AWS WAF, Shield, and Amazon Inspector — Edge Protection and Vulnerability Scanning
SCS-C03 Domain 3 — WAF rule groups, managed rules, rate-based rules, Shield Advanced, and Inspector EC2/ECR/Lambda vulnerability scanning
Mhd3omar Blog
Cloud Incident Response and Amazon Detective — IR Playbooks and Investigation
SCS-C03 Domain 2 — Cloud IR phases, EC2 forensics and containment, automated response with SSM and Step Functions, and Amazon Detective graph-based investigation
AWS Security Hub and Amazon Macie — CSPM and Data Classification
SCS-C03 Domain 1 — Security Hub finding aggregation, security standards, ASFF, Macie sensitive data discovery, and multi-account setup
Week 4 — Day 25: Putting It All Together — Security Posture Review
A full review connecting all four weeks — drawing the complete security architecture, identifying your weakest areas, and writing a personal threat model for your home lab and blog infrastructure.
DevSecOps Labs — Index & Ideas
A personal lab index — hands-on exercises mapped to each week of the DevSecOps study plan. Each lab has a clear objective, tools needed, and success criteria.
AWS CloudTrail and AWS Config — Audit Logging and Compliance
SCS-C03 Domain 1 — CloudTrail organisation trails, log integrity validation, Athena analysis, Config rules, conformance packs, and automated remediation
Week 4 — Day 24: CIS Benchmarks & Compliance Basics
A full walkthrough of CIS AWS Foundations Benchmark — understanding the key controls, running automated checks via Security Hub, remediating failures, and mapping controls to broader compliance frameworks.
Week 4 — Day 23: Threat Modeling with STRIDE
A full walkthrough of threat modeling using STRIDE — drawing data flow diagrams, identifying threats, rating risk, and applying the methodology to a real cloud-native application.
Amazon GuardDuty — Threat Detection, Finding Types, and Automation
SCS-C03 Domain 1 — GuardDuty finding types, data sources, multi-account setup, trusted IP lists, suppression rules, and EventBridge automation
Week 4 — Day 22: Cloud Incident Response
A full walkthrough of cloud incident response on AWS — the IR lifecycle, detecting and investigating a compromised IAM key or EC2 instance, containment steps, and building a runbook.