AWS Security Specialty SCS-C02: Complete Exam Prep 2026

AWS Certified Security – Specialty (SCS-C02) | Complete Exam PrepAre you ready to become a certified AWS Security professional? This course is a complete, hands-on preparation guide for the AWS Certified Security – Specialty (SCS-C02) exam — one of the most respected and highest-paying certifications in cloud security today. Whether you're a cloud engineer, DevOps professional, or an experienced security practitioner moving into AWS, this course walks you through every exam domain with clear explanations, real-world scenarios, and practical AWS console demonstrations.

---What Makes This Course DifferentThis course was built by an instructor who holds OSCP, CEH, and CISA certifications — so you don't just learn what AWSsecurity services do, you learn how attackers very concept is tied to real-world cloud attackpatterns and defensive architecture. ---Course ModulesModule 0 – Course Introduction & Exam OverviewUnderstand the SCS-C02 exam structure, domains, question types, and how to use this course effectively to pass on yourfirst attempt. Module 1 – AWS Security FundamentalsReview core AWS concepts critical to security: the shared responsibility model, AWS global infrastructure, regions,availability zones, and the AWS Well-ArchitectModule 2 – Identity and Access Management (IAMMaster IAM users, groups, roles, and policies.

Understand permissions boundaries, policy evaluation logic, service control policies (SCPs), and cross-account access pattModule 3 – Advanced IAM & Identity FederationExplore AWS IAM Identity Center (SSO), SAML 2. 0, OIDC federation, Cognito user pools and identity pools, andattribute-based access control (ABAC). Module 4 – Data Protection & EncryptionLearn AWS Key Management Service (KMS) — CMKs, key policies, grants, and envelope encryption.

Cover S3 server-sideencryption (SSE-S3, SSE-KMS, SSE-C), client-sior dedicated hardware security modules. Module 5 – Secrets and Certificate ManagementDeep dive into AWS Secrets Manager, Systems Manager Parameter Store, and AWS Certificate Manager (ACM). Learn rotationstrategies, cross-account secret sharing, and management.

Module 6 – Network Security & Infrastructure PDesign secure VPC architectures with security groups, NACLs, VPC Flow Logs, and PrivateLink. Implement AWS WAF, ShieldStandard and Advanced, AWS Firewall Manager, aed perimeter defense. Module 7 – DDoS Mitigation & Edge SecurityUnderstand DDoS attack categories and how AWS Shield Advanced, CloudFront, Route 53, and Global Accelerator work togetherto absorb and deflect volumetric attacks.

Module 8 – Threat Detection with Amazon GuardDConfigure GuardDuty findings, suppression rules, and multi-account management with AWS Organizations. Integrate GuardDutywith EventBridge, Lambda, and Security Hub forows. Module 9 – Security Logging & MonitoringSet up comprehensive logging with CloudTrail (management and data events), CloudWatch Logs, VPC Flow Logs, and S3 serveraccess logs.

Build security dashboards and alaModule 10 – Amazon Macie & Data ClassificationUse Macie to automatically discover and protect sensitive data (PII, financial records) in S3. Configure custom dataidentifiers, findings, and automated remediatiModule 11 – Vulnerability Management with AmazDeploy Inspector v2 for continuous EC2 and container vulnerability scanning. Understand CVE prioritisation, integrationwith ECR, and automated patching workflows usiModule 12 – AWS Security Hub & Centralized VisAggregate findings from GuardDuty, Inspector, Macie, and third-party tools into Security Hub.

Configure security standards(CIS AWS Foundations, AWS Foundational Securitutomated response workflows. Module 13 – Incident Response on AWSBuild an incident response plan aligned to the NIST framework using AWS-native tools. Practice containment via IAM policyrevocation, EC2 isolation, snapshot forensics, techniques.

Module 14 – Compliance, Governance & AuditingUse AWS Config rules and conformance packs to enforce compliance continuously. Cover AWS Audit Manager, AWS Artifact, andhow to demonstrate compliance for PCI-DSS, HIPModule 15 – Securing Compute & ContainersHarden EC2 instances with Systems Manager Session Manager, patch baselines, and IMDSv2. Secure containerised workloads onECS and EKS with IAM roles for service account ECR image scanning.

Module 16 – Exam Strategy, Practice & Final ReWalk through all five SCS-C02 exam domains with a structured final review, exam-day tips, question dissection strategies,and a full-length practice session targeting t---By the end of this course you will be able to:- Architect and implement end-to-end AWS secur- Configure every major AWS security service with confidence- Detect, investigate, and respond to cloud se- Pass the AWS Certified Security – Specialty (SCS-C02) exam---Who This Course Is For:Cloud engineers, DevOps professionals, IT security practitioners, and anyone pursuing the AWS Security Specialtycertification.