AWS SCS
AWS Certified Security — Specialty (SCS-C02)
The AWS Certified Security – Specialty (SCS-C02) validates advanced cloud security expertise for architects and engineers designing security solutions on AWS. It covers the full security stack — identity management, infrastructure protection, data protection, logging, incident response, and compliance automation. SCS-C02 is the benchmark specialty credential for AWS security engineers.
AWS SCS Exam Overview
| Detail | Information |
|---|---|
| Full Name | AWS Certified Security — Specialty (SCS-C02) |
| Governing Body | AWS |
| Number of Questions | 65 |
| Time Limit | 170 minutes |
| Passing Score | 750/1000 (scaled) |
| Exam Fee | $300 USD |
| Category | IT Certifications |
| C3RT App Available On | iPhone, iPad, and Mac |
| Official Source | AWS official website ↗ |
AWS SCS Content Areas and Domains
| Domain / Content Area | Exam Weight |
|---|---|
| Threat Detection and Incident Response | 14% |
| Security Logging and Monitoring | 18% |
| Infrastructure Security | 20% |
| Identity and Access Management | 16% |
| Data Protection | 18% |
| Management and Security Governance | 14% |
Domain weights are approximate and based on the AWS content outline. Always verify at the official source before your exam.
Topics Covered
- ✓ Threat Detection with GuardDuty, Security Hub, and Detective
- ✓ Security Logging with CloudTrail, VPC Flow Logs, and CloudWatch
- ✓ Infrastructure Protection with WAF, Shield, and Network Firewall
- ✓ Identity and Access Management (IAM, SCP, Permission Boundaries)
- ✓ Data Protection with KMS, Secrets Manager, and Macie
- ✓ Incident Response Playbooks on AWS
- ✓ Security Governance with AWS Organizations and Control Tower
How C3RT Helps You Pass the AWS SCS
Adaptive Practice
Questions adapt to your weak areas automatically so every study session on the AWS SCS is time well spent.
Diagnostic Mocks
Full-length mock exams timed to the real AWS SCS format with detailed score breakdowns by topic.
Mistake Bank
Every wrong answer is saved for targeted re-drill. The system resurfaces your mistakes until they stick.
Native on iOS & Mac
Built with SwiftUI, not a web wrapper. Instant load, offline support, hardware-speed rendering.
AWS SCS Frequently Asked Questions
What does AWS SCS stand for?
AWS SCS stands for AWS Certified Security — Specialty (SCS-C02). It is administered by AWS.
Who administers the AWS SCS?
The AWS Certified Security — Specialty (SCS-C02) (AWS SCS) is administered by AWS. For official information, visit the AWS website.
How many questions is the AWS SCS?
The AWS SCS consists of 65 questions. Candidates are given 170 minutes to complete the exam.
What is the passing score for the AWS SCS?
The passing score for the AWS SCS is 750/1000 (scaled), as set by AWS. Scoring methodology and passing standards may be updated periodically. Always verify current requirements with the governing body.
How much does the AWS SCS exam cost?
The AWS SCS exam fee is $300 USD. This fee is set by AWS and may vary by testing centre, region, or membership status. Additional fees for registration or rescheduling may apply.
Who should take the AWS Security Specialty?
Security engineers, cloud architects, and DevSecOps engineers with 5+ years of IT security experience and 2+ years of AWS hands-on work are the primary audience. It assumes strong knowledge of IAM, KMS, VPC security groups, and AWS logging services.
What is the hardest part of the AWS SCS-C02 exam?
Most candidates find the incident response and forensics domain most challenging, particularly designing automated response playbooks using EventBridge, Lambda, and Step Functions. Data protection involving KMS key policies and Secrets Manager rotation is also frequently cited as difficult.
Is AWS Security Specialty harder than the Solutions Architect Professional?
They're comparable in difficulty but test different domains. SCS-C02 requires deep security-specific knowledge that SAP-C02 doesn't test. Security specialists find SCS-C02 more natural; architects without a security background typically find SCS-C02 harder.
How many questions are on AWS SCS-C02?
65 questions total (50 scored, 15 unscored), with 170 minutes to complete. Questions are scenario-based, often presenting an architecture and asking which security control best addresses a specific threat or compliance requirement.
C3RT is a native iOS and macOS exam preparation platform covering the AWS Certified Security — Specialty (SCS-C02) (AWS SCS), a IT Certifications certification, administered by AWS. C3RT is not affiliated with or endorsed by AWS. Certification names and trademarks are the property of their respective organisations. For official exam registration, eligibility requirements, and content outlines, visit the AWS official website ↗ .