SCS-C03 Domain 1 - Security Hub finding aggregation, security standards, ASFF, Macie sensitive data discovery, and multi-account setup

Practical hands-on lab index mapping real-world cloud security and DevSecOps exercises to each week of the 4-week study plan. Includes lab objectives, tools, success criteria, and direct links to full walkthroughs.

A full review connecting all four weeks - drawing the complete security architecture, identifying your weakest areas, and writing a personal threat model for your home lab and blog infrastructure.

SCS-C03 Domain 1 - CloudTrail organisation trails, log integrity validation, Athena analysis, Config rules, conformance packs, and automated remediation

A full walkthrough of CIS AWS Foundations Benchmark - understanding the key controls, running automated checks via Security Hub, remediating failures, and mapping controls to broader compliance frameworks.

A full walkthrough of threat modeling using STRIDE - drawing data flow diagrams, identifying threats, rating risk, and applying the methodology to a real cloud-native application.

SCS-C03 Domain 1 - GuardDuty finding types, data sources, multi-account setup, trusted IP lists, suppression rules, and EventBridge automation

A full walkthrough of cloud incident response on AWS - the IR lifecycle, detecting and investigating a compromised IAM key or EC2 instance, containment steps, and building a runbook.

A full walkthrough of Zero Trust architecture principles and how AWS implements them - IAM Identity Center, VPC Lattice, PrivateLink, and moving from perimeter security to identity-based access.

A full walkthrough of AWS CI/CD tools - CodePipeline stages and actions, CodeBuild buildspec, CodeDeploy deployment strategies, and end-to-end pipeline examples