AWS Networking Specialty

AWS Certified Advanced Networking - Specialty

More study resources

About this exam

The AWS Certified Advanced Networking – Specialty credential is aimed at engineers who design, deploy, and operate complex network architectures on AWS rather than at generalist cloud practitioners. It suits network architects, senior cloud engineers, and consultants who already work daily with VPC design, hybrid connectivity, and routing at scale, and who need to prove depth beyond the associate-level certifications. The exam tests four broad areas: network design, network implementation, network management and operation, and network security, compliance, and governance. Expect questions that combine several services at once - for example, choosing between Transit Gateway, peering, and Direct Connect for a multi-account topology, or reasoning about how routing and security appliances interact in an inspection VPC. Preparation works best in layers. First, make sure your fundamentals are solid: CIDR planning, subnetting, route table precedence, BGP behaviour, and the difference between security groups and network ACLs. Then build things by hand - a hub-and-spoke Transit Gateway, a Site-to-Site VPN alongside Direct Connect, Route 53 Resolver endpoints, and a centralized inspection design. Reading the relevant service documentation and whitepapers after you have built something makes the details stick. Practice questions help mainly to expose gaps and to train you to read long scenarios carefully. This page is independent study material and is not affiliated with or endorsed by Amazon Web Services.

What you'll study

Common questions

About AWS Networking Specialty preparation

What is the exam format?

It is a multiple-choice and multiple-response exam delivered at a testing centre or online with proctoring. Some questions have one correct answer, others ask you to select two or three. The official AWS Certification page publishes the current question count, time limit, and scoring details, so check there before you book.

How hard is it really?

It is widely considered one of the tougher AWS specialty exams because scenarios combine routing, hybrid connectivity, and security in a single question. Memorising service limits is not enough; you need to reason about how designs behave under failure. Candidates with hands-on multi-account networking experience find it more manageable.

How long should I study?

Most people with solid AWS fundamentals need several weeks of focused work. If you are new to BGP, Direct Connect, or Transit Gateway, allow more. Build at least two or three end-to-end labs rather than only reading, because the exam rewards intuition about how components interact.

What should I study first?

Start with VPC fundamentals: CIDR planning, subnets, route table precedence, gateways, and security groups versus network ACLs. Then move to hybrid connectivity - Site-to-Site VPN, Direct Connect, and BGP - before tackling multi-account patterns with Transit Gateway and centralized inspection architectures.

Can I retake the exam if I fail?

Yes, retakes are allowed, but AWS applies a waiting period and a separate fee for each attempt. The exact waiting period and current pricing are published by AWS Certification and can change, so confirm them on the official site rather than relying on second-hand information.

How much does it cost and how long is it valid?

Both the fee and the certification validity period are set by AWS and are updated from time to time. The official AWS Certification pages list the current exam fee, any regional pricing differences, and the recertification requirements, so check those pages directly before planning your budget.

Are there prerequisites?

AWS does not formally require another certification first, but the exam assumes associate-level knowledge and practical experience. Most successful candidates already hold a foundational AWS certification or have equivalent production experience with VPCs, routing, and hybrid connectivity.

Why do people fail this exam?

Common causes are shallow lab experience, misreading long scenarios, and ignoring the constraint in the question - cost, latency, or operational overhead. Another frequent mistake is assuming a single service solves everything instead of combining Transit Gateway, routing, and inspection correctly. Practise identifying the actual requirement before evaluating options.

Is this page official?

No. This is independent study material produced by a third-party platform. It is not affiliated with, endorsed by, or sponsored by Amazon Web Services. Always confirm exam logistics, pricing, and policy details on the official AWS Certification website.