Expanded Library
AWS Certified Security – Specialty (SCS-C01)
This course is designed to help you obtain the working knowledge and skills required to sit the AWS Certified Security - Specialty exam.
What you'll learn
This course is designed to help you obtain the working knowledge and skills required to sit the AWS Certified Security – Specialty exam. Through taking this course, you will gain hands-on experience securing AWS services and environments, as well as be able to identify and evaluate security considerations and implement mitigation strategies.
Table of contents
Introduction
27mins
Identity and Access Management Domain
211mins
- IAM Refresher 10m
- Important AWS Root User Account Concepts 5m
- Exploring AWS Identities - Part 1 9m
- Exploring AWS Identities - Part 2 11m
- Granting and Denying Access via IAM Policies 14m
- Interpreting IAM Policies 13m
- Demo: Troubleshooting Conflicting IAM Policies 14m
- Demo: Setting Permissions Boundaries 14m
- Demo: Generating IAM Credential Reports 7m
- Importance of AWS Security Token Service (STS) 12m
- Demo: Using Different STS Sources 17m
- Using Web Identity Federation 8m
- Creating User Pools and Identity Pools in Amazon Cognito 11m
- Authentication with AWS Directory Service - Part 1 10m
- Authentication with AWS Directory Service - Part 2 10m
- Demo: Logging In to AWS via AWS Single Sign-On (SSO) 12m
- Leveraging AWS Organizations for AWS Account Access 16m
- Section Summary 18m
Logging and Monitoring Domain
115mins
- Logging and Metrics Using Amazon CloudWatch 15m
- Demo: Sending Custom Logs to CloudWatch 14m
- Auditing AWS Accounts with AWS CloudTrail 15m
- Demo: Examining CloudTrail Events 12m
- Logging with Amazon Kinesis and Amazon OpenSearch (Elasticsearch) 11m
- Demo: Querying Data with Amazon Athena 10m
- Demo: Enabling VPC Flow Logs Part 1 7m
- Demo: Enabling VPC Flow Logs Part 2 11m
- Continuously Auditing AWS with AWS Audit Manager 9m
- Section Summary 11m
Incident Response Domain
113mins
- Recording AWS Resource Changes with AWS Config 15m
- Demo: Analyzing Environments with AWS Trusted Advisor 10m
- Threat Detection with Amazon GuardDuty 8m
- Demo: Viewing Amazon GuardDuty Findings 5m
- Remediating Amazon GuardDuty Findings 5m
- Demo: Account Checkups with the AWS Health Dashboard 7m
- Assessing EC2 Instances with Amazon Inspector 9m
- Demo: Inspecting EC2 Instances 7m
- Automated Patching Using AWS Systems Manager 16m
- Demo: Incident Response and Recovery with AWS Systems Manager 11m
- Security Compliance Reporting Using AWS Artifact 6m
- Responding to AWS Abuse Notices 4m
- Section Summary 10m
Infrastructure Security Domain
195mins
- AWS Key Management Service (KMS) Fundamentals 14m
- Implementing Envelope Encryption with AWS KMS 8m
- Demo: Generating Data Keys for Envelope Encryption 10m
- Demo: Multi-Region Keys, Imports, and Deletion with AWS KMS 8m
- Creating More Secure Keys with AWS CloudHSM 11m
- Blocking Malicious Traffic with AWS WAF and AWS Firewall Manager 15m
- Demo: Implementing AWS WAF on Application Load Balancers 12m
- Intrusion Detection and Prevention via AWS Network Firewall 11m
- Locking Down CloudFront Distributions Integrated with Amazon S3 13m
- Securing HTTP Calls with [email protected] 11m
- Preventing DDoS Attacks with AWS Shield 7m
- Auditing Compromised Resources with AWS Security Hub 8m
- Demo: Exploring Security Scores in AWS Security Hub 5m
- Network Security via VPNs 9m
- Customizing VPCs, Routing, and Security Controls - Part 1 8m
- Customizing VPCs, Routing, and Security Controls - Part 2 11m
- Securely Connecting to VPCs 12m
- Private Service Connections via VPC Endpoints 7m
- Section Summary 15m
Data Protection Domain
84mins
- TLS Certificate Management with AWS Certificate Manager (ACM) 14m
- Secure Elastic Load Balancing (ELB) - Part 1 13m
- Secure Elastic Load Balancing (ELB) - Part 2 5m
- Demo: Deploying a TLS-Secured Application Load Balancer 9m
- Demo: Increasing Security within DynamoDB 10m
- Controlling Sensitive Data with Amazon Macie 10m
- Secure Storage with Amazon S3 14m
- Section Summary 9m
Miscellaneous Services and Concepts
49mins
Conclusion
1min