Best AWS Security Specialty Training in 2026
AWS Security Specialty (SCS-C02) tests AWS-service-specific knowledge: IAM, KMS, GuardDuty, Security Hub, Config. The right prep pairs a structured course with hands-on AWS console time. Stephane Maarek's Udemy course ($15-30 on sale) covers the video. Tutorials Dojo's 6 practice tests ($15) cover the practice. AWS Skill Builder (free tier, $29/mo paid) gives you official AWS labs. Plan 60 to 100 hours over 8 to 10 weeks.
Comparison of the four highest-trafficked online AWS Security Specialty prep options as of 2026-05-09, plus the books and practice-test vendors most candidates pair with them. No fluff, no listicles — just what's actually working in r/cissp post-pass surveys and the cybersecurity hiring channels we follow.
Comparison at a glance
| Provider | Format | Price | Time | Labs | Best for |
|---|---|---|---|---|---|
| Stephane Maarek's AWS Security Specialty Course (Udemy) Udemy |
Video + AWS console walkthroughs | $15-30 (frequently on sale) | ~30 hours of video | No (uses AWS Free Tier separately) | Self-paced video-led prep |
| Tutorials Dojo SCS-C02 Practice Tests (Jon Bonso) Tutorials Dojo |
Practice tests + scenario-based questions | $15-30 | ~30 hours of practice + review | N/A (test bank) | Last 2-3 weeks before the exam |
| A Cloud Guru — AWS Security Specialty Path Pluralsight (A Cloud Guru) |
Video + sandbox + hands-on labs | $39/month (now part of Pluralsight Cloud) | ~30-40 hours | Yes. Included AWS Sandbox. | Hands-on learners with employer subscription |
| AWS Skill Builder (official AWS training) AWS |
Video + AWS-native labs + Cloud Quest games | Free tier + $29/month Individual Subscription | ~30-50 hours for SCS-C02 paths | Yes. Official AWS labs (paid tier). | Hands-on practice with AWS-native scenarios |
| AWS Security Whitepapers + FAQs AWS |
PDF whitepapers | Free | ~20-30 hours of reading | No | Final-week review |
Our pick
If you're a career-switcher paying out of pocket: Stephane Maarek's Udemy course ($15-30 on sale), Tutorials Dojo's SCS-C02 practice tests ($15), and AWS Skill Builder free tier for hands-on labs. Total under $50. 8 to 10 weeks at 8 hrs/wk. Best per-dollar pick for someone already 6+ months into AWS.
If your employer is paying: A Cloud Guru AWS Security path ($39/mo for ~3 months), AWS Skill Builder Subscription ($29/mo) for the official AWS sandbox, and Tutorials Dojo practice tests. Total around $220 over 3 months. Covers both video and AWS-native hands-on time.
If you're already experienced and need a fast track: Already work with AWS daily? Skip the video courses. Tutorials Dojo practice tests, read the AWS Security Best Practices whitepaper, and 2 weeks of focused console time on IAM, KMS, GuardDuty, Security Hub, and Config. 3-week sprint.
Provider deep-dives
Stephane Maarek's AWS Security Specialty Course (Udemy) — Udemy
Video + AWS console walkthroughs · $15-30 (frequently on sale) · ~30 hours of video · Labs: No (uses AWS Free Tier separately)
Best for: Self-paced video-led prep
What's good:
- Stephane Maarek's AWS courses are the most-purchased in the AWS Udemy ecosystem. 1M+ students across his catalog.
- Maps to the SCS-C02 exam objectives. Maarek updates within months of every exam refresh.
- Lifetime Udemy access. Re-attempts cost nothing extra.
The honest tradeoff:
- Video walkthroughs of the AWS console only. You still need to log into AWS yourself for real hands-on practice.
- No practice tests included. Pair with Tutorials Dojo for that piece.
Tutorials Dojo SCS-C02 Practice Tests (Jon Bonso) — Tutorials Dojo
Practice tests + scenario-based questions · $15-30 · ~30 hours of practice + review · Labs: N/A (test bank)
Best for: Last 2-3 weeks before the exam
What's good:
- The most-recommended practice test set for any AWS specialty cert. Questions match real exam difficulty closely.
- Detailed explanations on every wrong answer with citations to specific AWS docs.
- Review mode lets you drill on weak areas without re-running the full test.
The honest tradeoff:
- Just practice tests. Pair with a video course for the underlying material.
- $15-30 is fair value, but it adds up if you also buy TD's other AWS practice tests for adjacent certs.
A Cloud Guru — AWS Security Specialty Path — Pluralsight (A Cloud Guru)
Video + sandbox + hands-on labs · $39/month (now part of Pluralsight Cloud) · ~30-40 hours · Labs: Yes. Included AWS Sandbox.
Best for: Hands-on learners with employer subscription
What's good:
- AWS Sandbox is included. You don't need your own AWS account or worry about runaway billing during practice.
- Labs are scenario-based: set up GuardDuty plus Security Hub from scratch, configure IAM Permission Boundaries. The exam tests scenarios, not memorization.
- Single subscription covers the entire AWS cert ladder if you plan to pursue more.
