Specialty [SCS-C02]
Empower Yourself: Safeguard Your AWS Environment and Attain Certification
Lo que serás capaz de hacer
In today's digital landscape, security is paramount. Are you ready to take your AWS skills to the next level? Welcome to the AWS Certified Security – Specialty course! I am Chandra Lingam, and I am your instructor. Whether you're a seasoned cloud professional or just starting your journey, this course is your key to mastering the art of securing AWS environments. Our expert instructors bring years of real-world experience to the table. You'll dive deep into security best practices, threat detection, and mitigation strategies. We start by looking at the architecture of an order processing system. Having a solution blueprint will help you prepare for security risks in each component and how to handle them. Each refresher section covers a core service. You will learn relevant concepts along with the labs and quizzes. We then dive into more advanced security topics: How to manage identities and access. Gain visibility into activities in your AWS environment and respond in near real-time. Managing multiple accounts in a large organization, enabling single sign-on, sharing resources among accounts. We will review recent attacks in AWS and other cloud providers and how to defend from such incidents. But it's not just about theory; you'll work on hands-on labs to understand incident response concepts. The course also comes with a timed practice test. We're not just preparing you for the exam. We're preparing you for success in the field. Elevate your AWS career today and become a certified AWS security expert. With thousands of reviews and an outstanding average rating, our course stands as the top-rated resource in its category! Join our community of learners, access valuable resources, and enjoy lifetime access to the course content. I am looking forward to meeting you! Chandra Lingam Compute With Cloud, Inc
- You will gain first-hand experience on how to protect, monitor, detect, and respond to security incidents
- Material to prepare and pass the AWS Security Specialty Exam
- Timed Practice Test
- In-depth labs
Temario
UNIDAD 1 - Introduction · 3 leccionesUNIDAD 1 - Introduction
UNIDAD 1 - Introduction
- Introduction
- Security Specialty Exam Overview - SCS-C02
- Increase the speed of learning
UNIDAD 2 - Housekeeping · 10 leccionesUNIDAD 2 - Housekeeping
UNIDAD 2 - Housekeeping
- Account Reuse Instructions
- Downloadable Resources
- AWS Account Setup, Free Tier Offers, Billing, Support
- Billing Alerts, Delegate Access
- Instructions - IAM User and Command Line Setup
- IAM Admin User and Command Line Tool Setup
- Lab Instructions - How to Create KeyPair for EC2
- Lab – How to Create KeyPair for EC2
- Heads-up - Other ways to login without using Keypair
- AWS Certification - TOP THREE Reasons to go to a Test Center
UNIDAD 3 - Infrastructure, Pricing, Support - Review · 1 leccionesUNIDAD 3 - Infrastructure, Pricing, Support - Review
UNIDAD 3 - Infrastructure, Pricing, Support - Review
- Infrastructure, Pricing, Support Plan, and Shared Responsibility
UNIDAD 4 - Architecture of a cloud based solution · 6 leccionesUNIDAD 4 - Architecture of a cloud based solution
UNIDAD 4 - Architecture of a cloud based solution
- Refresher Topic Tips
- Purpose of this section
- Order Processing System - A Server-Based Design
- Decouple layers using Queues and Notification Service
- Order Processing System - Serverless Design
- Architecture
UNIDAD 5 - Virtual Private Cloud (VPC) Refresher · 46 leccionesUNIDAD 5 - Virtual Private Cloud (VPC) Refresher
