AWS Certified Security – Specialty

The published domains and objectives for SCS-C03. Your missions come from these objectives, and your progress is recorded against them.

• 16%

  1

  Detection

  • 1.1Design and implement monitoring and alerting solutions for an AWS account or organization
  • 1.2Design and implement logging solutions
  • 1.3Troubleshoot security monitoring, logging, and alerting solutions

• 14%

  2

  Incident Response

  • 2.1Design and test an incident response plan
  • 2.2Respond to security events

• 18%

  3

  Infrastructure Security

  • 3.1Design, implement, and troubleshoot security controls for network edge services
  • 3.2Design, implement, and troubleshoot security controls for compute workloads
  • 3.3Design and troubleshoot network security controls

• 20%

  4

  Identity and Access Management

  • 4.1Design, implement, and troubleshoot authentication strategies
  • 4.2Design, implement, and troubleshoot authorization strategies

• 18%

  5

  Data Protection

  • 5.1Design and implement controls for data in transit
  • 5.2Design and implement controls for data at rest
  • 5.3Design and implement controls to protect confidential data, credentials, secrets, and cryptographic key materials

• 14%

  6

  Security Foundations and Governance

  • 6.1Develop a strategy to centrally deploy and manage AWS accounts
  • 6.2Implement a secure and consistent deployment strategy for cloud resources
  • 6.3Evaluate the compliance of AWS resources