AWS Certified Security Specialty (SCS-C02) Pearson Skilling Suite
COURSE DESCRIPTION
Security is a foundational aspect of cloud computing, and mastering it is essential for every AWS customer. Whether you are safeguarding sensitive data, ensuring compliance, or protecting against evolving threats, the knowledge covered in this certification is indispensable. This course has been carefully designed to help you succeed in achieving this highly respected certification. It targets the SCS-C02 version of the exam and provides a structured, comprehensive study path that aligns with the exam objectives while offering practical, real-world insights.
The goal of the course is to provide you with all tools you will need to pass the SCS-C01 exam. It includes text explanations, video demos, lab activities, self-assessment questions, and a practice exam. No matter what your current skill level, the course can help improve your chances of passing the exam on the first try and earning the AWS Certified Security – Specialty certification.
AUDIENCE
- IT professionals interested in cloud computing and want to increase their security skills
- IT professionals in charge of securing data and workloads in the AWS cloud
PREREQUISITES
- Recommended 5 years of IT security experience in designing and implementing security solutions
- At least 2 years of hands-on experience in securing AWS workloads
- A working knowledge of AWS security
COURSE OBJECTIVES
Upon successful completion of this course, students should be able to:
- Describe how to detect threats and the appropriate incident response
- Explain security logging and monitoring
- Design and implement infrastructure security concepts
- Troubleshoot identity and access management issues
- Describe how to protect data
- Explain management and security governance
REQUIRED COURSE MATERIALS
- Pearson Skilling Suite AWS Certified Security-Specialty Courseware
TRAINING OUTLINE
Lesson 1: Threat Detection and incident Response (1 hour and 24 minutes)
- Design and Implement an Incident Response Plan (48 minutes)
- Incident Response in AWS
- Preparation in Incident Response
- Deployment of Security Services in AWS
- Centralizing Security Management in AWS
- Detect and Respond to Security Incidents (1 hour and 36 minutes)
- Operations – Detection and Analysis
- Categorizing Security Alerts
- Alerting Types
- Containment, Eradication, and Recovery
- Containment Strategies
- Eradication Strategies
- Recovery Strategies
- Post-Incident Activities
- Lab
- Knowledge Check
Lesson 2: Security Logging and Monitoring (1 hour and 36 minutes)
- Security Monitoring and Troubleshooting (36 minutes)
- Implementing Monitoring and Alerting with AWS CloudWatch Alarms
- Implementing EventBridge Rules for Event-Driven Pipelines in AWS
- Automating Security Alerts in AWS
- Security Logging and Log Analysis (1 hour)
- Understanding Security Logging in AWS
- Building an Effective Security Event and Log-Driven Pipeline in AWS
- Configuring Permissions for Security Log Delivery in AWS
- Troubleshooting CloudTrail Log Delivery in Multi-Account AWS Environments
- Analyzing Security Logs in AWS
- Lab
- Knowledge Check
Lesson 3: Infrastructure Security (1 hour and 24 minutes)
- Design and Implement Edge and Network Security (48 minutes)
- Network Security at the Edge in AWS
- VPC Security in AWS
- Encrypting Data in Transit in AWS
- Protecting Network Traffic in AWS with AWS Network Firewall
- Compute Security and Security Troubleshooting (36 minutes)
- Managing Vulnerabilities on an EC2-Based Platform in AWS
- Securing Secrets and Credentials for Compute Resources in AWS
- Troubleshooting Connectivity in AWS: Methodologies and Tools
- Knowledge Check
Lesson 4: Identity and Access Management (3 hours and 48 minutes)
- Design, Implement and Troubleshoot Authentication (1 hour and 36 minutes)
- Implementing Authentication in AWS: Identity Management Principles
- AWS Identity Management Principle: Using Temporary Credentials
- Federating External Identities with Amazon Cognito
- Machine Identities
- Store and Use Secrets Securely
- Rely on a Centralized Identity Provider
- Audit and Rotate Credentials Periodically
- Leverage user Groups and Attributes
- Design, Implement, and Troubleshoot Authorization (2 hour and 12 minutes)
- AWS Policies
- AWS Well-Architected Framework: Security Pillar and Permissions Management
- The Principle of Least Privilege in AWS Permissions Management
- How AWS Determines Access An In-Depth Look
- Establishing Emergency Access Processes in AWS
- Continuously Reducing Permissions
- Defining Permission Guardrails for Your Organization
- Managing Access Based on Lifecycle
- Analyzing Public and Cross-Account Access
- Sharing Resources Securely Within Your Organization
- Sharing Resources Securely with a Third Party
- Labs
- Knowledge Check
Lesson 5: Data Protection (3 hours and 48 minutes)
- In-transit Data Protection (1 hour and 12 minutes)
- The Three Goals of Data Encryption
- Implementing Network Encryption in AWS
- Cross-region Protection
- AWS Certificate Manager (ACM)
- AWS Private CA Service
- Enforcing Data Encryption in Transit on AWS
- At-rest Data Protection (1 hour and 36 minutes)
- Protecting Data at Rest in AWS
- Protecting Data at Rest Using Encryption in AWS
- Symmetric Data Encryption in AWS
- AWS KMS
- Understanding KMS Key Types
- Managing Permissions for AWS KMS
- Encrypting Data at Rest in WS: S3 Encryption and Cloud HSM
- Protecting Data at Rest in AWS: Beyond Encryption
- Data Lifecycle, Credential, and Secret Management (1 hour)
- Data Retention Strategies
- AWS Backup
- Asymmetric Key Encryption
- Managing and Rotating Credentials and Secrets in AWS
- Secrets Manager vs SSM Parameter Store
- Labs
- Knowledge Check
Lesson 6: Management and Security Governance (2 hours and 12 minutes)
- AWS Resource Governance (1 hour and 12 minutes)
- AWS Organizations
- AWS Control Tower
- AWS Control Tower Account Factory
- AWS Resource Groups
- AWS Organizations’ Tag Policies
- AWS Firewall Manager
- AWS Security Compliance (1 hour)
- Amazon Macie
- AWS Config, CloudWatch Logs, and Security Hub
- AWS Audit Manager
- AWS Well-Architected Framework
- Cost Analysis and Anomalies
- Knowledge Check
WHY PEARSON COURSEWARE
Pearson’s courseware provides students with 180 days of on-demand access to Pearson quality text and video materials and additional learning enrichments, including labs and practice exams.
Pearson Courseware delivers a comprehensive and highly flexible instructional package, including:
- Expansive Courseware Library: 60+ courses across major tech vendors meets the majority of IT training needs with budget friendly materials and consistent student experience across all titles.
- On-Demand Student Courseware: Students have access to all content and resources for 180 days, allowing for on-demand learning, traditional or flipped classroom instructional approaches, pre-class prep, post-class review, and on the job reference.
- Exam Pass Pledge: Practice exams with unlimited Study and Exam Simulation Modes reinforce skills and fully prepare learners for the exam experience. Our Exam Pass Pledge reduces the risk of exam failures and eliminates voucher waste.
- Hands-on Labs: Available in-class and on-demand, learners can liberally practice newly acquired skills, leading to greater overall skill development and knowledge retention.
- Brandable, Customizable Instructor PPTs: Instructors can adjust the sequence and flow of the materials to suit their delivery style in the classroom.
- Skilling Suite: Admin and Instructor consoles provide class management, appropriate access, and visibility into student progress across all courseware and learning resources.
WANT TO LEARN MORE?
Visit Mindhubpro.com for a detailed course outline. Contact one of our account team members to discuss a solution that is just right for you.
