AWS Live online

AWS Certified Security – Specialty (SCS-C03) Training Course

CertOcean's AWS Certified Security – Specialty (SCS-C03) training is a live, instructor-led online course that prepares you for the AWS Certified Security – Specialty (SCS-C03) certification exam. You learn in 18 live sessions (35 hours in total) with an expert instructor, work through 10 curriculum modules with hands-on assignments and keep lifetime access to the class recordings.

  • 35 hoursLive training
  • 18 sessionsWith an instructor
  • 10 modules54 topics
  • Mon, Oct 26Next batch
SCS AWSExam-focused live training
$749 $899 One-time · USD
You save$15017% off
Enroll now
Not sure yet? Talk to a course advisor
  • Pass or full refund, in writing
  • Secure checkout
Course overview

About the AWS Certified Security – Specialty (SCS-C03) training

What is the AWS SCS-C03 exam like?

  • 65 questions (50 scored and 15 unscored): multiple choice, multiple response, ordering and matching
  • 170 minutes; passing score 750 on a scale of 100–1,000
  • Exam fee US$300; taken at a Pearson VUE test center or online
  • Six domains: Detection (16%), Incident Response (14%), Infrastructure Security (18%), Identity and Access Management (20%), Data Protection (18%), Security Foundations and Governance (14%)
  • New in SCS-C03: guardrails for generative AI applications, OCSF and third-party WAF integration, inter-node encryption (including EKS), data masking and multi-Region keys
  • AWS recommends 3–5 years of experience securing cloud solutions; the certification is valid for three years

This course includes

  • Instructor-led live classes35 hours of live online classes: 10 sessions of 3.5 hours each.
  • AssignmentsEvery class is followed by hands-on lab practice.
  • Lifetime accessKeep lifetime access to all course material, including presentations, quizzes, installation guides and class recordings.
  • 24/7 expert supportOur support team is available 24x7 to answer technical questions.
  • CertificationComplete the course and project to receive CertOcean's course completion certificate for AWS Certified Security – Specialty (SCS-C03) training. The AWS certification is earned by passing the SCS-C03 exam.
  • AssessmentsRegular assessments and quizzes check your learning as you go.

What you'll learn in this course

  • Build monitoring, alerting and centralized logging with CloudTrail, Security Lake, GuardDuty and Security Hub
  • Plan, test and run incident response, including forensics, containment and root cause analysis
  • Secure edge, network and compute resources with AWS WAF, Shield, Network Firewall and Inspector
  • Apply guardrails to generative AI applications on AWS
  • Manage identities and least-privilege access with IAM Identity Center, ABAC and IAM Access Analyzer
  • Protect data in transit and at rest with TLS, AWS KMS, CloudHSM and Secrets Manager
  • Govern multi-account environments with AWS Organizations, Control Tower and compliance tools
  • Prepare confidently for the AWS Certified Security – Specialty (SCS-C03) exam

What is AWS Certified Security – Specialty (SCS-C03) training?

AWS Certified Security – Specialty (SCS-C03) training is an advanced course for professionals who want to become experts in securing AWS environments. It focuses on protecting data, applications and infrastructure with AWS security best practices and real-world scenarios.

You get hands-on with threat detection, logging and incident response, edge and network security, compute and container security, guardrails for generative AI applications, identity and access management at scale, encryption and key management, and multi-account governance. Services covered include IAM Identity Center, AWS KMS, CloudTrail, Security Lake, GuardDuty, Security Hub, Detective, Inspector, AWS WAF, Shield, Network Firewall, AWS Organizations and Control Tower. The course follows the SCS-C03 exam guide and suits security engineers, cloud architects, DevSecOps professionals and IT security specialists.

