YouTubeNew identity labs every week on YouTube — subscribe
CloudKnowledge
cloudknowledge
SCS-C03specialtyAWS

AWS Certified Security - Specialty

AWS Certified Security - Specialty

Questions
65 (50 scored + 15 unscored)
Duration
170 min
Passing score
750 / 1000
Price (USD)
$300
Validity
3 years

What this exam is like

Who it's for

Cloud engineers securing AWS workloads; IAM is the largest domain.

Prerequisites

None formally. AWS recommends hands-on AWS security experience.

What it tests

Detection16%
Incident Response14%
Infrastructure Security18%
Identity and Access Management20%
Data Protection18%
Security Foundations and Governance14%

Prep roadmap

  1. 1
    IAM deep diveWeek 1–2

    Policy evaluation, roles, SCPs, permission boundaries, Identity Center with Entra ID.

  2. 2
    Detection & responseWeek 3–4

    GuardDuty, Security Hub, CloudTrail, Detective; build a simple response runbook.

  3. 3
    Infra & data protectionWeek 5–6

    VPC security, WAF, KMS, Secrets Manager, S3 protection.

  4. 4
    Practice examsWeek 7–8

    Timed full-length practice — 170 minutes is long, build stamina.

  5. 5
    Book and sit the exam

    Schedule via AWS Certification with Pearson VUE — online or test centre.

  6. ✓
    Certified 🎉

    Add it to LinkedIn and your CV — then pick the next step on the certification path.

What you can do after

  • ✓Design least-privilege access across AWS accounts
  • ✓Federate AWS access from Entra ID
  • ✓Detect and respond to AWS security incidents
RolesCloud Security EngineerCloud IAM EngineerDevSecOps Engineer
YouTube
CloudKnowledge channel

Watch every lab end to end — Entra ID, Conditional Access, PIM, hybrid identity and exam walkthroughs.

Watch on YouTube →