Amazon Web Services
AWS Certified Security - Specialty
Identity, detection, infrastructure protection, data protection and incident response inside AWS environments.
Certification and exam
- Certification provider
- Amazon Web Services
- Official certification name
- AWS Certified Security - Specialty
- Required exam
- SCS-C02 — AWS Certified Security - Specialty exam
- Current exam version · effective 2023-07-11 · no retirement date announced
Grouped in our Specialist plan based on where it fits in your learning path. This is independent of AWS's own certification naming and tier structure.
iSecPath preparation scope
- Cloud identity and entitlement scenarios
- Detection and logging coverage design
- Data protection and key management practice
- Cloud incident response decision chains
What is and is not included
- Included: iSecPath learning access for the term of your plan.
- Not included: the external Amazon Web Services certification exam.
- Not included: exam registration and scheduling.
- Not included: the exam fee.
- Not included: meeting Amazon Web Services's eligibility requirements.
iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.
Prerequisites and eligibility
Set by Amazon Web Services, not by iSecPath. Confirm against the official source before you register.
Prerequisites
- None enforced by AWS.
Eligibility requirements
- Open to all candidates; AWS retired its mandatory prerequisite certifications.
Experience requirements
AWS recommends around five years of IT security experience and two years securing AWS workloads. Guidance only.
Exam domains
Approximate weighting used to structure our learning path. Verify against Amazon Web Services's published blueprint.
- Threat Detection & Incident Response14%
- Security Logging & Monitoring18%
- Infrastructure Security20%
- Identity & Access Management16%
- Data Protection18%
- Management & Security Governance14%
Sample scenario
Over-permissive role in production
A CI/CD role can assume an administrative identity in production. Pipelines break if you revoke it today. Design a staged least-privilege migration with rollback criteria.
Focus: Identity & Access Management
Career path mapping
iSecPath Recommended Path. Mapping types describe our learning-path logic — "Prerequisite" is used only where the provider authoritatively requires it.
Source of truth
- Operational owner
- iSecPath Curriculum Operations
- Last verified
- 2026-08-24
- Next review
- 2026-11-24
- Verification notes
- Confirm the active SCS-Cxx code and domain weights from the current AWS exam guide.
Provider information is rechecked at least quarterly and whenever Amazon Web Services announces a material change. Exam versions here are a snapshot, never a permanent source of truth.