Become an AWS security expert — threat detection, encryption, IAM, and compliance — and earn the most sought-after cloud security certification.
Curriculum covers
8 modules · 60 hours · 24 live sessions
After this course, you will
Hands-on learning
3 industry capstone projects · built from scratch · yours to keep
Build an automated security response system: GuardDuty findings trigger EventBridge rules, which invoke Step Functions to orchestrate Lambda-based remediation (isolate compromised EC2, rotate IAM credentials, snapshot EBS volumes). Publish findings to Security Hub and send PagerDuty alerts via SNS. Store all findings in an S3 security lake.
Design and implement a comprehensive encryption strategy: multi-region KMS keys with key policies and grants, automatic rotation, S3 bucket keys for cost efficiency, encrypted RDS and EBS volumes, Secrets Manager for database credential rotation, and ACM private CA for internal mTLS. Document the full key hierarchy.
Establish a centralised security governance model using AWS Organizations with SCPs, AWS Config Aggregator for compliance visibility across all member accounts, Security Hub delegated administrator for findings aggregation, and CloudFormation StackSets to deploy security baselines (GuardDuty, Config rules, CloudTrail) to every account.
Plus 16 guided mini-projects across the curriculum — Q&A bots, resume screeners, SQL helpers, and more.
⚡ Seats filling fast — only 7 remaining across all batches
| Batch Type | Schedule | Duration | Next Start Date | Availability |
|---|---|---|---|---|
| Weekend | Sat & Sun, 10am–1pm | 10 weeks | 12 Sept 2026 | Available |
| Weekday | Mon–Fri, 7–9pm | 8 weeks | 14 Sept 2026 | Available |
| Fast-track | Mon–Sun, 6 hours/day | 2 weeks | 21 Sept 2026 | Available |
AWS recommends 5+ years of IT security and 2+ years of active AWS experience. At minimum, you should hold an Associate-level AWS certification and have hands-on experience with IAM, VPC, CloudTrail, and S3 security.
Six domains: Threat Detection and Incident Response (14%), Security Logging and Monitoring (18%), Infrastructure Security (20%), Identity and Access Management (22%), Data Protection (18%), and Management and Security Governance (8%).
Absolutely. KMS gets an entire module covering key types, key policies, grants, condition keys, envelope encryption, cross-account access, ABAC, data key caching, integration with S3/EBS/RDS/EFS, and deletion/rotation policies.
170 minutes, 65 questions (multiple choice and multiple response), passing score of 750 out of 1000. Questions are scenario-heavy and require you to distinguish between multiple valid-looking approaches.
The SCS-C02 is currently a traditional multiple-choice exam (no lab component). The course's hands-on labs prepare you for real-world security work and deepen your understanding beyond what rote memorisation achieves.
Security Engineers, Cloud Security Architects, Compliance Officers, GRC Analysts, and any cloud engineer who owns security posture in their organisation will find this certification significantly advances their career.
Download the curriculum to see every module, batch dates and fees. Book a free 30-minute session with our advisors to get your questions answered.
Book Free DemoSee every module, capstone project, and tool covered — free, instant access.
