AWS Security Specialty

About the AWS Security Specialty

AWS Security Specialty is the cloud security cert you earn when AWS is your operating environment. It tests deep knowledge of AWS-native controls: IAM, KMS, CloudTrail, GuardDuty, Security Hub, Macie, Inspector, WAF, Shield, and the shared responsibility model in practice. Unlike CCSP's vendor-neutral governance focus, SCS-C02 is hands-on AWS. Expect scenarios that make you pick the right bucket policy, the right KMS key policy, and the right VPC endpoint configuration for a given requirement. Employers running AWS-first security programs often list this cert above CISSP for cloud security engineering roles.

Who should earn it

Security engineers and architects building on AWS, DevSecOps practitioners running AWS-native security pipelines, and consultants working with AWS-first customers.

Exam details

Provider

Amazon

Exam code

SCS-C02

Questions

65

Duration

170 minutes

Passing score

750/1000

Exam fee

$300 (verify with Amazon)

Renewal

Every 3 years via CPE

Experience level

Specialized

DoD 8570/8140

Not on the list

Prerequisites

Five years of IT security experience recommended, including two years of hands-on AWS security workload experience. Not enforced.

Key domains

• Threat Detection and Incident Response
• Security Logging and Monitoring
• Infrastructure Security
• Identity and Access Management
• Data Protection
• Management and Security Governance

Salary impact

Typical salary lift is $15,000-$30,000 for cloud security engineers in AWS-heavy shops. Roles in the $140,000-$200,000 range list it as required or strongly preferred.

Most relevant roles