Curriculum For This Course
Video tutorials list
-
Important Course Information
Video Name Time 1. Important Course Information 0:42 -
Domain 1 - Detection
Video Name Time 1. Amazon GuardDuty 3:58 2. Amazon GuardDuty - Findings & Automation 3:42 3. Amazon GuardDuty - Multi-account Strategy 3:11 4. Amazon GuardDuty - Advanced 3:08 5. [CCP] Security Hub Overview 2:43 6. Security Hub - Advanced 8:39 7. Amazon Detective 3:26 8. Detective - Architectures 1:06 9. [CCP/SAA/SOA] Amazon Inspector 2:28 10. [SOA] Logging in AWS for Security and Compliance 2:44 11. [SOA] CloudWatch - Unified CloudWatch Agent - Overview 3:11 12. [Important] AWS Console UI Update 1:13 13. [SOA/DOP] CloudWatch - Unified CloudWatch Agent - Hands On 16:35 14. CloudWatch Unified Agent - Troubleshooting 1:34 15. [SAA/DVA/SOA] CloudWatch Logs 6:01 16. [SAA/DVA/SOA] CloudWatch Logs Hands On 8:49 17. [SAA/DVA/SOA] CloudWatch Alarms 4:12 18. [SAA/DVA/SOA] CloudWatch Alarms Hands On 4:37 19. CloudWatch Contributor Insights 1:15 20. [SAA/DVA/SOA] Amazon EventBridge 6:59 21. [SAA/DVA/SOA] Amazon EventBridge - Hands On 5:57 22. [SAA/DVA/SOA] Amazon Athena 5:24 23. [SAA/DVA/SOA] Amazon Athena - Hands On 5:40 24. Amazon Athena - Troubleshooting 1:24 25. [SAA] CloudTrail 5:41 26. [CCP/SAA/DVA/SOA] CloudTrail Hands On 1:30 27. CloudTrail - Data Lake 1:38 28. [SAA/DVA/SOA] CloudTrail - EventBridge Integration 1:38 29. [SOA] CloudTrail for SysOps 3:05 30. CloudTrail to CloudWatch Metrics Filter - Example 1:01 31. CloudTrail - Integration with Athena 0:43 32. Monitoring Account Activity 1:24 33. [CCP/SAA/SOA] Macie 1:02 34. Macie - Advanced 3:45 35. [SAA/DVA/SOA] S3 Event Notifications 3:30 36. [SAA/DVA/SOA] S3 Event Notifications - Hands On 5:41 37. [SAA/SOA] VPC Flow Logs 4:16 38. [SAA/SOA] VPC Flow Logs Hands On 10:10 39. VPC Flow Logs - Advanced 0:45 40. [SAA/SOA] VPC Traffic Mirroring 2:09 41. VPC Traffic Mirroring - Architectures 3:43 42. VPC Network Access Analyzer 2:15 43. Route 53 - Query Logging 2:17 44. [SAA] OpenSearch 3:51 45. OpenSearch - Advanced 3:10 -
Domain 2 - Incident Response
Video Name Time 1. [CCP/SOA] Penetration Testing on AWS 1:47 2. DDoS Simulation Testing on AWS 1:03 3. Compromised AWS Resources 5:43 4. Compromised AWS Credentials 2:35 5. EC2 Key Pairs & Remediating Exposed EC2 Key Paris 3:54 6. EC2 Instance Connect 2:48 7. EC2 Serial Console 1:51 8. Lost EC2 Key Pair - Linux 5:01 9. Lost EC2 Key Pair - Windows 3:06 10. EC2 Rescue Tool for Linux & Windows 2:58 11. AWS Abuse Report 1:54 12. [SOA] Systems Manager Overview 3:34 13. [SOA] Start EC2 Instances with SSM Agent 3:31 14. [SOA] AWS Tags & SSM Resource Groups 4:23 15. [SOA] SSM Documents & SSM Run Command 11:32 16. [SOA] SSM Automations 7:08 17. [SAA/DVA/SOA] SSM Parameter Store Overview 4:15 18. [SAA/DVA/SOA] SSM Parameter Store Hands On (CLI) 6:54 19. [SOA] SSM Inventory & State Manager 7:35 20. [SOA] SSM Patch Manager and Maintenance Windows 4:44 21. [SOA] SSM Patch Manager and Maintenance Windows - Hands On 5:17 22. [SOA] SSM Session Manager Overview 2:46 23. [SOA] SSM Session Manager Hands On 2:25 24. [SOA] SSM Cleanup 0:19 -
