AWS Certified Security Study Guide

In the newly revised second edition of AWS Certified Security Study Guide: Specialty (SCS-C02) Exam, a team of veteran Amazon Web Services cloud security experts delivers a comprehensive roadmap to succeeding on the challenging AWS Certified Security Specialty certification exam. You'll prepare for the exam faster and smarter with authoritative content, an assessment test, real-world examples, practical exercises, and updated chapter review questions. You'll also acquire the on-the-job skills you need to hit the ground running in your next AWS cloud security position.

This book offers complete coverage of every tested exam objective, including threat detection, incident response, security logging and monitoring, cloud infrastructure security, identity and access management (IAM), data protection, and management and security governance.

It also includes:

• Complimentary access to the hands-on, digital Sybex learning environment and test bank, with hundreds of practice questions, flashcards, and a glossary of important terminology, accessible from a wide variety of devices
• All the material you need to conquer the difficult SCS-C02 exam on your first attempt
• Quick reference material ideal for fast on-the-job use in any AWS cloud security-related role

An up-to-date and essential study companion for anyone preparing to take the AWS Certified Security (SCS-C02) exam, this study guide is also ideal for aspiring and practicing AWS cloud security professionals seeking a refresher on critical knowledge you'll need every day at your current or next job.

Assessment Test xxvii

Chapter 1 Security Fundamentals 1

Chapter 2 Cloud Security Principles and Frameworks 45

Chapter 3 Management and Security Governance 67

Chapter 4 Identity and Access Management 87

Chapter 5 Security Logging and Monitoring 131

Chapter 6 Infrastructure Protection 191

Chapter 7 Data Protection 293

Chapter 8 Threat Detection and Incident Response 385

Appendix A Answers to Review Questions 431

Appendix B Creating Your Security Journey in AWS 441

Appendix C AWS Security Services Portfolio 449

Appendix D DevSecOps in AWS 467

Index 501

ABOUT THE AUTHORS

MAURICIO MUÑOZ is a Senior Manager of a Specialist Solutions Architects team at AWS in Latin America.

DARÍO GOLDFARB is a Security Solutions Architect at AWS in Latin America.

ALEXANDRE M.S.P. MORAES is a Director of TelTec, a Brazilian systems integrator focused on network design, security architecture, and cloud computing.

OMNER BARAJAS is a Security Specialist Solutions Architect at AWS in Mexico. He has more than 18 years of professional experience in IT.

ANDRÉS GONZÁLEZ SANTOS is a Senior Security Architect at AWS in Latin America.

ROGERIO KASA is a Senior Security Solutions Architect at AWS in Latin America.

Your comprehensive guide to succeeding on the AWS^® Certified Security Specialty certification

The second edition of the AWS^® Certified Security Study Guide is your comprehensive resource for full coverage of the challenging SCS-C02 exam. This Sybex Study Guide covers 100% of the SCS-C02 objectives. Prepare for the exam faster and smarter with Sybex thanks to accurate content that includes real-world examples and scenarios, practical exercises, and chapter review questions. Reinforce and remember what you’ve learned with the Sybex online learning environment and test bank, accessible from nearly anywhere. Get prepared for the newest AWS^® Certified Security exam with Sybex.

Coverage of 100% of all exam objectives in this Study Guide means you’ll be ready for:

• Threat Detection and Incident Response
• Security Logging and Monitoring
• Cloud Infrastructure Security
• Identity and Access Management
• Data Protection
• Management and Security Governance

ABOUT THE AWS^® Certified Security Certification

The AWS^® Certified Security certification is ideal for those seeking to demonstrate their proficiency in securing Amazon Web Services products and cloud workloads. This credential verifies a professional’s ability to design and implement security solutions in the AWS environment.

Interactive learning environment

Take your exam prep to the next level with Sybex’s superior interactive online study tools. To access our learning environment, simply visit www.wiley.com/ go/sybextestprep, register your book to receive your unique PIN, and instantly gain one year of FREE access after activation to:

• Interactive test bank with 2 practice exams to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you’re ready to take the certification exam.
• 100 electronic flashcards to reinforce learning and last-minute prep before the exam
• Comprehensive glossary in PDF format gives you instant access to the key terms so you are fully prepared