ITP-SCS-C01.AA1
AWS Certified Security Specialty
Self-paced · 1 year access
37 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
01 / Lessons & labs
See exactly what you will learn and practice
Lessons
11 Interactive Lessons · 70 topics01 AWS CERTIFIED SECURITY - SPECIALTY BASICS 4 topics +
- Introduction to Security
- Exam Details
- Course Scope Details
- Certification Candidate Skills
02 INCIDENT RESPONSE 8 topics +
- Abuse Notice Strategies
- Incident Response Basics
- IR Preparation
- IR Detection & Analysis
- IR Containment Eradication & Recovery
- IR Post-Incident Activity
- Case Study: Compromised EC2
- Question Breakdown
03 SECURITY MONITORING 6 topics · 4 LiveLab +
- Infrastructure Security Monitoring
- Application Security Monitoring
- Account Security Monitoring
- Troubleshooting Security Monitoring
- Case Study: Broken Monitoring
- Question Breakdown
4 LiveLab in this lesson — see the labs panel →
04 LOGGING SOLUTIONS 6 topics · 3 LiveLab +
- Access Logs
- Execution Logs
- Security Logs
- Log Processing
- Case Study: Automated Log Management
- Question Breakdown
3 LiveLab in this lesson — see the labs panel →
05 INFRASTRUCTURE SECURITY PART 1 6 topics · 9 LiveLab +
- Edge Security
- VPC Network Security
- VPC Egress Security
- Multiple VPC Strategies
- Case Study: Multi-scope Infrastructure Design
- Question Breakdown
9 LiveLab in this lesson — see the labs panel →
06 INFRASTRUCTURE SECURITY PART 2 4 topics · 5 LiveLab +
- Network Troubleshooting
- Host-Based Security
- Case Study: The Golden AMI Pipeline
- Question Breakdown
5 LiveLab in this lesson — see the labs panel →
07 PERMISSIONS AND ROLES 7 topics · 2 LiveLab +
- AWS Credentials
- IAM Policy Details
- IAM Policy Conditions
- Policy Evaluation Logic
- Assuming IAM Roles
- Case Study: IAM Policy Examples
- Question Breakdown
2 LiveLab in this lesson — see the labs panel →
08 FEDERATION AND RESOURCE-BASED ACCESS CONTROL 10 topics · 3 LiveLab +
- SAML Federation
- Cognito User Pool Federation
- Cognito Identity Pool Federation
- AWS SSO Federation
- AWS Organizations
- S3 Access Control
- API Gateway and Lambda Access Control
- Troubleshooting Permissions
- Case Study: Broken Permission Examples
- Question Breakdown
3 LiveLab in this lesson — see the labs panel →
09 KEY MANAGEMENT 9 topics · 4 LiveLab +
- Symmetric Data Encryption
- AWS KMS Basics
- AWS KMS Access Control
- AWS CloudHSM
- AWS Certificate Manager
- Using Keys for Authentication
- Troubleshooting Key Management
- Case Study: CloudWatch Logs Encryption
- Question Breakdown
4 LiveLab in this lesson — see the labs panel →
10 DATA ENCRYPTION AT-REST AND IN TRANSIT 8 topics · 7 LiveLab +
- Data Encryption At-rest by Default
- Data Encryption At-rest as Option
- Data Encryption At-rest Operations
- Data Encryption In Transit - Web
- Data Encryption In Transit - Storage
- Data Encryption In Transit - Network
- Case Study: End-to-End Encryption
- Question Breakdown
7 LiveLab in this lesson — see the labs panel →
11 NEXT STEPS 2 topics +
- Study Strategies
- Study Resources
Hands-On Labs Our edge
37 LiveLabs- Enabling and Disabling GuardDuty
- Creating VPC Flow Logs
- Enabling CloudTrail
- Creating a CloudWatch Alarm
- Enabling Access Logging for an Amazon S3 Bucket
- Viewing Logs Using the Lambda Console
- Creating a Kinesis Firehose Delivery Stream
- Creating a Custom AWS VPC
- Creating a Subnet within a VPC
- Creating a Security Group
- Creating a Custom Route Table
- Creating an Internet Gateway
- Creating a VPC Peering Connection
- Creating a Gateway Endpoint
- Creating an Interface Endpoint
- Creating a Transit Gateway
- Using Amazon EC2
- Creating an Amazon SNS Topic
- Creating the AWS Lambda Function and Invoking It
- Creating an AMI from an EC2 Launched Instance
- Configuring an AWS Elastic Beanstalk Application
- Creating an IAM Role
- Creating an IAM Policy
- Creating an Amazon Cognito User Pool
- Creating an Amazon S3 Bucket
- Creating a VPC Endpoint in Amazon OpenSearch Service
- Creating and Disabling an AWS KMS Key
- Creating an AWS CloudHSM Cluster
- Creating CloudFront
- Creating an Elastic Load Balancer
- Creating a S3 Glacier Storage Using Lifecycle Rules
- Creating a DynamoDB Table
- Creating an SQS Queue
- Creating an Amazon Redshift Cluster
- Configuring Amazon ElastiCache
- Creating an Amazon EFS
- Creating a Virtual Private Gateway
Labs run in your browser — nothing to install.
Keep going
You might also like
Prepare for AWS Certified Security Specialty
One-time payment. Full access for 1 year. Start with a free trial if you want to look around first.
- 1 year of full access
- 37 LiveLab included
- Certificate of completion
No credit card required