AWS Security Specialty (SCS-C03)

It is a proctored multiple-choice and multiple-response exam delivered at a testing center or online. Some items ask you to pick two or three correct answers. AWS publishes the current item count and time limit in the official exam guide on its certification site, so check there before scheduling.

Noticeably harder. Associate questions reward knowing what a service does; this exam rewards knowing which of several plausible controls satisfies a stated constraint. Expect long scenarios where two answers are technically valid and only one matches the requirement for granularity, latency, cost, or blast radius.

Yes. AWS sets a waiting period between attempts and a separate fee for each sitting. The exact wait interval and current pricing are published on the AWS certification site and change over time, so confirm the policy there rather than relying on secondhand summaries.

Three years under AWS's current recertification policy. You either retake the exam or complete qualifying continuing-education activities through the AWS certification portal before expiry. Confirm the current rules on the AWS site, since program terms are updated periodically.

Start with logging and monitoring plus identity, because nearly every other scenario depends on knowing where evidence lives and who is allowed to act. Then take data protection (KMS key policies trip up most candidates), infrastructure security, detection and response, and governance last.

Hands-on is close to mandatory. Candidates who fail tend to know services in isolation but have never debugged a KMS key policy denial, a cross-account role trust, or an SCP that silently blocked an action. Build those in a sandbox account and read the actual error messages.

Confusing IAM policies with resource policies, forgetting that SCPs never grant permissions, choosing broad controls when the question demands least privilege, and ignoring explicit requirements such as retaining logs immutably or keeping keys out of a region. Slow reading of the constraint sentence is the usual root cause.

Treat the scenario stem's final sentence as the actual question and read it first. Flag long scenarios and return to them; the multiple-response items often take the longest. AWS states the current time limit in its exam guide, so plan pacing from that figure on the day.

No. This is independent study content produced by a third party. It is not affiliated with, endorsed by, or reviewed by AWS. Always treat the official exam guide and AWS documentation as the authoritative source for scope, policies, and service behavior.