UNIDAD 5 - Virtual Private Cloud (VPC) Refresher
- Summary PDF: Key Points
- Network Addressing Primer - CIDR, Public, Private IP Address Blocks
- VPC Introduction, App Deployment, Router, Internet Gateway
- Firewall - Security Group
- Firewall - Network ACL (NACL)
- IP Types - Private, Public, Elastic
- Lab Instructions – Default VPC Walk Through
- Lab – Default VPC Walk Through
- Lab Instructions – Launch EC2 instance, Login, Explore Public/Private/Elastic IP
- Lab – Launch EC2 instance, Login, Explore Private, Public, and Elastic IP
- Lab - Connect to your EC2 Linux from Mac
- Lab Instructions – Explore Security Group Firewall and Features
- Lab – Explore Security Group Firewall and Features
- Lab Instructions – Explore Network ACL Firewall and Features
- Lab – Explore Network ACL Firewall and Features
- AWS Service Integration - Internet, NAT, Gateway and Interface Endpoints
- Lab Instructions – Public & Private Subnets, Route Table, NAT, Bastion Host
- Lab – Public & Private Subnets, Route Table, NAT, Bastion Host
- [NEW] Regional NAT Gateway
- [NEW] Lab - Regional NAT Gateway
- Using VPC Prefix Lists with CloudFront and EC2 Instance Connect (SSH)
- Lab Instructions - Connecting to Private EC2 Instances with EC2 Instance Connect
- Lab - Connecting to Private EC2 Instances with EC2 Instance Connect
- Peering Connection, Transit Gateway
- Lab Instructions – Peering Connection (Cross-Region)
- Lab – Peering Connection (Cross-Region)
- External Clients, Public Endpoints, Private Link
- Bastion Host, Session Manager (Systems Manager)
- Comparison between the Keypair, EC2 Instance Connect and Session Manager
- [NEW] AWS Security Group VPC Associations and Shared Security Groups
- [NEW] Lab: AWS Security Group VPC Associations
- VPC Traffic Flow Walk-through
- [NEW] Cross-Region PrivateLink for AWS Services
- [NEW] Lab - Cross-Region PrivateLink for AWS Services
- [NEW] Securing AWS Resources with a Network Perimeter
- [NEW] AWS VPC Block Public Access (BPA)
- Default VPC, Flow Log, Resource Access Manager, and NAT source/destination check
- Hybrid Infrastructure - Site-Site VPN, Cloud Hub, Client VPN
- Hybrid Infrastructure - Direct Connect
- Heads-up RAM and Transit Gateway coming up in Organization Section
- VPC
- AWS Sample Exam Question #3
- Answer to Question #3
- AWS Sample Exam Question #6
- Answer to question #6
- [NEW] VPC
UNIDAD 6 - EC2 and Storage Refresher · 13 leccionesUNIDAD 6 - EC2 and Storage Refresher
UNIDAD 6 - EC2 and Storage Refresher
- Summary PDF: Key Points
- Lab Instructions - User data & Metadata – Installing apps in an instance
- Lab – User data & Metadata – Installing apps when launching an instance
- Lab Instructions - EC2 Instance with IAM Roles to Access S3
- Lab - EC2 Instance with IAM Roles to Access S3
- Introduction to Storage
- Elastic Block Store (EBS)
- Elastic File System, FSx for Windows, FSx for Lustre
- FSx Windows now supports Linux and MacOS clients
- Lab Instructions – Create an AMI
- Lab – Create an AMI (Amazon Machine Image)
- EC2
- Storage
UNIDAD 7 - Monitoring - CloudWatch Metrics and Logs Refresher · 8 leccionesUNIDAD 7 - Monitoring - CloudWatch Metrics and Logs Refresher
UNIDAD 7 - Monitoring - CloudWatch Metrics and Logs Refresher
- Summary PDF: Key Points
- Introduction to CloudWatch
- CloudWatch Metrics and Alarms
- CloudWatch Log Group, Log Stream, Metric Filter and Alarms
- Lab - Stop Idle Instance using CloudWatch Alarms
- Heads up in-depth CloudWatch Log labs
- CloudWatch
- Discussion Thread - How to start/stop EC2 instances on a schedule
UNIDAD 8 - Elastic Load Balancing and Auto Scaling Refresher · 18 leccionesUNIDAD 8 - Elastic Load Balancing and Auto Scaling Refresher
