AWS Security Technology Syllabus

• Explain AWS shared responsibility and security architecture using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: map the components, identities, data paths and trust boundaries for AWS shared responsibility and security architecture
• Evidence: produce an annotated architecture diagram and explain the validation result

• Explain Organizations, accounts and multi-account guardrails using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: compare a baseline design with a risky or incomplete design for Organizations, accounts and multi-account guardrails
• Evidence: produce a design decision record and explain the validation result

• Explain IAM users, roles, policies and permission boundaries using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: trace one permitted and one denied access decision for IAM users, roles, policies and permission boundaries
• Evidence: produce an access-flow worksheet and explain the validation result

• Explain IAM Identity Center and federated access using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: plan a least-privilege configuration and a safe rollout sequence for IAM Identity Center and federated access
• Evidence: produce a change plan with rollback steps and explain the validation result

• Explain VPC security groups, NACLs, endpoints and network inspection using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: review policy order, dependencies, exceptions and rollback conditions for VPC security groups, NACLs, endpoints and network inspection
• Evidence: produce a policy review checklist and explain the validation result

• Explain KMS, encryption, secrets and certificate services using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: configure or assess the control with secure defaults for KMS, encryption, secrets and certificate services
• Evidence: produce a configuration evidence sheet and explain the validation result

• Explain S3 and workload data protection using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: test expected and unexpected behavior against explicit pass criteria for S3 and workload data protection
• Evidence: produce a pass/fail validation record and explain the validation result

• Explain CloudTrail, Config and Security Hub using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: locate the relevant telemetry and build an investigation timeline for CloudTrail, Config and Security Hub
• Evidence: produce an investigation timeline and explain the validation result

• Explain GuardDuty, Inspector and Detective workflows using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: triage a realistic finding and separate risk from expected activity for GuardDuty, Inspector and Detective workflows
• Evidence: produce a triage note with severity rationale and explain the validation result

• Explain WAF, Shield and edge protection using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: tune a noisy control without removing required visibility for WAF, Shield and edge protection
• Evidence: produce a tuning record with before-and-after evidence and explain the validation result

• Explain Incident response and forensic readiness using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: troubleshoot a production-style failure using an evidence-first workflow for Incident response and forensic readiness
• Evidence: produce a troubleshooting runbook entry and explain the validation result

• Explain Well-Architected security capstone using current Amazon Web Services terminology and connect it to the AWS Security architecture
• Practice: combine design, validation, operations and handover in the capstone for Well-Architected security capstone
• Evidence: produce a concise capstone handover and portfolio artifact and explain the validation result

This is a published technology learning blueprint. Contact Techclick to confirm current trainer availability, delivery format, schedule, lab access and pricing before making a decision.

No. Vendor certification programmes and exam blueprints change independently. This syllabus focuses on practical technology skills and official documentation.

Yes, subject to trainer and lab availability. Share your existing environment, target outcomes and preferred timeline for a scoped discussion.