AWS Shield Advanced - SkilBrill

AWS Certified Security – Specialty Training AWS Shield Advanced

AWS Certified Security – Specialty Training

0% Completed

M1 — AWS Security Specialty Scope and Threat Landscape

SCS-C02 skills measured

Shared Responsibility Model in 2026

AWS accounts and Organizations

Threat-modelling AWS workloads

M2 — Identity and Federation

Roles, policies and permission boundaries

AWS SSO and Identity Center

IAM Access Analyzer

M3 — Network Security and Edge Protection

VPC security groups and NACLs

AWS WAF rules and managed rule sets

AWS Shield Advanced

Route 53 Resolver DNS Firewall

M4 — Encryption and Key Management

KMS keys, grants and aliases

Envelope encryption

CloudHSM and BYOK

S3, EBS, RDS encryption

M5 — Data Protection and Privacy

S3 Object Lock and Glacier vaults

Macie for data classification

Secrets Manager vs Parameter Store

Certificate Manager and ACM PCA

M6 — Detection and Monitoring

CloudTrail and CloudTrail Lake

Config rules and conformance packs

GuardDuty findings

Security Hub standards

M7 — Threat Detection and Investigation

Detective for investigation graphs

Athena for security analytics

Network Firewall

M8 — Logging, SIEM and Audit

Centralised logging patterns

SIEM integration with OpenSearch

Audit Manager evidence

Compliance artefacts

M9 — Application and Runtime Security

Inspector for vulnerability scanning

CodeGuru Security

Container image scanning

Lambda and API Gateway security

M10 — Incident Response and Forensics

Forensic account patterns

Containment and eradication

AWS Backup and recovery

Lessons-learned artefacts

M11 — Compliance and Resilient Architectures

AWS Config conformance packs

Audit Manager frameworks

Multi-account strategy

Resilience patterns

M12 — Capstone and SCS-C02 Mocks

End-to-end secure workload

Threat modelling walkthrough

SCS-C02 mapped mocks

Announcements Course Info