UNIDAD 8 - Elastic Load Balancing and Auto Scaling Refresher
- Summary PDF: Key Points
- Lab Resources
- Introduction to Elastic Load Balancer
- Types of Load Balancers, Private Link
- Lambda function as a target
- Network Load Balancer now supports security groups (Aug-2023)
- Amazon Linux 2 AMI
- Lab - Launch WebServer Instances with User Data
- Lab - Application Load Balancer
- Lab - Cleanup
- Introduction to Auto Scaling
- Amazon Linux 2 AMI
- Lab - Maintain Fleet with Auto Scaling
- Lab - Simulate Server Error and Application Error
- Lab Instructions - Auto Scaling with Launch Templates Introduction
- Lab - Auto Scaling and Spot Instances with Launch Templates
- Cleanup
- ELB and ASG
UNIDAD 9 - S3 Refresher · 22 leccionesUNIDAD 9 - S3 Refresher
UNIDAD 9 - S3 Refresher
- Summary PDF: Key Points
- Optional Download
- S3 Introduction - Durability, Consistency, Usage, Object Ownership
- S3 Storage Classes
- Versioning
- Lifecycle Management
- Access Control
- Replication (CRR, SRR)
- Performance and Storage Gateway
- S3 Encryption Update
- Encryption (SSE-S3, SSE-KMS, SSE-C, Client Side)
- SFTP, CORS, Pre-signed URL, Macie, Object Lock
- Lab - S3 Storage Classes
- Lab - S3 Versioning
- Lab - S3 Age Based Retention
- Lab - S3 Tiered Storage
- Lab - S3 Replication
- Lab - S3 Encryption AWS Managed Key and Customer Master Key
- S3 Object Lock - Legal Hold and Retention Period
- Glacier Vault Lock
- S3 Incident Response
- S3
UNIDAD 10 - Route 53 Refresher · 6 leccionesUNIDAD 10 - Route 53 Refresher
UNIDAD 10 - Route 53 Refresher
- Summary PDF: Key Points
- Introduction to Domain Name System (DNS) and Record Types
- Route 53, ACM, Health Check, Routing Policies
- Route 53 Important Concepts Review
- Heads up Route 53 labs with custom domains in SSL/TLS section
- Route 53
UNIDAD 11 - CloudFront Refresher · 12 leccionesUNIDAD 11 - CloudFront Refresher
UNIDAD 11 - CloudFront Refresher
- Summary PDF: Key Points
- Why CloudFront?
- CloudFront Security, Lambda@Edge
- Lab Resources
- Account Level - S3 Block Public Access
- Lab - CloudFront Distribution with S3 Origin
- Lab - Cache Configuration and Invalidation
- Lab - Origin Access Identity (OAI)
- Origin Access Control (OAC)
- Geographic Restriction
- Heads-up Custom Domain, SSL and WAF protection
- CloudFront
UNIDAD 12 - Global Accelerator Refresher · 7 leccionesUNIDAD 12 - Global Accelerator Refresher
UNIDAD 12 - Global Accelerator Refresher
- Summary PDF: Key Points
- Downloadable Resources
- Introduction to Global Accelerator
- Global Accelerator - How it works
- Amazon Linux 2 AMI
- Lab - Global Accelerator
- Global Accelerator
UNIDAD 13 - SSL/TLS Encryption · 6 leccionesUNIDAD 13 - SSL/TLS Encryption
UNIDAD 13 - SSL/TLS Encryption
- Downloadable Resources
- Lab - Enabling SSL at Elastic Load Balancer
- End to End Encryption from client up to EC2 instance or Target (end-end)
- Lab - CloudFront Custom Domain and SSL
- S3, SSL and Custom Domain
- SSL/TLS Encryption
UNIDAD 14 - Identity and Access Management · 38 leccionesUNIDAD 14 - Identity and Access Management
UNIDAD 14 - Identity and Access Management
- Summary PDF: Key Points
- Lab Resources
- Shared Responsibility Model, Compliance, Delegation, Federation
- Credentials, MFA, Identity-based, Resources-based Policy
- Inline and Managed Policy, Amazon Resource Naming (ARN) Convention
- Principal, Effect, Action, Resource, Not Clause
- Conditional Access, Implicit Deny, Explicit Allow and Deny, Permission Boundary
- IAM Roles, Cross-account access options
- Q & A - What is the effect of specifying a root or account in the principal?