The honest tradeoff:
- $39/mo is more than Maarek's Udemy course for a similar video learning path.
- Not as deep as the official AWS Skill Builder Subscription on AWS-native hands-on.
Open Pluralsight (A Cloud Guru) →
AWS Skill Builder (official AWS training) — AWS
Video + AWS-native labs + Cloud Quest games · Free tier + $29/month Individual Subscription · ~30-50 hours for SCS-C02 paths · Labs: Yes. Official AWS labs (paid tier).
Best for: Hands-on practice with AWS-native scenarios
What's good:
- Official AWS training. Authored by the team that writes the exams.
- Subscription tier includes the AWS Cloud Quest: Security Engineer game-based hands-on path plus official labs.
- Free tier alone covers the SCS-C02 Exam Prep path with 6+ hours of focused review.
The honest tradeoff:
- $29/month gets expensive if prep stretches past 2 to 3 months.
- Video production is dry compared to Stephane Maarek or A Cloud Guru. Efficient but no polish.
AWS Security Whitepapers + FAQs — AWS
PDF whitepapers · Free · ~20-30 hours of reading · Labs: No
Best for: Final-week review
What's good:
- AWS Security Best Practices, Well-Architected Security Pillar, and the IAM, KMS, GuardDuty FAQs are required reading. Exam questions are sometimes paraphrases of FAQ entries.
- Free, official, and current.
- Useful as on-the-job reference even after passing.
The honest tradeoff:
- Dry. Most candidates only get through them in the final 2 weeks of prep.
- Volume is high. Pick the 4 or 5 most-relevant whitepapers rather than reading all of them.
What to skip
Generic "AWS Cloud Practitioner" courses as a starting point
AWS Cloud Practitioner is a foundational cert. AWS Security Specialty assumes intermediate AWS knowledge (Solutions Architect Associate or Developer Associate as a typical prereq). If you're brand new to AWS, take SAA-C03 first, then SCS-C02. Don't start at the Specialty level.
Outdated SCS-C01 study materials
The exam was renamed from SCS-C01 to SCS-C02 in 2024. Older C01 materials are still available cheaply but are NOT a substitute. C02 weights Security Hub and AWS Config more heavily. Verify the version on every resource you buy.
Free resources worth knowing about
- Adrian Cantrill's AWS Security Specialty course preview — Adrian Cantrill's full AWS Solutions Architect course is paid, but his free YouTube content covers KMS and IAM in unmatched depth.
- AWS re:Invent security session videos — Annual re:Invent sessions on GuardDuty, Security Hub, and IAM are the best free deep-dive into how AWS expects you to use these services.
- r/AWSCertifications — Post-pass writeups segmented by exam. Search 'SCS-C02' for the most recent.
- AWS SCS-C02 Exam Guide PDF — The official exam objectives PDF. Read this first. Every prep decision should map back to it.
Frequently asked questions
Do I need AWS Solutions Architect Associate before AWS Security Specialty?
Recommended but not required. The Security Specialty assumes intermediate AWS knowledge across IAM, VPC, KMS, S3, Lambda, and CloudWatch. Most candidates who pass SCS-C02 have either passed SAA-C03 or have 12+ months of hands-on AWS work. If you skip the Associate, plan for 30 to 50 additional prep hours filling foundational gaps.
What's the best AWS Security Specialty course?
Stephane Maarek's Udemy course ($15-30 on sale) for the video portion. Pair with Tutorials Dojo's practice tests ($15) and AWS Skill Builder free tier for official hands-on labs. Total under $50. Most-recommended combination on r/AWSCertifications post-pass writeups for the SCS-C02 exam.
How long does AWS Security Specialty prep take?
Plan for 8 to 12 weeks at 8 to 10 hours per week. That's 60 to 120 total hours. Candidates already working in AWS daily close in 4 to 6 weeks. Candidates without an AWS Associate cert often need 16+ weeks. The exam itself is 65 questions in 170 minutes.
Is A Cloud Guru still worth it after Pluralsight acquired them?
Yes for the AWS-specific hands-on sandbox. No if you're price-sensitive. Pluralsight integrated A Cloud Guru's content into their Cloud Subscription. The price is higher than a standalone Udemy course, but the AWS Sandbox is included. You don't need to manage your own AWS billing during practice. Pluralsight Cloud at $39/mo for 2 to 3 months is the realistic cost.
Are Tutorials Dojo practice tests harder than the real exam?
Slightly harder, which is intentional. Jon Bonso designs questions at exam-difficulty plus 10 to 15% to give you headroom on test day. Pass his practice tests at 75% on first attempt and you'll pass the real exam on first attempt. Combined with the 6-test bank, you'll see roughly 390 unique scenario-based questions before exam day.
Where to go from here
- Take the cert match quiz — 7 questions, scores your fit across 70+ certs (in case AWS Security Specialty isn't actually your right pick).
- CISO salary calculator — compare expected ROI on this cert against your career stage.
- CISSP / CCISO / CISM study guide — the cert-vs-cert decision before you pick a course.
- CISO Salary in 2026 — what hitting CISSP unlocks downstream.
- Play CISO Simulator free — a 5-year strategy sim drilling the budget pressure AWS Security Specialty certifies you to handle.