AWS Certified Security - Specialty (SCS-C03)

Design and implement monitoring, alerting, and logging solutions for AWS organizations and accounts. Troubleshoot security logging, alerting, and monitoring solutions.

Design and test incident response plans. Respond to security events by capturing logs, validating findings, containing threats, and conducting root cause analysis.

Design, implement, and troubleshoot security controls for network edge services, compute workloads, and network security controls. Implement protections for generative AI applications.

Design, implement, and troubleshoot authentication and authorization strategies for human, application, and system access. Implement ABAC and RBAC strategies following least privilege principles.

Design and implement controls for data in transit, data at rest, and protection of confidential data, secrets, and cryptographic key material. Configure encryption, data integrity, lifecycle management, and secure backup solutions.

Develop strategies for centralized AWS account deployment and management. Implement secure and consistent deployment strategies for cloud resources. Evaluate AWS resource compliance.