Home > Learning Paths > Path

AWS Blue Team Learning Path icon

AWS Blue Team Learning Path

AWS
Blue Team

Path Overview

Strengthen your AWS cloud environments with our defensive-focused blue team learning path. Progress from AWS fundamentals to advanced detection techniques with hands-on labs and practical scenarios. Learn to monitor logs, develop custom incident response playbooks, and implement effective security controls—essential and in-demand skills for safeguarding today’s critical cloud infrastructure. Finish the learning path prepared to pass the AWS Certified Security Specialty certification exam and get certified!

What You’ll Learn

  • AWS Security Fundamentals
  • Incident Response in AWS
  • Compliance & Governance
  • Cloud Security Monitoring
  • Security Automation
  • Data Security
  • Least Privilege
  • IAM Best Practices
  • Get AWS Certified Security Specialty certified

Prerequisites

  • Basic familiarity with AWS and core services (S3, VPC, EC2, etc…)
  • Basic security concepts (authentication, authorization, encryption, etc…)

If you have no prior AWS or cloud experience, we recommend learning the basics first. A great starting point is the AWS Cloud Practitioner certification.

Content

1

Introduction to AWS Security

Course
🧪 Hands-On Labs
Learn how to secure your cloud infrastructure with one of our best-selling courses: Introduction to AWS Security. Designed for AWS security beginners (but not complete beginners to AWS), this training course provides you with the essential knowledge and skills to protect your AWS environments and resources from all sorts of...
2

Beginner's Guide to AWS CloudTrail for Security

Course
Get started with AWS CloudTrail: one of the most important security services that AWS offers. While the CloudTrail service is enabled by default when you create an AWS account, it's enabled with limited functionality that can leave you blind and can hinder your ability to investigate security incidents. For example,...
3

Terraform on AWS: From Zero to Cloud Infrastructure

Course
🧪 Hands-On Labs
In this hands-on course, you’ll learn how to use Terraform to securely deploy resources on AWS using Infrastructure as Code (IaC). Guided by instructors with experience running Terraform in production, we’ll take you step-by-step from zero prior Terraform knowledge to confidently writing infrastructure as code and deploying production-ready AWS resources...
4

Securing Amazon S3 Data

Course
🧪 Hands-On Labs
Learn what Amazon S3 is, how it works, and how to protect your data. This course will show you how to create and configure buckets, upload and access objects, avoid common security misconfigurations (some of which have resulted in massive breaches), and how to run regular automated scans with open...
5

Practical Guide to AWS IAM Roles

Course
Learn how to use IAM Roles like the pros. This course answers questions like: What are IAM roles and how are they different from users? When should you use roles, and how? What are differences between trust policies, managed policies, and inline policies? What's an effective way to assume roles?...
6

Incident Response with CloudTrail and Athena

Course
Learn how to effectively respond to incidents in your AWS accounts regardless of whether you are running a single or multi-account setup using CloudTrail Lake and Athena — two native AWS services. This Incident Response (IR) course simulates attacks against your AWS environments that have been seen in the real-world....
7

Introduction to AWS Enumeration

Course
🧪 Hands-On Labs
Learn the basics of AWS enumeration in this Hands-On Labs course. Enumeration is the process of identifying and cataloguing AWS resources and services in an environment. The purpose is to gain a comprehensive understanding of the AWS environment, which is a critical step in assessing its security posture. Enumeration is...
8

AWS Certified Security Specialty Course

Course
🧪 Hands-On Labs
Let's get AWS Security Specialty Certified! Video lessons are accessible to all for free, and Hands-On Labs, Quizzes, and Practice Exams will be available to Cybr Premium Members. This course is in active development for the SCS-C03 and new content is made available weekly. Since this is a large course,...
9

AWS Certified Security Specialty Practice Exams

Practice Exams
Let's get AWS Security Specialty Certified! Apart from the sample version, Practice Exams will be available to Cybr Premium Members. These practice exams are in active development and new content is added regularly. We do not currently have an end date. Join us for free live study groups where we...