Domain 3 - Infrastructure Security
Video Name Time 1. [SAA/SOA] Bastion Host 2:40 2. [SAA/SOA] Bastion Host - Hands On 5:01 3. [SAA/SOA] NAT Gateway 3:47 4. [SAA/SOA] NAT Gateway - Hands On 3:03 5. [SAA/SOA] Site to Site VPN 3:57 6. [SAA/SOA] Site to Site VPN - Hands On 1:53 7. [CCP] Client VPN 1:20 8. Client VPN - Client Authentication Types 2:01 9. [SAA/SOA] VPC Peering 2:06 10. [SAA/SOA] VPC Peering - Hands On 5:46 11. [SOA] DNS Resolution Options in VPC 2:53 12. [SOA] DNS Resolution Options in VPC - Hands On 3:20 13. VPC Endpoints - Overview 5:26 14. VPC Endpoint Policies 5:22 15. VPC Endpoint - Examples 6:22 16. [SOA] PrivateLink 3:06 17. [SOA] PrivateLink - Hands On 1:13 18. [SAA/SOA] NACL & Security Groups 10:43 19. [SAA/SOA] NACL & Security Groups - Hands On 6:32 20. Security Groups Outbound Rules & Managed Prefixes 1:45 21. Security Groups - Extras 1:41 22. [SAA/SOA] AWS Transit Gateway 5:09 23. [SAA/SOA] Direct Connect 6:26 24. [SAA/SOA] Direct Connect + S2S VPN 1:00 25. [CCP/SAA/DVA/SOA] CloudFront Overview 5:21 26. [CCP/SAA/DVA/SOA] CloudFront Hands On 5:13 27. [SAA/DVA/SOA] CloudFront - ALB/EC2 as an Origin 2:35 28. [SAA/DVA/SOA] CloudFront - Geo Restriction 1:39 29. [DVA] CloudFront - Signed URL & Cookies 3:38 30. [DVA] CloudFront - Signed URL & Cookies - Hands On 4:43 31. [DVA] CloudFront - Field Level Encryption 2:11 32. CloudFront - Origin Access Control and Origin Access Identity (OAC & OAI) 1:59 33. CloudFront - Other 3:28 34. WAF - Web Application Firewall 4:44 35. [SAA] Shield 2:04 36. [SAA] AWS Firewall Manager 2:42 37. [SAA] WAF & Shield - Hands On 5:47 38. WAF - Hands On 8:43 39. AWS Shield Advanced - Metrics 0:53 40. [SAA] DDoS Attack Protection 5:52 41. [SAA/DVA] API Gateway 6:37 42. [SAA/DVA] API Gateway - Hands On 10:19 43. API Gateway - Advanced 3:01 44. [CCP/SOA] AWS Artifact 1:59 45. Route 53 - DNSSEC 7:43 46. [SAA/SOA] AWS Network Firewall 3:00 47. AWS Network Firewall - Advanced 3:40 48. Amazon SES 2:47 -
Domain 4 - Identity and Access Management
Video Name Time 1. IAM Policies in Depth 6:29 2. IAM Condition Operators 2:15 3. IAM Global condition context keys 7:05 4. IAM Permission Boundaries 2:11 5. IAM Policy Evaluation Logic 5:52 6. Identity-Based Policies vs. Resource-Based Policies 4:38 7. ABAC (Attribute based access control) 3:38 8. IAM MFA 5:04 9. IAM Credentials Report 1:25 10. IAM Roles and PassRole to Services 2:11 11. IAM Roles Anywhere 3:26 12. IAM Trust Policies 1:42 13. [CCP/SAA/DVA/SOA] IAM Security Tools 0:54 14. [CCP/SAA/DVA/SOA] IAM Security Tools - Hands On 2:23 15. IAM