- Federation, SSO, SAML, Active Directory, AWS Organizations, Cognito
- Active Directory Integration Options and Trust Management
- Security Token Service (STS) - Assume Role, MFA, Federation
- How to protect Access Key and Secret Keys used by On-premises Apps
- Lab - Identity-based policy, Implicit Deny, Explicit Allow
- Lab - Policy Generator, Managed Policy, Versions, Groups
- [Q&A] Console Changes - Policy - How to allow access to Bucket and Object
- Lab - Permissions Boundary - how to define maximum permissible action
- Lab - Resources-based policy, Policy Generator, Principals
- Permissions Boundary and Resource-based Policy Interaction
- Lab - Conditional Variables - Restrict Access By IP
- Lab - Restrict Access By VPC Endpoint
- Lab - Cross-account access using Resources-based policy
- Lab - Cross-account Management Console access using IAM Roles
- Lab - Cross-account access from CLI and EC2 using IAM Roles
- Understand the Confused Deputy Problem and 3 Solution Patterns
- Revoking access to Temporary Credentials
- IAM - Security, Audit and Compliance
- Active Directory
- Cloud Security 1
- Cloud Security 2
- AWS Sample Exam Question #1
- Answer to Question #1
- AWS Sample Exam Question #4
- Answer to Question #4
- AWS Sample Exam Question #5
- Answer to Question #5
- AWS Sample Exam Question #7
- Answer to question #7
UNIDAD 15 - Key Management System (KMS) - Encryption key management · 24 leccionesUNIDAD 15 - Key Management System (KMS) - Encryption key management
UNIDAD 15 - Key Management System (KMS) - Encryption key management
- Downloadable Resources
- Cryptography Primer
- Envelope Encryption Concepts and S3 Server Side Encryption
- EBS Volume Encryption, RDS and DynamoDB Encryption
- RDS Database encryption options
- KMS Key Policies - Important differences, job role specific permissions
- Lab - KMS Key Access Management - IAM, Resource-based, Console Access
- KMS Key Grants
- Lab - Key Grants
- Cleanup
- Lab - EBS Encryption
- Key Material Origin - KMS, CloudHSM, External Key Store, External
- Lab - KMS Features (Symmetric, Asymmetric, Key Material Origin, Resource Policy)
- Lab - KMS Automatic and Manual Key Rotation
- NOTE: AWS Managed Keys are now rotated every year
- Key Rotation Summary
- KMS APIs
- HMAC (Hash-Based Message Authentication Code) Keys
- KMS
- AWS Sample Question #8
- Answer to question #8
- KMS Key Management - Study Group Questions
- KMS Multi-Region Keys
- KMS Multi-Region Keys Discussion
UNIDAD 16 - Messaging Services - SQS, SNS, EventBridge, Kinesis · 3 leccionesUNIDAD 16 - Messaging Services - SQS, SNS, EventBridge, Kinesis
UNIDAD 16 - Messaging Services - SQS, SNS, EventBridge, Kinesis
- Summary PDF: Key Points
- Messaging Services Permission Management
- Messaging Service Permission Management
UNIDAD 17 - Logs and Events - Visibility into activities in AWS at Scale · 14 leccionesUNIDAD 17 - Logs and Events - Visibility into activities in AWS at Scale
UNIDAD 17 - Logs and Events - Visibility into activities in AWS at Scale
- Downloadable Resources
- Introduction to Logs and Events
- CloudTrail - Capture all AWS API activity
- Lab - CloudTrail Event History
- Lab - Consolidate account activity to S3, CloudWatch Log and Log Integrity Check
- Lab - Log Insights to Query CloudTrail Activity
- Lab - Athena SQL to Query CloudTrail Activity
- Lab - CloudWatch Events Real-time Monitoring of EC2 State
- Lab - Real-time Monitoring of Root Usage using EventBridge (CloudWatch) Events
- Lab - CloudWatch Log Metric Filter based Monitoring of Root Usage
- Does CloudTrail report a sign-in Event for CLI/API calls
- Logs, Events and CloudTrail
- AWS Sample Question #9
- Answer to question #9
UNIDAD 18 - Visibility into Network Activity in your VPC · 6 leccionesUNIDAD 18 - Visibility into Network Activity in your VPC
UNIDAD 18 - Visibility into Network Activity in your VPC
- Downloadable Resources
- IAM Role for VPC Flow Capture
- Lab - VPC Flow Logs Capture, Format and Querying
- Lab - Troubleshoot Security Group and Network ACL firewall Connectivity Issues
- Network Packet Inspection - VPC Traffic Mirroring and External AMI
- VPC Flow Log
UNIDAD 19 - AWS Organizations - Multi-Account Management · 20 leccionesUNIDAD 19 - AWS Organizations - Multi-Account Management
UNIDAD 19 - AWS Organizations - Multi-Account Management
- Downloadable Resources
- Multi-Account Benefits
- AWS Organizations - Benefits
- AWS Organizations - Account Types, SCPs, and Policy Types
- Lab - Create Organization, Member Accounts, Service Control Policies and Trail
- Lab - Organizational Units and test effect of Service Control Policies (SCP)
- Say Goodbye to Long-Term Root Credentials!
