How to Prepare for and Pass the AWS Security Specialty Exam in 2023


## Introduction
Have you ever wondered what it takes to become an AWS Certified Security Specialist? Do you want to learn how to secure and harden your AWS workloads and architectures? If so, you are reading the right blog post. In this blog post, I will share with you my journey to becoming an AWS Certified Security Specialist. I will tell you :
- Purpose - Why I chose this certification?
- Exam Overview in brief.
- How I prepared for it?
- Tips and advice on how to ace the exam and get certified.
 

By the end of this blog post, you will have a better understanding of what is AWS Certified Security Specialty certification, what are its requirements and objectives, and how to achieve it. 

## About me
Before I tell you more about my journey, let me introduce myself. My name is Hasmukhray Rathod and I am a chief engineer at NTT Data Intellilink Corp. I have been working with AWS for over 5 years and I have always been interested in learning more about its security features and best practices. I passed below certifications in my [AWS Certification journery](https://www.credly.com/users/hasmukhray-rathod/badges?sort=-state_updated_at&page=1) so far: 
- AWS Certified Developer – Associate (February, 2018)
- AWS Certified Solutions Architect – Associate (May, 2019)
- AWS Certified SysOps Administrator – Associate (August, 2020)
- AWS Well-Architected Proficient (February, 2022)
- AWS Certified Security – Specialty (January, 2023)

## Purpose 
I decided to pursue the AWS Certified Security Specialty certification because I wanted to validate my skills and knowledge in securing and hardening AWS workloads and architectures. I also wanted to challenge myself and grow professionally in the cloud security domain.

## Exam Overview
Please find exam overview in brief : 
**Target Candicate**: Candidate should have 5 years of IT security experience in designing and implementing security solutions.
**Length**: 170 minutes to complete the exam
**Cost**: 300 USD 
**Format**: 65 questions; either multiple choice or multiple response.
**Delivery method**: Pearson VUE testing center or online proctored exam.

**Exam Content Outline**

| Domain       | % of Exam |
|--------------|:-----:|
| Domain 1 : Incident Response |  12% |
| Domain 2 : Logging and Monitoring |  20% |
| Domain 3 : Infrastructure Security |  26% |
| Domain 4 : Identity and Access Management |  20% |
| Domain 5 : Data Protection |  22% |

Useful Links :
1. [AWS Security Specialty Exam overview](https://aws.amazon.com/certification/certified-security-specialty/)
2. [AWS Security Specialty Exam Guide](https://d1.awsstatic.com/training-and-certification/docs-security-spec/AWS-Certified-Security-Specialty_Exam-Guide.pdf)

## How I prepared ?
To get ready for my certification exam, I followed a study plan that was based on the exam objectives and domains. Besides using the official exam review materials, I also enrolled in some online courses on Udemy & AWS Skill Builder portal that are related to AWS Security domains. I am sharing list of resources I used below:

**Udemy Courses (Included in Company's Business account)**
1. [AWS Certified Security – Specialty SCS-C01](https://intellilink.udemy.com/course/aws-certified-security-specialty-exam/)
2. [AWS Certified Security Specialty 2023](https://intellilink.udemy.com/course/aws-certified-security-specialty/)

**AWS Skill Builder Courses (Free)**
1. [AWS Security Best Practices: Overview](https://explore.skillbuilder.aws/learn/course/11172/aws-security-best-practices-overview)
2. [AWS Security Best Practices: Network Infrastructure](https://explore.skillbuilder.aws/learn/course/11218/aws-security-best-practices-network-infrastructure)
3. [AWS Security Best Practices: Monitoring and Alerting](https://explore.skillbuilder.aws/learn/course/11264/aws-security-best-practices-monitoring-and-alerting)
4. [AWS Security Best Practices: Computing](https://explore.skillbuilder.aws/learn/course/11263/aws-security-best-practices-computing) 
5. [Protect Your Web-facing Workloads with AWS Security Services](https://explore.skillbuilder.aws/learn/course/359/protect-your-web-facing-workloads-with-aws-security-services)
6. [Deep Dive with Security: AWS Identity and Access Management (IAM)](https://explore.skillbuilder.aws/learn/course/104/deep-dive-with-security-aws-identity-and-access-management-iam)