Access Analyzer 2:35 16. [SOA] STS Overview 3:47 17. STS Version 1 & Version 2 2:18 18. STS External ID 3:38 19. STS - Revoking IAM Role Temporary Security Credentials 1:55 20. EC2 Instance Metadata Overview 4:02 21. EC2 Instance Metadata - IMDSv1 vs IMDSv2 4:36 22. S3 - Authorization Evaluation Process 5:31 23. S3 - Cross Account Access and Canned ACL 5:00 24. S3 - Samples S3 Bucket Policies 1:26 25. S3 - VPC Endpoint Strategy 4:34 26. S3 - Regain Access to Locked S3 Bucket 0:56 27. S3 - Block Public Access Settings 0:54 28. [SAA/DVA/SOA] S3 Access Points 3:34 29. [SOA] S3 Access Points - Hands On 4:15 30. [SOA] S3 Multi-Region Access Points 2:39 31. [SOA] S3 Multi-Region Access Points - Hands On 3:42 32. [SAA/DVA/SOA] S3 CORS 4:19 33. [SAA/DVA/SOA] S3 CORS - Hands On 7:15 34. [SAA/DVA/SOA] S3 Access Logs 1:15 35. S3 Access Logs - Permissions 0:46 36. [SAA/DVA/SOA] S3 Access Logs - Hands On 3:19 37. [DVA/SOA] Cognito User Pools 3:24 38. [DVA] Cognito Identity Pools 7:19 39. Cognito User Pool User Groups 1:33 40. Identity Federation & Cognito 8:49 41. SAML 2.0 Metadata File Troubleshooting 2:47 42. [SAA/SOA] AWS IAM Identity Center 6:44 43. AWS IAM Identity Center - Extras 5:47 44. AWS Directory Services 13:09 -
Domain 5 - Data Protection
Video Name Time 1. [SAA/DVA/SOA] Encryption 101 3:58 2. CloudHSM 5:08 3. CloudHSM - Advanced 2:21 4. KMS 8:13 5. [SAA] KMS Multi Region Key 6:10 6. [DVA] KMS Envelope Encryption 7:28 7. [SOA] KMS Key Rotation 3:42 8. KMS Key Deletion 4:20 9. KMS Key Policies Deep Dive 4:20 10. KMS Grants 4:36 11. KMS Condition Keys 1:36 12. KMS Key Policies Evaluation Process 5:11 13. KMS Key Cross-Account Access 3:28 14. KMS Asymmetric Encryption 3:55 15. KMS API Calls Limits and Data Key Caching 1:57 16. KMS Encryption Context 1:37 17. KMS with EBS 2:04 18. EFS Encryption 0:47 19. KMS with ABAC 0:46 20. KMS with Parameter Store 1:29 21. [SAA] Secrets Manager 2:10 22. [SAA] Secrets Manager - Hands On 4:00 23. Secrets Manager - Advanced 4:29 24. [SAA/DVA/SOA] S3 Encryption 7:31 25. S3 Encryption Summary 1:16 26. [SAA/DVA/SOA] S3 Default Encryption 1:22 27. S3 Bucket Policies Examples 0:58 28. [DVA] S3 Bucket Key 2:52 29. Large File Upload to S3 with KMS Key 1:24 30. S3 Batch Encryption 1:10 31. [SAA/SOA] S3 Object Lock & Glacier Vault Lock 4:13 32. Glacier Vault Lock - Deep Dive 1:58 33. [SOA] Glacier Vault Lock - Hands On 3:57 34. [SAA/DVA/SOA] S3 Lifecycle Rules (with S3 Analytics) 4:19 35. [SAA/DVA/SOA] S3 Lifecycle Rules - Hands On 2:23 36. [CCP/SAA/DVA/SOA] S3 Replication 1:25 37. [CCP/SAA/DVA/SOA] S3 Replication - Hands On 6:29 38. [SAA/DVA/SOA] S3 Replication - Notes 0:57 39. RDS & Aurora Security 3:18 40. [CCP] Elastic Load Balancing Overview 6:30 41. [SAA/DVA/SOA] Network Load Balancer Overview 3:23 42. Network Load Balancer Advanced 3:06 43. [SAA/DVA/SOA] ELB Sticky Sessions 5:50 44. [SAA/DVA/SOA] ELB SSL Certificates 6:02 45. ELB - SSL Certificates - Advanced 6:00 46. Network Load Balancer - TLS Listeners 2:39 47. AWS Certificate Manager (ACM) 3:33 48. [DVA/SOA] AWS Certificate Manager (ACM) - Hands On 7:01 49. ACM - Advanced 6:41 50. [SAA/SOA] AWS Backup 3:09 51. [SAA/SOA] AWS Backup - Hands On 4:25 52. Amazon Data Lifecycle Manager 1:00 53. [DVA] AWS Nitro Enclaves 2:39 -
