I recently achieved the AWS Certified Security – Specialty (SCS-C02) certification, and I’d like to share my journey, including the strategies and resources that helped me succeed. This certification is intended for individuals who perform security roles and validates expertise in securing data and workloads in the AWS Cloud.
In this blog, I'll walk you through the exam prerequisites, content outline, and the resources I used to prepare for the SCS-C02 exam.
Exam Prerequisites
Before attempting this exam, AWS recommends:
Experience: At least five years of IT security experience in designing and implementing security solutions, and at least two years of hands-on experience in securing AWS workloads.
Knowledge: A solid understanding of AWS services related to security, such as AWS Identity and Access Management (IAM), AWS Key Management Service (KMS), Amazon GuardDuty, and AWS CloudTrail.
The exam also validates whether a candidate has the following:
An understanding of specialized data classifications and AWS data protection mechanisms
An understanding of data-encryption methods and AWS mechanisms to implement them
An understanding of secure internet protocols and AWS mechanisms to implement them
A working knowledge of AWS security services and features of services to provide a secure production environment
Competency from 2 or more years of production deployment experience in using AWS security services and features
The ability to make tradeoff decisions regarding cost, security, and deployment complexity to meet a set of application requirements
An understanding of security operations and risks
Exam Overview
Level: Specialty
Length: 170 minutes
Cost: $300 USD
Format: 65 questions, multiple choice or multiple response
Delivery Method: Pearson VUE and PSI; testing center or online proctored exam
Exam Outline
The exam has the following content domains and weightings:
| Domain | % of Exam Content |
| Domain 1: Threat Detection and Incident Response | 14% |
| Domain 2: Security Logging and Monitoring | 18% |
| Domain 3: Infrastructure Security | 20% |
| Domain 4: Identity and Access Management | 16% |
| Domain 5: Data Protection | 18% |
| Domain 6: Management and Security Governance | 14% |
| Total | 100% |
How Did I Prepare?
Preparation is key to passing the SCS-C02 exam. Here are the resources and strategies that helped me:
📚 Courses I Took
Since I only prepared for two days, I didn't take many courses. However, the following resources were helpful:
"AWS Certified Security – Specialty" by A Cloud Guru: This course provides a comprehensive overview of AWS security services and is an excellent starting point.
👉 More Information on the Course
"Security Engineering on AWS" by AWS Training and Certification: This official AWS course dives deep into the core security services.
👉 More Information on the Course
"AWS Certified Security – Specialty (SCS-C02)" by Cloud Academy: This course covers a wide range of topics necessary for the exam. Thanks to the AWS Community Builders program, which offers a free subscription to Cloud Academy for all builders, I had access to this excellent resource.
👉 More Information on the Course
🛠️ Hands-On Projects
Theory alone isn’t enough; practical experience is crucial. Here are some hands-on projects that I worked on:
Setting up IAM Policies and Roles: Practice creating and managing IAM policies and roles for various AWS services.
Monitoring with Amazon GuardDuty and AWS CloudTrail: Implement a monitoring solution using GuardDuty and CloudTrail.
Data Encryption with AWS KMS: Secure data at rest and in transit using AWS KMS and SSL/TLS.
👉 My GitHub Repository contains the detailed projects and code I used.
📋 AWS Ramp-Up Guides
AWS Ramp-Up Guides provide a structured learning path. I used the "Security Ramp-Up Guide" to identify essential resources and track my progress.
👉 More Details on Ramp-Up Guides
🤝 Joining Study Groups
Being part of a study group can be incredibly beneficial. Here are a couple of study groups that helped me:
Cloud and DevOps Babies: A global community for learning and discussing cloud and DevOps topics.
👉 More Details on Cloud and DevOps BabiesTech Study Slack: A Slack community for people studying for various tech certifications.
👉 More Details on Tech Study Slack
✍️ Practice Tests
Practice tests are a must. They simulate the actual exam environment and help identify areas that need improvement. I used the following resources:
- Tutorials Dojo Practice Exams: These exams come with detailed explanations for each question, helping you understand why certain answers are correct or incorrect.
👉 More Details on Tutorials Dojo
📝 Notes and Study Plan
I created a detailed study plan outlining the resources and timelines. Consistency and commitment to the plan were crucial.
Useful Study Tips and Tricks
Online Proctoring: This exam is available through online proctoring, so you can take it from the comfort of your home.
Extended Time: Non-native English speakers can request an additional 30 minutes.
Flagging Questions: Use the flagging mechanism to revisit difficult questions if you have time.
No Penalty for Guessing: There's no penalty for wrong answers, so make sure to attempt all questions.
Additional Resources
Conclusion
Preparing for the AWS Certified Security – Specialty exam requires a mix of theoretical knowledge, practical experience, and strategic study. By leveraging the right resources and staying committed to your study plan, you can successfully pass this exam and validate your expertise in securing AWS workloads.
Let me know your thoughts in the comments section 👇. Connect with me on LinkedIn, Twitter, and GitHub for more content and updates on my journey. Good luck with your exam preparation!
👋 Connect with me on LinkedIn
🤓 Connect with me on Twitter
🐱💻 Follow me on GitHub
✍️ Check out my blogs
Like, share, and follow me 🚀 for more content. Have fun and good luck! 💪