**AWS Skill Builder - PartnerCast Series (Free with AWS partner account)**

1. [AWS PartnerCast - Certification Journey - AWS Certified Security Specialty (SCS-C01) Exam Readiness session : 1 of 6 - Technical](https://explore.skillbuilder.aws/learn/course/12803/aws-partnercast-certification-journey-aws-certified-security-specialty-scs-c01-exam-readiness-session-1-of-6-technical)
2. [AWS PartnerCast - Certification Journey - AWS Certified Security Specialty (SCS-C01) Exam Readiness session : 2 of 6 - Technical](https://explore.skillbuilder.aws/learn/course/13175/aws-partnercast-certification-journey-aws-certified-security-specialty-scs-c01-exam-readiness-session-2-of-6-technical)
3. [AWS PartnerCast - Certification Journey - AWS Certified Security Specialty (SCS-C01) Exam Readiness session : 3 of 6 - Technical](https://explore.skillbuilder.aws/learn/course/12946/aws-partnercast-certification-journey-aws-certified-security-specialty-scs-c01-exam-readiness-session-3-of-6-technical)
4. [AWS PartnerCast - Certification Journey - AWS Certified Security Specialty (SCS-C01) Exam Readiness session : 4 of 6 - Technical](https://explore.skillbuilder.aws/learn/course/12978/aws-partnercast-certification-journey-aws-certified-security-specialty-scs-c01-exam-readiness-session-4-of-6-technical)
5. [AWS PartnerCast - Certification Journey - AWS Certified Security Specialty (SCS-C01) Exam Readiness session : 5 of 6 - Technical](https://explore.skillbuilder.aws/learn/course/13041/aws-partnercast-certification-journey-aws-certified-security-specialty-scs-c01-exam-readiness-session-5-of-6-technical)
6. [AWS PartnerCast - Certification Journey - AWS Certified Security Specialty (SCS-C01) Exam Readiness session : 6 of 6 - Technical](https://explore.skillbuilder.aws/learn/course/13083/aws-partnercast-certification-journey-aws-certified-security-specialty-scs-c01-exam-readiness-session-6-of-6-technical)

**AWS White Papers (Free)**

1. [Security Pillar – AWS Well Architected Framework](https://docs.aws.amazon.com/pdfs/wellarchitected/latest/security-pillar/wellarchitected-security-pillar.pdf)
2. [AWS Security Best Practices](https://d1.awsstatic.com/whitepapers/aws-security-best-practices.pdf)
3. [AWS KMS Best Practices](https://d1.awsstatic.com/whitepapers/aws-kms-best-practices.pdf)
4. [AWS Security Incident Response Guide](https://docs.aws.amazon.com/whitepapers/latest/aws-security-incident-response-guide/welcome.html?did=wp_card&trk=wp_card)

**Practice makes perfect (Free)**
1. [Exam Readiness: AWS Certified Security - Specialty](https://explore.skillbuilder.aws/learn/course/359/protect-your-web-facing-workloads-with-aws-security-services)
2. [AWS Certified Security - Specialty Official Practice Question Set (SCS-C01 - English)
](https://explore.skillbuilder.aws/learn/course/12473/aws-certified-security-specialty-official-practice-question-set-scs-c01-english)
3. [The AWS Certification Quiz Show: Security - Specialty exam, Episode 2](https://explore.skillbuilder.aws/learn/course/323/the-aws-certification-quiz-show-security-specialty-exam-episode-2)
4. [The AWS Certification Quiz Show: Security - Specialty exam, Episode 3](https://explore.skillbuilder.aws/learn/course/300/the-aws-certification-quiz-show-security-specialty-exam-episode-3)
5. [AWS Certified Security - Specialty Sample Questions](https://d1.awsstatic.com/training-and-certification/docs-security-spec/AWS-Certified-Security-Speciality_Sample-Questions.pdf)
6. [**PAID** - Whizlabs Practice Tests](https://www.whizlabs.com/learn/course/aws-certified-security-specialty/231)

All the resources I mentioned above are free and publicly available except Whizlabs practice test. 

## Tips and Advice

There is no shortcut to clear this exam. You must get clear idea about security concepts & hand-on with AWS security services. Let me share some high level questions. You must able to answer those questions with appropriate AWS services.


| Questions       | Services |
|--------------|-----|
| How do you manage authentication & authorization<br>for people and machine? |  IAM<br> IAM Identity Center<br> AWS Organization <br> AWS Resource Access Manager |
| How do you protect your network & compute<br>resources? | AWS VPC<br> AWS Network Firewall <br> AWS Private Link <br> AWS WAF <br> AWS Firewall Manager <br> AWS Shield  |
| How do you classify your data? <br> How do you protect your data at rest? <br> How do you protect your data in transit?? |  Amazon Macie <br> AWS KMS <br> AWS Certificate Manager <br> AWS Client VPN <br>AWS Secrete Manager |
| How do you detect and investigate security events? <br> how do you design security monitoring and alerting? |  AWS Cloudwatch <br> AWS Security Hub <br> AWS Guardduty <br> AWS Inspector <br> AWS Config <br> AWs Cloudtrail <br> |
| How do you anticipate, respond to, and recover from incidents? |  Amazon Detective <br> AWS Eventbridge <br> AWS Backup <br> |

## Conclusion

Security is the highest priority for any organization. While moving on-premise workload to cloud, Data security & Infrastructure security are the biggest concerns. By preparing for AWS Security specialty, you will study security domains thoroughly. By applying those concepts in cloud projects makes your workload secure and reliable. 
In this blog post, I have not discussed each domain in details. Based on the response, I may plan to write a detailed blog post for each domain with best practices. 

Thank you very much for spending time on this blog post. Your comments and feedback are highly appreciated. 

Keep Learning, and Keep Practicing.