Skip to main content
Ace Skills Consulting
Amazon Web Services (AWS) logoAdvanced

SCS-C02: AWS Security – Specialty

Secure AWS workloads end to end — detection, response, identity and data protection — and prepare for the AWS Security Specialty exam.

  • 24 hours of advanced, security-focused training
  • Hands-on threat detection and incident response
  • IAM, KMS and data protection in depth
  • Mapped to the AWS Security Specialty exam domains
  • Scenario practice with detailed explanations
Aligned to Amazon Web Services (AWS) exam SCS-C02
Duration
3 Days | 24 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Advanced
Exam
SCS-C02
Language
English

Why learn SCS-C02 with Ace Skills

  • Detect and respond

    Practise investigating findings and containing a compromised workload step by step.

  • Master IAM and KMS

    Understand exactly how policies are evaluated and how keys protect data, the two areas candidates find hardest.

  • Layered infrastructure security

    Combine edge, network and host controls into a defence-in-depth design.

  • Specialist recognition

    Prepare for a specialty certification that demonstrates deep AWS security expertise.

Course overview

Security on AWS is a shared job, and the customer’s side of that responsibility grows with every account, service and team added. Security engineers need to know how to see what is happening, respond when something goes wrong and design controls that prevent the same issue from happening again. This three-day course builds those skills with a strong practical focus.

Day one covers threat detection, incident response and logging: GuardDuty, Security Hub, Detective and Inspector, CloudTrail and centralised log architecture, and a structured incident response process for compromised credentials and instances. Day two addresses infrastructure security and identity: edge protection with WAF and Shield, network controls inside the VPC, hardening compute, and advanced IAM including policy evaluation logic, permission boundaries and cross-account access.

Day three focuses on data protection and governance. You will design encryption with KMS, including key policies and grants, manage certificates and secrets, protect S3 data with Macie and object locking, and apply governance at scale with Organizations, Control Tower and AWS Config. Labs include investigating a simulated compromise, tightening an over-permissive policy and building an encrypted, audited data store.

The final session reviews exam technique and practice scenarios. This course is aligned to the AWS Certified Security – Specialty exam and prepares you for it. AWS has been updating this exam, so confirm the current version and exam guide on the AWS Certification site before booking; we update the course to match the current outline.

Key features

  • Simulated incident investigation and containment
  • IAM policy evaluation deep dive
  • KMS key policies, grants and multi-Region keys
  • Edge and network protection labs
  • Governance at scale with Organizations and Config
  • Scenario-based practice questions
  • Course completion certificate from Ace Skills Consulting

Who should attend

  • Cloud security engineers and architects
  • Security operations analysts working with AWS
  • Solutions architects responsible for security design
  • DevSecOps engineers

Prerequisites

  • Associate-level AWS knowledge or equivalent hands-on experience
  • Understanding of security fundamentals such as encryption, identity and network security
  • Experience reading JSON policy documents

Curriculum

3 Days · 24 Hours · 9 Modules · 7 Labs

  1. Threat detection services

    • Amazon GuardDuty findings
    • AWS Security Hub and standards
    • Amazon Detective investigations
    • Amazon Inspector vulnerability scanning
    • Lab: Enable detection services across accounts and triage findings · 45 min

    Incident response

    • Incident response planning on AWS
    • Compromised credentials and access key response
    • Isolating and capturing evidence from EC2
    • Automating response with EventBridge and Lambda
    • Lab: Investigate and contain a simulated instance compromise · 60 min

    Logging and monitoring

    • CloudTrail organisation trails
    • VPC Flow Logs and DNS query logs
    • Centralised log archive design
    • Querying logs with Athena
    • Lab: Query CloudTrail logs with Athena to trace suspicious activity · 35 min

  2. Edge and network security

    • AWS WAF rules and managed rule groups
    • AWS Shield Advanced
    • Security groups, NACLs and Network Firewall
    • VPC endpoints and endpoint policies
    • Lab: Deploy AWS Network Firewall in an inspection VPC · 50 min

    Compute hardening

    • Systems Manager Session Manager instead of SSH
    • Patch compliance
    • Container image scanning
    • Instance metadata protection (IMDSv2)

    Advanced IAM

    • Policy evaluation logic
    • Permission boundaries and SCPs
    • Resource-based and cross-account policies
    • ABAC with tags
    • IAM Access Analyzer
    • Lab: Tighten an over-permissive policy with Access Analyzer · 40 min

  3. Encryption and key management

    • KMS key types, key policies and grants
    • Envelope encryption
    • Multi-Region keys and CloudHSM
    • Certificates with ACM
    • Secrets Manager rotation
    • Lab: Build an encrypted, audited data store with KMS and S3 Object Lock · 50 min

    Data protection services

    • Amazon Macie for sensitive data discovery
    • S3 Block Public Access and access points
    • Backup protection and vault lock

    Governance and exam readiness

    • Organizations, Control Tower and delegated administration
    • AWS Config conformance packs
    • Audit Manager overview
    • Timed practice set with review
    • Lab: Apply a security conformance pack with AWS Config · 30 min
Download full syllabus (PDF)

Skills you will gain

  • Amazon GuardDuty
  • AWS Security Hub
  • Incident response
  • AWS CloudTrail
  • AWS WAF
  • AWS Network Firewall
  • IAM policy design
  • AWS KMS
  • Secrets Manager
  • Amazon Macie
  • AWS Config
  • Security governance

Tools & technologies

  • AWS Management Console
  • AWS CLI
  • Amazon Athena
  • IAM Policy Simulator
  • IAM Access Analyzer
  • AWS Systems Manager

Certification exam

Exam details
Exam nameAWS Certified Security – Specialty
Exam codeSCS-C02
Voucher includedNo — book directly with the vendor
DeliveryOnline proctored or Test centre

Skill areas measured

  1. Threat Detection and Incident Response
  2. Security Logging and Monitoring
  3. Infrastructure Security
  4. Identity and Access Management
  5. Data Protection
  6. Management and Security Governance

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking.

Schedule & Pricing

Live Online

Individual

Price on request

  • 24 hours of live, trainer-led sessions
  • 7 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 1 · 60 min

    Investigate and contain a simulated instance compromise

  • Day 3 · 50 min

    Build an encrypted, audited data store with KMS and S3 Object Lock

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The Amazon Web Services (AWS) certification itself is awarded by Amazon Web Services (AWS) when you pass exam SCS-C02.

Frequently asked questions

Which version of the Security Specialty exam does this cover?

The course is mapped to the current exam guide. AWS has been revising this exam, so check the AWS Certification site for the active version before booking; we update the course when the outline changes.

Do I need an associate certification first?

It is not mandatory, but associate-level knowledge and some hands-on security work on AWS make the course far more productive.

Is the course useful for SOC analysts?

Yes. The detection and incident response day is especially relevant for analysts who investigate AWS alerts.

How much hands-on work is there?

Every day includes labs, including a simulated compromise that you investigate and contain.

Can you run this for our security team?

Yes. Private batches can align exercises with your detection tools and incident response playbooks.

Related courses

Explore more

All AWS courses Amazon Web Services (AWS) certifications

Amazon Web Services, AWS and the related marks are trademarks of Amazon.com, Inc. or its affiliates.

Train your team on SCS-C02

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.