AWS Certified Security Specialty (SCS-C03) Exam Prep

About this course

This course contains the use of artificial intelligence.Prepare for the AWS Certified Security - Specialty (SCS-C03) exam with a course built specifically for the current exam version, released December 2, 2025. Much of the material still circulating targets the retired SCS-C02, so every chapter here maps to the six official SCS-C03 domains and their published weightings.You will work through detection strategy with GuardDuty, Security Hub, Detective and CloudTrail Lake, including the OCSF-aligned logging that is new in this version. You will build incident response playbooks for credential compromise and workload breaches, design network defenses with Network Firewall, WAF and PrivateLink, and implement encryption with KMS, CloudHSM and ACM. Identity and Access Management gets three full chapters because it carries the heaviest weighting at 20 percent, and policy-evaluation troubleshooting, tracing a single request through SCPs, permissions boundaries, resource policies and session policies, is where most candidates lose points.The course also covers generative AI security in depth, a genuinely new addition to SCS-C03: Amazon Bedrock Guardrails and the OWASP LLM Top 10, mapped to the exam skill 3.2.7.Taught by Aseem Mankotia (TechNuggets Academy). Every chapter includes hands-on console and CLI labs with exact commands, exam callouts flagging what AWS actually tests, and common traps to avoid. Two full-length practice tests with 88 scenario-based questions and detailed explanations round out your preparation, and the final chapter covers strategy for all four question formats the exam uses: multiple choice, multiple response, ordering and matching.