Curriculum

AWS Certified Security – Specialty (SCS-C03) course syllabus

10 modules · 54 topics · 35 hours of live training

Security Fundamentals and the SCS-C03 Exam 4 topics
  • Shared responsibility model
  • SCS-C03 exam structure, domains and what changed from SCS-C02
  • Threat landscape for AWS workloads
  • AWS Well-Architected security pillar and Well-Architected Tool reviews
Security Foundations and Governance 6 topics
  • AWS Organizations and AWS Control Tower with optional and custom controls
  • SCPs, RCPs, declarative policies and AI service opt-out policies
  • Delegated administrator accounts and root user protection
  • Secure deployment with CloudFormation StackSets, CloudFormation Guard and cfn-lint
  • Tagging strategy, Firewall Manager, Service Catalog and AWS RAM
  • Compliance with AWS Config, Security Hub, Audit Manager and AWS Artifact
Identity and Access Management – Authentication 4 topics
  • Human, application and system identities with IAM Identity Center, Amazon Cognito and MFA
  • Identity provider federation
  • Temporary credentials with AWS STS and S3 presigned URLs
  • Troubleshooting authentication with CloudTrail and Directory Service
Identity and Access Management – Authorization 4 topics
  • Amazon Verified Permissions, IAM Roles Anywhere, resource and trust policies
  • Attribute-based (ABAC) and role-based (RBAC) access control
  • Least privilege with permission boundaries and session policies
  • Analyzing and fixing permissions with the policy simulator and IAM Access Analyzer
Detection – Monitoring and Alerting 4 topics
  • Analyzing monitoring requirements and designing a monitoring strategy
  • Aggregating security events
  • Metrics, alerts and dashboards with GuardDuty, Security Lake, Security Hub and Macie
  • Automated assessments with AWS Config conformance packs and Systems Manager
Detection – Logging and Troubleshooting 6 topics
  • Choosing log sources and storage
  • Organization trails in CloudTrail and a dedicated logging account
  • Amazon Security Lake and third-party tools
  • Log analysis with CloudWatch Logs Insights, Athena and OpenSearch
  • VPC Flow Logs, Transit Gateway flow logs and Route 53 Resolver logs
  • Fixing missing logs and CloudWatch agent misconfiguration
Incident Response 6 topics
  • Designing incident response runbooks with Systems Manager OpsCenter
  • Preparing access, tools and blast-radius limits; AWS Shield Advanced
  • Testing with AWS Fault Injection Service and Resilience Hub
  • Automated remediation with Systems Manager, Step Functions and Lambda
  • Capturing forensic artifacts and validating findings
  • Containment, eradication, recovery and root cause analysis with Amazon Detective
Infrastructure Security – Edge and Network 6 topics
  • Edge security with CloudFront, AWS WAF and the OWASP Top 10
  • Geo-blocking, rate limiting and client fingerprinting
  • OCSF and third-party WAF rules
  • Security groups, network ACLs and AWS Network Firewall
  • Hybrid connectivity with Site-to-Site VPN, Direct Connect and MACsec
  • Segmentation and finding unnecessary access with Verified Access and Network Access Analyzer
Infrastructure Security – Compute and Generative AI 6 topics
  • Hardened AMIs and container images with EC2 Image Builder
  • Instance profiles, service roles and execution roles
  • Vulnerability scanning with Amazon Inspector and GuardDuty Runtime Monitoring
  • Patching with Patch Manager; admin access with Session Manager and EC2 Instance Connect
  • Pipeline code scanning with Amazon Q Developer and CodeGuru Security
  • Guardrails for generative AI applications (OWASP Top 10 for LLM applications)
Data Protection 8 topics
  • Enforcing TLS and ELB security policies; PrivateLink, VPC endpoints and Client VPN
  • Inter-node encryption for EMR, EKS and SageMaker AI
  • Encryption at rest with AWS KMS and CloudHSM; client-side and server-side encryption
  • Data integrity with S3 Object Lock, Glacier Vault Lock and versioning
  • Secure backup and replication with AWS Backup and ransomware protection
  • Secrets Manager rotation, imported key material, multi-Region keys and AWS Private CA
  • Masking sensitive data in CloudWatch Logs and SNS
  • SCS-C03 exam tips and mock test review

Get the detailed syllabus

Receive the full module plan, batch timings and a call with an advisor who can answer your exam questions.

