AWS - Security Specialty (SCS-C03)

The AWS Certified Security - Specialty (SCS-C03) validates expertise in securing AWS workloads across six domains: threat detection, incident response, infrastructure security (edge, compute, and network), identity and access management, data protection (in transit, at rest, and key/secrets management), and security foundations and governance at multi-account scale. The exam assesses a candidate's ability to design and implement detective controls, contain and recover from security incidents, harden edge/compute/network layers, manage authentication and authorization (including federation, SCPs, RCPs, and permission boundaries), protect data with KMS/CloudHSM/ACM, and govern security across AWS Organizations using Control Tower, Security Hub, Audit Manager, and Config conformance packs. Candidates are expected to apply AWS security services (GuardDuty, Inspector, Macie, Detective, Security Hub, IAM Access Analyzer, KMS, WAF, Shield, Network Firewall, Firewall Manager, Secrets Manager, Security Lake) and AWS security best practices to specialist-level scenarios, including securing AI/ML and generative-AI workloads.