- Prevent Data Exfiltration with AWS Data Perimeters | Understanding SCPs & RCPs
- AWS Control Tower
- IAM Identity Center (Single Sign-On)
- Lab - Identity Center (Single Sign-on)
- Resource Sharing Across Account - Resource Access Manager and Transit Gateway
- Summary PDF: Key Points
- Lab Instructions - Resource Access Manager - Common VPC Setup
- Lab - Resource Access Manager - Share VPC and NAT Gateway with member accounts
- Lab Instructions - Transit Gateway to Interconnect VPCs
- Lab - Transit Gateway to Interconnect VPCs
- Transit Gateway - VPC attachment
- Lab - Transit Gateway - Route Outbound traffic through common NAT Gateway
- Multi-account management
UNIDAD 20 - Protect and Manage Resources at Scale · 41 leccionesUNIDAD 20 - Protect and Manage Resources at Scale
UNIDAD 20 - Protect and Manage Resources at Scale
- Downloadable Resources
- Type of Attacks and Case Study
- Case Study
- Case Study Solution Discussion - EC2 IMDSv2
- Case Study Solution
- Google Deleted Customer Data: What Happened and How to Protect
- Two Security Incidents!
- Log4j Vulnerability Clearly Explained
- Microprocessor Vulnerabilities - Meltdown and Spectre
- Uber breach
- Cyber Attacks and Sabotage of Critical Infrastructure
- AWS Web Application Firewall (WAF)
- Lab - AWS WAF
- How to Handle False Positives in WAF
- Summary PDF: Key Points
- AWS Shield
- IPTables, Windows Firewall, Host/Instance Based Firewall
- Secrets Manager
- Systems Manager
- Systems Manager Parameter Store
- AWS Config
- AWS Inspector, Trusted Advisor and Integrated Usage Walk-through
- Lab Instructions - Systems Manager Setup and Policies
- Lab - Systems Manager Setup and Policies
- Lab - Managed Instances, Session Manager, Compliance Status
- Lab Instructions - Patch Manager
- Lab - Patch Manager
- Lab - CloudWatch Log Agent to monitor log files in the server
- Managing Private Instances
- Automatic Host Management
- AWS Sample Exam Question #2
- Answer for Question #2
- Lab - AWS Config S3 bucket encryption compliance
- Lab - AWS Config Automated Remediation
- Config Aggregation
- Lab - AWS Inspector for Network Reachability, Vulnerability and Host Hardening
- Inspector versus Systems Manager Inventory
- Lab - Trusted Advisor
- AWS Inspector - Container Image Scan
- Protect and Manage Resources
- Product Comparison
UNIDAD 21 - GuardDuty · 8 leccionesUNIDAD 21 - GuardDuty
UNIDAD 21 - GuardDuty
- Summary PDF: Key Points
- Lab Resources
- GuardDuty - Introduction
- GuardDuty - Managing Findings
- Lab - Scalable Log Analysis for CloudTrail and VPC Flow Logs using Partitions
- Lab - Managing Incidents Involving the Use of Root Credentials
- Lab Instructions - Managing Incidents Involving Credential Misuse and Data Exfil
- Lab - Managing Incidents Involving Credential Misuse and Data Exfiltration
UNIDAD 22 - Security Incident Response · 13 leccionesUNIDAD 22 - Security Incident Response
UNIDAD 22 - Security Incident Response
- Downloadable Resources
- Case Study: The 15-Hour AWS us-east-1 Outage (Oct 19–20, 2025)
- Cloud Incident Response Essentials - Plan Ahead to Improve Security
- AWS Acceptable Use Policy - Your Responsibilities in preventing an incident
- Security Incident Response Concepts
- Runbook vs. Playbook – Security Incident Response
- Three Simple Tips for securing your EC2 instances
- Compromised Account - What to do
- Security Testing Policies in AWS
- Update - AWS Penetration Testing Policy
