Amazon Web Services · Cloud · Vendor · Specialty

AWS Certified Security – Specialty (SCS-C02)

AWS's deepest security credential. Mandatory for cloud security engineers on AWS-heavy estates and a hard differentiator on UK financial services job adverts.

// exam format
65 multiple-choice / multi-response items, 170 minutes, scaled score 750/1000 to pass
// cost
≈ £240
// prerequisites
  • Recommended: 5 years IT security experience, 2 years securing AWS workloads
AWS Security Specialty (SCS-C02, released July 2023) drills six domains across threat detection, logging/monitoring, infrastructure security, IAM, data protection, and management/governance. It is heavily scenario-based — every question presents a multi-service architecture and asks you to identify the secure (or insecure) component. ## What the exam covers - Threat Detection and Incident Response - Security Logging and Monitoring - Infrastructure Security - Identity and Access Management - Data Protection - Management and Security Governance ## Prerequisites - Recommended: 5 years IT security experience, 2 years securing AWS workloads ## Study plan Plan 8–12 weeks. Stephane Maarek / Adrian Cantrill courses on Udemy; Tutorials Dojo practice exams (mandatory — closest to exam tone). Build hands-on: SCPs, KMS key policies, GuardDuty + Security Hub + Detective triage, IAM Access Analyzer. ## Cost (UK 2026) Exam fee approx. £240 (vendor list price; bundles + corporate discounts vary). ## Format 65 multiple-choice / multi-response items, 170 minutes, scaled score 750/1000 to pass

Frequently asked questions

Do I need AWS Solutions Architect Associate before Security Specialty?

Not formally, but you will struggle without the underlying architecture vocabulary. Most candidates take SAA first, then SCS within 6 months.

How does SCS-C02 differ from the retired SCS-C01?

C02 adds CloudWatch Logs Insights, Security Lake, Verified Access, IAM Identity Center (replaces SSO), and removes deprecated services. Heavier weighting on threat detection (22%) and IAM (16%).

Is AWS Security Specialty recognised in the UK?

Yes — appears on most UK cloud security engineer adverts paying £70k+, particularly in fintech, scale-ups, and AWS partner consultancies.

How long is AWS Security Specialty valid?

3 years. Recertify by retaking the current exam or by passing AWS Certified Security Specialty's successor.

Practice AWS Certified Security – Specialty (SCS-C02) interview questions

Run AI-graded mock interviews keyed to the AWS Certified Security – Specialty (SCS-C02) body of knowledge.

Start free
// related