SOA] AWS Backup - Hands On
265 -
Amazon Data Lifecycle Manager
61 -
[DVA] AWS Nitro Enclaves
160 -
Domain 5 - Quiz
-
[SAA/SOA] Organizations
390 -
[CCP/SAA/SOA] Organizations - Hands On
599 -
[SOA] AWS Organizations - IAM Policies & Tag Policies
133 -
AWS Control Tower
229 -
[SAA/SOA] AWS Config
284 -
[SAA/SOA] AWS Config - Hands On
577 -
[SOA] AWS Config - Remediation Examples
61 -
[SOA] AWS Config - Aggregators
130 -
AWS Config - Conformance Packs
53 -
AWS Config - Organizational Rules
92 -
AWS Config - Use Cases
93 -
[CCP/SAA/SOA] Trusted Advisor + Hands On
198 -
[SAA/SOA] AWS Cost Explorer
129 -
[CCP] AWS Cost Anomaly Detection
70 -
[SAA] AWS Well-Architected Framework & Well-Architected Tool
367 -
AWS Acceptable Use Policy (AUP)
56 -
Audit Manager
173 -
[CCP/SAA] CloudFormation
211 -
[CCP/SAA] CloudFormation - Hands On
512 -
[SAA/DVA/SOA] CloudFormation - Service Role
201 -
[DVA/SOA] CloudFormation - Stack Policy
84 -
CloudFormation - Dynamic References
122 -
[DVA/SOA] CloudFormation - Termination Protection
73 -
CloudFormation - Drift
331 -
CloudFormation Guard
84 -
[CCP] AWS Service Catalog
101 -
AWS Resource Access Manager (AWS RAM)
292 -
[CCP] AWS Fault Injection Simulator (FIS)
115 -
AWS Resilience Hub
169 -
Domain 6 - Quiz
-
[SAA/DVA] Elastic Container Registry (ECR)
98 -
ECR Security
238 -
ECS Secret Management
68 -
EKS Concepts
59 -
Lambda Security
148 -
[DVA] Lambda in VPC
261 -
[DVA] Lambda in VPC - Hands On
279 -
[DVA] Lambda Function URL
235 -
[DVA] Lambda Function URL - Hands On
169 -
AWS Signer
134 -
AWS Verified Access
180 -
[SAA] Glue Overview
244 -
Glue Security
119 -
[CCP] Amazon WorkSpaces
109 -
Amazon Workspaces - Security
85 -
ASG Instance Refresh
86 -
EBS - Data Volume Wiping
51 -
CloudShell
62 -
[CCP/SOA] EC2 Image Builder
154 -
[SOA] EC2 Image Builder Hands On
716 -
EC2 Image Builder - Troubleshooting
66 -
Redshift Security
229 -
DynamoDB - Time To Live (TTL)
98 -
Other Services - Quiz
Requirment
-
MUST HAVE - AWS Certified Solutions Architect Associate
-
MUST HAVE - Real Hands-On experience with AWS
-
GOOD TO HAVE - AWS Certified Developer, SysOps & DevOps Professional to gain some hands-on experience
Outcomes
-
PASS the AWS Certified Security SPECIALTY Certification SCS-C02
-
ALL 500+ SLIDES available as downloadable PDF
-
TO THE POINT course to help you ace your exam!
-
BECOME AN EXPERT in AWS Security
Instructor
Stephane Maarek | AWS Certified Cloud Practitioner,Solutions Architect,Developer
0.0
-
0 Student
-
6 Courses
-
0 review
View Details