AWS Security Specialty
AWS Certified Security - Specialty · AWS
The AWS Security Specialty proves in-depth mastery of securing workloads on AWS: identity and access, detection, incident response, infrastructure security, data protection and governance. It is one of the most sought-after cloud security certifications, as AWS remains the leading cloud provider. Its strength is very concrete content tied to real AWS services; its limit is that it only covers AWS and must be renewed every three years.
- Exam
- Exam SCS-C03 (since 2 December 2025): 65 questions (50 scored) in 170 minutes, pass mark 750/1,000. Multiple choice, multiple response, ordering and matching questions.
- Exam price
- $300Plus tax where applicable. Certified holders get a 50% voucher to recertify.
- Required experience
- Recommended, not required: five years of IT security experience designing and implementing security solutions, including two years or more securing AWS workloads (the exam guide says 3-5 years securing cloud solutions).
- Validity and maintenance
- Valid 3 years. Recertify by passing the current exam (with the 50% voucher) or through a paid maintenance path on AWS Skill Builder.
- Format
- Multiple choice
Who is it for?
Cloud security engineers, cloud architects and DevSecOps engineers who already work on AWS and want to validate their security expertise.
Domains covered
- Detection: 16%
- Incident response: 14%
- Infrastructure security: 18%
- Identity and access management: 20%
- Data protection: 18%
- Security foundations and governance: 14%
Belinda’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