- Incident Response
- AWS Sample Question #10
- Answer to question #10
UNIDAD 23 - Summary of Security Products and Capabilities · 5 leccionesUNIDAD 23 - Summary of Security Products and Capabilities
UNIDAD 23 - Summary of Security Products and Capabilities
- AWS Security Products Summary
- Macie
- Security Hub, Detective, IAM Access Analyzer, Patch Manager
- GuardDuty, Security Hub, Detective and other Security Tools
- Real Incidents (discussed in Protect and Manage Resources)
UNIDAD 24 - AWS Security Specialty Sample Questions - Video Review · 1 leccionesUNIDAD 24 - AWS Security Specialty Sample Questions - Video Review
UNIDAD 24 - AWS Security Specialty Sample Questions - Video Review
- Sample Questions Review
UNIDAD 25 - Practice Test · 1 leccionesUNIDAD 25 - Practice Test
UNIDAD 25 - Practice Test
- AWS Security Specialty - Practice Exam
UNIDAD 26 - Final Exam Preparation Check List · 3 leccionesUNIDAD 26 - Final Exam Preparation Check List
UNIDAD 26 - Final Exam Preparation Check List
- AWS Certification - TOP THREE Reasons to go to a Test Center
- How to Access Discount Vouchers
- Preparation Check List
Tu certificado lo emite la SEP, no solo una plataforma
Al demostrar la competencia recibes un certificado emitido por la Secretaría de Educación Pública a través del Gobierno del Estado de México: un documento oficial que puedes presentar con confianza ante cualquier empleador o institución.
Tu certificado con INEC
- Lo emite la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México
- Documento oficial con folio verificable en línea
- Lo otorga la Universidad Tecnológica Fidel Velázquez
Otras plataformas en línea
- Constancia privada emitida por la misma plataforma
- Solo acredita horas cursadas o asistencia
- Sin respaldo de una autoridad educativa
Tu itinerario, de la inscripción al certificado
- 1
Inscripción con pago único
Pagas $2,800 MXN una sola vez y entras de inmediato al curso.
- 2
Estudias a tu ritmo
26 unidades con videos, lecturas y actividades, disponibles 24/7 durante 12 meses.
- 3
Cuestionarios por unidad
29 cuestionarios para comprobar lo aprendido.
- 4
Certificado
Emitido por la SEP a través del Gobierno del Estado de México, con folio verificable.
Un certificado oficial de la SEP
- Emitido por la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México. No es una constancia privada: es un documento oficial, y ese respaldo marca la diferencia frente a otras plataformas en línea.
- Contenido impartido por Chandra Lingam.
- Folio y QR verificables para compartirlo con quien te contrate.
Empieza hoy, a tu ritmo
Un solo pago y acceso inmediato al curso completo durante 12 meses.
- 26 unidades · 335 lecciones · 60 h
- 12 meses de acceso
- 29 cuestionarios de evaluación
- Certificado emitido por la SEP (Gob. del Estado de México) con folio verificable
Sobre tu inscripción
¿Cómo es el pago?
Un solo pago de $2,800 MXN. No hay mensualidades ni cargos recurrentes.
¿Cuánto tiempo tengo acceso?
12 meses desde tu inscripción, 24/7, para avanzar a tu ritmo.
¿Quién imparte el contenido?
El curso es impartido por Chandra Lingam; INEC gestiona tu inscripción, evaluación y certificado.
¿Qué pasa cuando vence mi acceso?
Puedes renovar tu cuenta tú mismo desde la plataforma, sin trámites ni esperas.

![Muestra del certificado: Specialty [SCS-C02]](https://www.institutoimec.edu.mx/wp-content/uploads/inec-landing/certificado-muestra.jpg)
