AWS Certified Solutions Architect Combo Certification Boot Camp
The AWS Certified Solution Architect 6 day Boot Camp covers the Amazon AWS Associate SAA-C03 & SAP-C02 Professional exams.
More
Before Class
Why It Matters
Training Camp sets you up for success by ensuring you’re well-prepared before class begins. We provide comprehensive pre-course materials, including study guides, e-learning modules, and practice questions, to help you familiarize yourself with key AWS concepts and assess your current knowledge. You will also receive a detailed course roadmap and access to our expert instructors for any pre-class questions. This preparation ensures you arrive ready to fully engage in the intensive training, maximizing your learning experience and boosting your confidence for exam day.
Day One
AM
Morning - Course Introduction and Exam Overview
- Overview of the AWS Certified Security – Specialty (SCS-C02) exam domains
- Course structure and expectations
- Hands-on environment setup: AWS console walk-through and lab credentials
- Identity & Access Management (IAM) Foundations
- IAM entities (users, groups, roles, policies)
- Policy evaluation logic and permission boundaries
- Multi-factor authentication (MFA) best practices
- Lab: Creating IAM users, groups, and roles; assigning managed and custom policies
PM
Afternoon - Advanced IAM and Access Control
- IAM Access Analyzer
- Cross-account roles and delegation
- AWS Organizations and service control policies (SCPs)
- Lab: Setting up cross-account roles; enforcing guardrails with SCPs
- AWS Security Services Overview
- High-level overview of AWS security services (WAF, GuardDuty, Macie, Shield, Config, etc.)
- When to use specific services
- Lab: Exploring key service dashboards and alerts
Why It Matters
Proper IAM design is the cornerstone of AWS security. Mastering IAM helps prevent unauthorized access, enforces least privilege, and sets the stage for all subsequent security measures. Leveraging the right AWS security services at the right time can minimize risks, reduce manual overhead, and ensure compliance. Advanced IAM concepts and security services knowledge make your cloud architecture resilient.
Day Two
AM
Morning - Logging and Monitoring in AWS
- CloudWatch metrics, logs, and alarms
- CloudTrail for API call logging
- AWS Config for resource configuration tracking
- Correlating logs for root-cause analysis
- Lab: Configuring CloudWatch alarms, CloudTrail insights, and investigating suspicious behavior
- Threat Detection and Incident Response
- GuardDuty for threat detection
- Amazon Detective for deeper investigations
- AWS Security Hub for central security management
- Incident response best practices
- Lab: Setting up GuardDuty, responding to alerts, and investigating a simulated breach
PM
Afternoon - Infrastructure Security
- VPC security (security groups, NACLs, subnets)
- Network segmentation and best practices
- AWS WAF and AWS Shield (Standard/Advanced)
- Lab: Configuring a secure VPC, setting up WAF rules
- Data Protection
- Encryption at rest (AWS KMS, CloudHSM)
- Encryption in transit (TLS, AWS Certificate Manager)
- S3 bucket policies and encryption settings
- Lab: Implementing SSE-KMS, client-side encryption, and server-side encryption
Why It Matters
A robust logging and monitoring setup enables proactive threat detection and quick response. Visibility into your environment is essential to mitigate risks before they escalate. Ensuring secure network boundaries and protecting data at every stage is fundamental for compliance, privacy, and maintaining user trust. These safeguards help defend against unauthorized access and data breaches.
Day Three
AM
Morning - Security Automation and Governance
- Automating secure infrastructure with CloudFormation or the AWS CDK
- Governance at scale using AWS Organizations
- Automated compliance checks with AWS Config rules
- Lab: Building secure CloudFormation stacks, configuring AWS Config rules
- Review of Key Exam Domains
- Recap of SCS-C02 domains (IAM, Logging & Monitoring, Infrastructure Security, Data Protection, Threat Detection & Incident Response)
- Common pitfalls and exam strategies
PM
Afternoon - Final Exam Preparation
- Practice questions and group discussion
- Exam timing, structure, and official guidelines
- Last-minute tips, reference materials, and study resources
- AWS Certified Security – Specialty (SCS-C02) Exam
- Administered in a proctored setting (on-site or online)
- Exam duration: as per AWS guidelines (typically 170 minutes)
Why It Matters
Automation helps maintain consistency, reduce manual errors, and ensure security best practices are applied across multiple AWS accounts. Governance at scale maintains compliance and operational efficiency. Proper exam readiness ensures you can confidently showcase your expertise. By the end of Day 3, you’ll have hands-on practice, theoretical knowledge, and a clear strategy for passing the AWS Certified Security – Specialty exam.
