Who is this for?
Security engineers, cloud engineers and architects responsible for securing AWS.
Syllabus
1. Security Foundations (4 h)
- Shared responsibility
- Threat models on AWS
- Security pillar of Well-Architected
2. Identity and Access Management (8 h)
- IAM policies, boundaries, ABAC
- IAM Identity Center and federation
- Cross-account access
- Hands-on: Least-privilege policy lab
3. Data Protection (7 h)
- KMS keys and envelope encryption
- S3, EBS and RDS encryption
- Secrets Manager, ACM, CloudHSM
- Hands-on: Customer-managed key lab
4. Logging and Monitoring (7 h)
- CloudTrail, Config and VPC Flow Logs
- CloudWatch Logs and metrics filters
- Security Lake and centralised logging
- Hands-on: Central logging setup
5. Threat Detection and Response (8 h)
- GuardDuty, Detective, Inspector, Macie
- Security Hub and automated response
- Incident response playbooks and forensics
- Hands-on: Automated response to a finding
6. Infrastructure Security (6 h)
- VPC security controls
- WAF, Shield and Firewall Manager
- Hardening EC2 and containers
- Hands-on: Protect an app with WAF
7. Governance and Compliance (5 h)
- Organizations, SCPs, Control Tower
- Audit Manager, Artifact, Config conformance packs
8. Exam Preparation (9 h)
- Exam format and strategy
- Domain revision with scenarios
- Two mock exams with review
- Hands-on: Mock exams
After this course you will be able to
- Design and implement identity and access controls
- Protect data with encryption and key management
- Implement logging, monitoring and detection
- Respond to security incidents
- Secure networks and infrastructure at scale
- Apply governance and compliance controls
Tools & topics
IAMKMSGuardDutySecurity HubCloudTrailConfigWAFMacieInspector
Projects
- Account hardening and central logging
- Security incident response runbook
Assessment
Lab checkpoints, quizzes and mock exams.
What is included
- Live instructor-led online sessions
- Hands-on labs and assignments
- Session recordings after each class
- Doubt-solving support
- Course completion certificate
- Small interactive batches
- Unpaid internship opportunities
- Session recordings after each class
- Small interactive batches
- Unpaid internship opportunities for practical exposure
Your trainer
Ameya Vaidya
Cloud Trainer: AWS, Azure & GCP
Ameya started in IT more than 16 years ago and has spent over a decade in the cloud. He holds six AWS and two Azure certifications, is an AWS Community Builder and a speaker, and has trained over 5,000 students. Ask him about security, networking or AI and expect real-world examples alongside the theory.
- 6 AWS and 2 Azure certifications
- 16+ years in IT, 10+ years in cloud
- Expertise in security, networking and AI
- Trained 5,000+ students
- AWS Community Builder and speaker
What our AWS Security – Specialty students say
FAQ
Can a beginner join AWS Security – Specialty?
AWS Associate-level knowledge and basic security concepts.
Will there be a free demo?
Yes. Book a free demo, attend the live session and decide after you have seen how we teach.
Do you guarantee a job after this course?
No. We do not make guaranteed-placement claims. We train you to be capable, help with resume and career guidance, and offer unpaid internship opportunities.
What is the fee and batch schedule?
Our counselor shares the current fee and batch details. Book a free demo or WhatsApp +91-9156091020.
Not sure which course is right for you?
Talk to our counselor. It is free, and we will tell you honestly whether a course fits your goals.