Cert-prep courses with hands-on practice for AWS, Azure, Kubernetes, security and AIModule 1 of every course free, no card →
CloudaQube

SCS-C03exam prep · AWS · advanced

AWS Certified Security Specialty SCS-C03

Comprehensive preparation for the AWS Certified Security – Specialty (SCS-C03) exam, updated for the 2026 version. Master all six domains: threat detection, incident response, infrastructure security, identity and access management, data protection, and security governance — with hands-on AWS CLI labs and scenario-based practice questions aligned to the 750-pass-score exam.

  • 10 hours
  • 26 lessons
  • 6 modules
  • 51-question practice exam
  • updated May 2026
Module 1 freeNo credit cardFull course from $8.99/mo
exam coverage

Mapped to the SCS-C03 exam guide

Every module is tagged with the exam domain it covers.

—DetectionModule 1
—Incident ResponseModule 2
—Infrastructure SecurityModule 3
—Identity and Access ManagementModule 4
—Data ProtectionModule 5
—Security Foundations and GovernanceModule 6
try it

Try it before you sign up

Read a full lesson and answer 3 questions from the Module 1 quiz. No account needed.

free lesson · read · 25 min

AWS Threat Detection Services Overview

The Detection domain (16% of SCS-C03) tests your ability to design and implement detective controls that identify security threats before they become breaches. AWS provides a layered set of services — each solving a…
question 1 of 3 · from the Module 1 quiz
A security engineer needs to detect when an IAM user's access keys are being used from a Tor exit node. Which service provides this detection automatically without any configuration beyond enabling it?
Pick an answer.
curriculum

6 modules, 26 lessons

Module 1 is free — lessons, hands-on walkthrough and quiz. The course ends with a 51-question practice exam.

  • readAWS Threat Detection Services Overview25 min
  • videoGuardDuty: Intelligent Threat Detection20 min
  • hands-onHands-On: Enable GuardDuty and Query CloudTrail20 min
  • quizDetection Domain Quiz10 min
how it's built

Built by the CloudaQube team

No celebrity instructor — here is exactly what goes into the course instead.

  • 01 Follows the official SCS-C03 exam guide — every module is tagged with the exam domain it covers.
  • 02 7 guided hands-on walkthroughs you run in your own AWS account.
  • 03 6 module quizzes and a 51-question practice exam — every answer comes with an explanation.
  • 04 Last updated May 2026.
  • 05 Any module can become a hands-on lab in Labs Studio.
outcomes

What you'll be able to do

  • 01 Explain the six SCS-C03 exam domains and their relative weightings
  • 02 Identify threats using GuardDuty, Security Hub, and CloudTrail detective controls
  • 03 Build automated incident response workflows with EventBridge and Lambda
  • 04 Apply network segmentation, WAF rules, and Network Firewall policies for infrastructure security
  • 05 Evaluate IAM policies, SCP boundaries, and Identity Center configurations for least-privilege access
  • 06 Demonstrate data protection using KMS customer-managed keys, S3 encryption, and Secrets Manager rotation
before you start
  • — AWS Solutions Architect Associate level knowledge (SAA-C03 or equivalent)
  • — Practical experience with IAM, VPC, S3, and CloudTrail
  • — Familiarity with security concepts: encryption, PKI, network protocols, and the shared responsibility model
questions

Before you start SCS-C03

Is this course current for the SCS-C03 exam?

It follows the current SCS-C03 exam guide — all 6 exam domains, with the weights shown on this page, and was last updated May 2026.

How do I book the SCS-C03 exam, and what does it cost?

You book it directly with AWS. The official exam page lists the current fee, format, length and passing score, which can vary by country.

Is this an exam dump?

No. The lessons and quiz questions are written to teach the exam objectives, and every answer comes with an explanation. Real exam questions (“dumps”) break the exam provider’s candidate agreement and can cost you the certification.

What do I need for the hands-on walkthroughs?

Your own AWS account. The walkthroughs create real resources; the AWS Free Tier covers many of them. Delete what you create when you finish so you don’t keep paying. Pro members can use a CloudaQube AWS sandbox instead.

How long does it take?

About 10 hours of lessons, videos and hands-on walkthroughs across 6 modules, plus a 51-question practice exam.

What’s free?

Module 1 in full — lessons, hands-on walkthrough and quiz — with no card required. Any paid plan (from $8.99/mo) unlocks all 6 modules and the practice exam, and starts with a 14-day free trial.

get started

Start SCS-C03 with Module 1 free.

No card required. Unlock every module and the practice exam from $8.99/mo when you’re ready.

See pricing
      SCS-C03 Exam Prep Course: AWS Certified Security Specialty | CloudaQube