Domain 6: Security Foundations and Governance
Video Name Time 1. [SAA/SOA] Organizations 6:29 2. [CCP/SAA/SOA] Organizations - Hands On 9:59 3. [SOA] AWS Organizations - IAM Policies & Tag Policies 2:12 4. AWS Control Tower 3:49 5. [SAA/SOA] AWS Config 4:44 6. [SAA/SOA] AWS Config - Hands On 9:36 7. [SOA] AWS Config - Remediation Examples 1:01 8. [SOA] AWS Config - Aggregators 2:09 9. AWS Config - Conformance Packs 0:53 10. AWS Config - Organizational Rules 1:32 11. AWS Config - Use Cases 1:33 12. [CCP/SAA/SOA] Trusted Advisor + Hands On 3:18 13. [SAA/SOA] AWS Cost Explorer 2:08 14. [CCP] AWS Cost Anomaly Detection 1:10 15. [SAA] AWS Well-Architected Framework & Well-Architected Tool 6:06 16. AWS Acceptable Use Policy (AUP) 0:56 17. Audit Manager 2:53 18. [CCP/SAA] CloudFormation 3:31 19. [CCP/SAA] CloudFormation - Hands On 8:31 20. [SAA/DVA/SOA] CloudFormation - Service Role 3:21 21. [DVA/SOA] CloudFormation - Stack Policy 1:24 22. CloudFormation - Dynamic References 2:02 23. [DVA/SOA] CloudFormation - Termination Protection 1:13 24. CloudFormation - Drift 5:31 25. CloudFormation Guard 1:24 26. [CCP] AWS Service Catalog 1:41 27. AWS Resource Access Manager (AWS RAM) 4:52 28. [CCP] AWS Fault Injection Simulator (FIS) 1:54 29. AWS Resilience Hub 2:49 -
Other Services
Video Name Time 1. [SAA/DVA] Elastic Container Registry (ECR) 1:38 2. ECR Security 3:58 3. ECS Secret Management 1:08 4. EKS Concepts 0:58 5. Lambda Security 2:27 6. [DVA] Lambda in VPC 4:20 7. [DVA] Lambda in VPC - Hands On 4:39 8. [DVA] Lambda Function URL 3:54 9. [DVA] Lambda Function URL - Hands On 2:49 10. AWS Signer 2:14 11. AWS Verified Access 2:59 12. [SAA] Glue Overview 4:03 13. Glue Security 1:59 14. [CCP] Amazon WorkSpaces 1:48 15. Amazon Workspaces - Security 1:24 16. ASG Instance Refresh 1:26 17. EBS - Data Volume Wiping 0:50 18. CloudShell 1:02 19. [CCP/SOA] EC2 Image Builder 2:33 20. [SOA] EC2 Image Builder Hands On 11:55 21. EC2 Image Builder - Troubleshooting 1:06 22. Redshift Security 3:49 23. DynamoDB - Time To Live (TTL) 1:37 -
Exam Preparation
Video Name Time 1. State of Learning Checkpoint - AWS Certified Security Specialty 4:29 2. Exam Walkthrough and Signup 4:36 3. Save 50% on your AWS Exam Cost! 1:09 4. Get an Extra 30 Minutes on your AWS Exam - Non Native English Speakers only 1:04 -
Congratulations - AWS Certified Security Specialty
Video Name Time 1. AWS Certification Paths 6:05
Add Comment