AWS Security Specialty (SCS-C03) study guide

26 lectures across 6 domains. Each one has diagrams, exam traps, quizzes and questions from your mock exams. Tick a lecture when you finish it.

Domain 1Detection16%

  1. Day 1Monitoring and alerting foundations
  2. Day 2Threat detection and automated assessments
  3. Day 3Logging solutions: CloudTrail, CloudWatch Logs, Security Lake and network logs
  4. Day 4Analysing logs and troubleshooting monitoring

Domain 2Incident Response14%

  1. Day 1Plan, prepare and test incident response
  2. Day 2Automated remediation and forensics
  3. Day 3Responding to security events

Domain 3Infrastructure Security18%

  1. Day 1Edge security: CloudFront, WAF and Shield
  2. Day 2Network controls and segmentation
  3. Day 3Hybrid connectivity and finding unneeded network access
  4. Day 4Hardening and accessing compute
  5. Day 5Vulnerability scanning, secure pipelines and GenAI guardrails

Domain 4Identity and Access Management20%

  1. Day 1IAM building blocks and the policy language
  2. Day 2How AWS decides: policy evaluation logic
  3. Day 3Temporary credentials, roles and trust
  4. Day 4Human identities: sign-in, federation and MFA
  5. Day 5Access control models: RBAC, ABAC, paths and Cedar
  6. Day 6Troubleshoot access and prove least privilege

Domain 5Data Protection18%

  1. Day 1AWS KMS foundations: keys, envelopes and key policies
  2. Day 2Key material, HSMs, multi-Region keys and certificates
  3. Day 3Data at rest, integrity, retention and backup
  4. Day 4Data in transit: TLS, private paths and inter-node encryption
  5. Day 5Secrets, rotation and data masking

Domain 6Security Foundations and Governance14%

  1. Day 1AWS Organizations and Control Tower
  2. Day 2Secure, consistent deployment across accounts
  3. Day 3Evaluating compliance: Config, Security Hub CSPM, evidence and reviews