I just passed the AWS Certified Security – Specialty (SCS-C03) exam, and I'm really happy to share the milestone.

This is probably one of the more challenging AWS certifications I've taken. The exam covers a broad range of security topics, including:

• IAM and cross-account access
• KMS and encryption
• Network security
• Logging and monitoring (CloudTrail, CloudWatch, GuardDuty, Security Hub, Detective)
• Incident response
• Organizations, SCPs, and governance
• Secure architectures and best practices

My preparation

• Stephane Maarek's AWS Security Specialty course
• Tutorials Dojo practice exams and ebook
• AWS Documentation (especially KMS, IAM, Organizations, GuardDuty, Security Hub, and CloudTrail)
• AWS Skill Builder for Security Specialty course
• Hands-on practice in my personal AWS account

My background

I'm currently working as a Site Reliability Engineer, so I already had hands-on experience for some security services. That practical experience definitely helped with many of the scenario-based questions.

My advice

• Don't just memorize AWS services - understand why one solution is more secure than another.
• Read IAM and KMS questions carefully. Small wording differences can completely change the correct answer.
• Be comfortable with cross-account access, key policies, SCPs, and encryption scenarios.
• Practice eliminating incorrect answers instead of looking only for the correct one.

Thanks to everyone in this community who shared study tips and experiences. Reading previous posts here was incredibly helpful during my preparation.

Good luck to everyone preparing for the exam! Feel free to ask if you have any questions.