Course
Skills
AWS Certified Security – Specialty (SCS-C02)
This course is designed to help you obtain the working knowledge and skills required to sit the AWS Certified Security - Specialty exam.
What you'll learn
This course is designed to help you obtain the working knowledge and skills required to sit the AWS Certified Security – Specialty exam. Through taking this course, you will gain hands-on experience securing AWS services and environments, as well as be able to identify and evaluate security considerations and implement mitigation strategies.
Table of contents
Introduction
22mins
Threat Detection and Incident Response Domain
129mins
- Recording AWS Resource Changes with AWS Config 15m
- Demo: Analyzing Environments with AWS Trusted Advisor 10m
- Threat Detection with Amazon GuardDuty 8m
- Demo: Viewing Amazon GuardDuty Findings 5m
- Remediating Amazon GuardDuty Findings 5m
- Demo: Account Checkups with the AWS Health Dashboard 7m
- Assessing EC2 Instances with Amazon Inspector 9m
- Demo: Inspecting EC2 Instances 7m
- Automated Patching Using AWS Systems Manager 16m
- Demo: Incident Response and Recovery with AWS Systems Manager 11m
- Security Compliance Reporting Using AWS Artifact 6m
- Responding to AWS Abuse Notices 4m
- AWS Incident Response 10m
- Amazon Detective 5m
- Section Summary 11m
Security Logging and Monitoring Domain
114mins
- Logging and Metrics Using Amazon CloudWatch 14m
- Demo: Sending Custom Logs to CloudWatch 14m
- Auditing AWS Accounts with AWS CloudTrail 15m
- Demo: Examining CloudTrail Events 12m
- Logging with Amazon Kinesis and Amazon OpenSearch (Elasticsearch) 11m
- Demo: Querying Data with Amazon Athena 10m
- Demo: Enabling VPC Flow Logs Part 1 7m
- Demo: Enabling VPC Flow Logs Part 2 11m
- Continuously Auditing AWS with AWS Audit Manager 9m
- Section Summary 11m
Infrastructure Security Domain
218mins
- AWS Key Management Service (KMS) Fundamentals 14m
- Implementing Envelope Encryption with AWS KMS 8m
- Demo: Generating Data Keys for Envelope Encryption 10m
- Demo: Multi-Region Keys, Imports, and Deletion with AWS KMS 8m
- Creating More Secure Keys with AWS CloudHSM 11m
- Blocking Malicious Traffic with AWS WAF and AWS Firewall Manager 15m
- Demo: Implementing AWS WAF on Application Load Balancers 12m
- Intrusion Detection and Prevention via AWS Network Firewall 11m
- Locking Down CloudFront Distributions Integrated with Amazon S3 13m
- Origin Access Control (OAC) 4m
- Securing HTTP Calls with Lambda@Edge 11m
- Preventing DDoS Attacks with AWS Shield 7m
- Auditing Compromised Resources with AWS Security Hub 8m
- Demo: Exploring Security Scores in AWS Security Hub 5m
- Network Security via VPNs 9m
- Customizing VPCs, Routing, and Security Controls - Part 1 8m
- Customizing VPCs, Routing, and Security Controls - Part 2 11m
- Securely Connecting to VPCs 12m
- Private Service Connections via VPC Endpoints 7m
- AWS KMS Key Types 9m
- Web App Attacks 11m
- Section Summary 15m
Identity and Access Management Domain
208mins
- IAM Refresher 10m
- Important AWS Root User Account Concepts 5m
- Exploring AWS Identities - Part 1 9m
- Exploring AWS Identities - Part 2 11m
- Granting and Denying Access via IAM Policies 14m
- Interpreting IAM Policies 13m
- Demo: Troubleshooting Conflicting IAM Policies 14m
- Demo: Setting Permissions Boundaries 14m
- Demo: Generating IAM Credential Reports 7m
- Importance of AWS Security Token Service (STS) 13m
- Demo: Using Different STS Sources 17m
- Using Web Identity Federation 8m
- Creating User Pools and Identity Pools in Amazon Cognito 11m
- Authentication with AWS Directory Service - Part 1 10m
- Authentication with AWS Directory Service - Part 2 10m
- Demo: Logging In to AWS via AWS Single Sign-On (SSO) 12m
- Leveraging AWS Organizations for AWS Account Access 16m
- Section Summary 15m
Data Protection Domain
95mins
- TLS Certificate Management with AWS Certificate Manager (ACM) 14m
- Secure Elastic Load Balancing (ELB) - Part 1 13m
- Secure Elastic Load Balancing (ELB) - Part 2 5m
- Demo: Deploying a TLS-Secured Application Load Balancer 9m
- Demo: Increasing Security within DynamoDB 10m
- Controlling Sensitive Data with Amazon Macie 10m
- Data Lifecycle 9m
- Secure Storage with Amazon S3 14m
- Section Summary 11m
Management and Security Governance (and Miscellaneous)
56mins
- Section Overview 1m
- Controlling Access to Amazon QuickSight 7m
- Demo: Complicated KMS-Related Issues - Recovering Encrypted EBS Volumes 10m
- Parameter Store and Secrets Manager for Sensitive Data 15m
- Filtering and Rejecting EC2 Instance Traffic 3m
- Kinesis Encryption 5m
- Cross-Region Networking 5m
- Section Summary 8m
Conclusion
1min
About the author
Andru is an experienced architect and engineer who has had many years of hands on experience with numerous cloud and virtualization technologies. Learning the newest technologies is what really drives him, and it is icing on the cake that he has the ability to teach others how to use what he has learned. Teaching the skill sets he has acquired can have lasting impacts on students, and that to him is amazing.