Request syllabus
Upcoming batches

Next AWS Certified Security – Specialty (SCS-C03) batches

Live online classes with an instructor, 9:00 AM to 5:00 PM Eastern Time (ET).

Weekday batch

Starts Monday, October 26

Starts in 2 days · Live online

Enroll
Weekend batch

Starts Saturday, October 31

Starts in 7 days · Live online

Enroll
Flexible

Need another date or time?

Ask for a private or custom schedule.

Ask us
Sample certificate
Certification

Earn your AWS Certified Security – Specialty (SCS-C03) certificate

  • Certificate of completionIssued by CertOcean when you finish the training and assignments.
  • Official AWS certificationAwarded by AWS when you pass the exam. The course is built to get you there.
  • Show it to employersAdd it to your LinkedIn profile and resume.
Start your certification
Learner reviews

Why learners choose CertOcean

Rated Excellent · 4.9 out of 5 on Trustpilot
The training curriculum was great. CertOcean provided me everything required to obtain my CISM. They're excellent!
Laxmi Haya Vadan KaramcheduUnited States · CISMVerified
Very resourceful company, I passed my PMP exam at first attempt, highly recommended.
IjeomaCanada · PMPVerified
Great training support! Helped me pass several certifications.
Cozumel TyUnited StatesVerified
  • US, Canada and UK hoursClasses set around your working day
  • Expert instructorsWorking professionals in your field
  • Career supportResume and interview help
FAQ

AWS Certified Security – Specialty (SCS-C03) course FAQs

Can't find your answer? A course advisor can help with the syllabus, batch dates and exam questions.

How much does the AWS Certified Security – Specialty (SCS-C03) course cost?

The AWS Certified Security – Specialty (SCS-C03) training costs $749, down from the regular $899 (you save 17%). It is a one-time payment in US dollars, and you can pay securely by card or PayPal.

How long is the AWS Certified Security – Specialty (SCS-C03) course, and when does it start?

The course runs for 35 hours of live, instructor-led online training across 18 sessions. Weekend and weekday batches are available, and the next batch starts on Monday, October 26, 2026.

Why take AWS Certified Security – Specialty training?
  • Security is a top priority for every company that runs workloads on AWS.
  • SCS-C03 covers current topics such as generative AI guardrails, Security Lake and multi-account governance.
  • AWS security professionals are well paid in the United States and worldwide.
  • AWS skills are in demand in the United States, Canada, the UK, India and beyond.
What jobs can you get with AWS security skills?

AWS security skills lead to roles such as cloud security engineer, security architect, DevSecOps engineer and security analyst. These roles are well paid in both the US and India.

Why learn AWS security with CertOcean?

You get hands-on experience with AWS, the cloud platform used by many of the world's largest companies, and master key cloud security skills such as IAM, incident response and firewall configuration. You work on real AWS security case studies and step-by-step assignments in a curriculum designed by industry experts. You also keep lifetime access to videos and course material, 24x7 support and free updates when the course is upgraded.

Will I get a certificate after the AWS Certified Security – Specialty (SCS-C03) training?

Yes. You receive a CertOcean certificate of completion when you finish the training. The official AWS certification is awarded by AWS when you pass the exam, and this course prepares you for it.

What if I don't pass the AWS Certified Security – Specialty (SCS-C03) exam?

Your enrollment is covered by CertOcean's pass or full refund guarantee. If you don't clear the exam, you can claim a full refund under the guarantee terms.

Free course consultation

Talk to an AWS Certified Security – Specialty (SCS-C03) advisor

Share your details and we will send the syllabus, the next batch dates and the best plan for your exam date.

  1. 1Tell us your goal and exam date
  2. 2Get the syllabus and batch options
  3. 3Enroll when you are ready

Get the syllabus and batch dates

Takes under a minute. No payment needed.

Course

AWS Certified Security – Specialty (SCS-C03)

By sending this form you agree to our Terms of Use and Privacy Policy. We never share your details.