Overview of the AWS Certified Security - Specialty (Replaced with SCS-C03) Exam
The AWS Certified Security Specialty SCS-C02 validates technical expertise for cloud security engineers and architects tasked with securing complex AWS environments. Candidates must demonstrate proficiency in implementing incident response protocols, logging strategies via CloudTrail and CloudWatch, and data encryption using AWS KMS and CloudHSM. The exam evaluates competency in identity and access management through IAM policies, SCPs, and AWS Organizations, alongside network perimeter defense utilizing VPC security groups, network ACLs, WAF, and Shield. Furthermore, practitioners must master threat detection with Amazon GuardDuty and Inspector, secure hybrid connectivity via AWS Site-to-Site VPN or Direct Connect, and automate compliance auditing across multi-account AWS architectures.