This course contains the use of artificial intelligence. Prepare for the AWS Certified Security – Specialty (SCS-C03) exam with a course built specifically for the current exam version, released December 2, 2025. Much of the material still circulating targets the retired SCS-C02, so every chapter here maps to the six official SCS-C03 domains and their published weightings.
You will work through detection strategy with GuardDuty, Security Hub, Detective and CloudTrail Lake, including the OCSF-aligned logging that is new in this version. You will build incident response playbooks for credential compromise and workload breaches, design network defenses with Network Firewall, WAF and PrivateLink, and implement encryption with KMS, CloudHSM and ACM.
Identity and Access Management gets three full chapters because it carries the heaviest weighting at 20 percent, and policy-evaluation troubleshooting, tracing a single request through SCPs, permissions boundaries, resource policies and session policies, is where most candidates lose points.
