AWS Security – Specialty: The Last Specialty Standing

AWS Certified Security – Specialty is code SCS-C03, costs $300, runs 170 minutes and asks 65 questions. AWS aims it at people with “five years of IT security experience in designing and implementing security solutions and two or more years of hands-on experience in securing AWS workloads” — the most experience any AWS exam page recommends.

It is also, as of the end of 2026, effectively the last specialty exam AWS is keeping. That makes it a different proposition from the other rungs on the AWS certification ladder.

The specialty shelf has been cleared

Five specialty exams have closed or been dated for closure, and every date below comes from AWS’s own pages.

• Data Analytics – Specialty, Database – Specialty and SAP on AWS – Specialty closed in April 2024.
• Machine Learning – Specialty: AWS’s page states “The last day to take this exam is March 31, 2026.” Holders keep an active certification for three years from the date they earned it.
• Advanced Networking – Specialty (ANS-C01), $300, 170 minutes, 65 questions: “The last day to take the exam is December 31, 2026.”

What remains after that is Security. If you are working from a certification plan drawn up two years ago, half of it no longer exists — which is the single most useful thing this page can tell you.

What the exam covers

Security on AWS at specialty depth: identity and access management in detail, data protection and key management, infrastructure and network security, detection and monitoring, incident response, and the governance layer that makes all of it auditable.

The questions assume you have made these decisions under constraint. A candidate who knows what each service does but has never had to reconcile a least-privilege policy with a deployment pipeline will find the scenarios unforgiving.

Who should actually sit it

Security engineers and cloud engineers with security responsibility, working on AWS, with a few years behind them. AWS’s recommendation of five years in IT security plus two on AWS workloads is not a gate — no AWS exam has a prerequisite certification — but it is a fair description of the questions’ assumptions.

Who should not: people using this as an entry point into security. The exam certifies AWS-specific depth; it is not an introduction to the field, and at $300 with a full-fee retake after 14 days it is an expensive place to discover that.

The natural route in is an associate exam first, usually Solutions Architect – Associate or CloudOps Engineer – Associate, then this.

A note on scope

This exam is about securing AWS. It is not a vendor-neutral security qualification, and the two are often confused in search results because they share the word “security”.

If what you want is the AWS-specific credential — because your estate is AWS and your job is to keep it safe — this is the one. Judging it against any vendor-neutral security certification is a category error: different issuer, different syllabus, different renewal rules, and this site only covers what AWS publishes about its own.

Preparation, at this level

Free first, as always: the Official Practice Question Sets, the two-hour Exam Prep Course and AWS Cloud Quest cost nothing, and AWS advertises over 900 free self-paced digital courses alongside them.

Then the honest arithmetic. A $300 retake buys ten months of AWS Skill Builder at $29 a month, and the subscription is where the Official Practice Exams and hands-on labs live. At specialty level the labs are worth more than the videos; security questions reward people who have configured the thing rather than read about it. What the subscription adds over the free tier has the full comparison.

Third-party question banks such as Whizlabs sell specialty sets cheaply — a partner link, tagged sponsored and nofollow, which may pay Stackrung a commission. AWS’s free sets and the official exam guide come first.

The dumps problem is worse in security

Every exam attracts question dumps. A security exam attracts them from people who are, by definition, meant to understand why that is disqualifying.

AWS’s position, published on its Training and Certification blog on 25 June 2025, is that sharing exam questions or answers “is strictly prohibited” and that “Accessing these materials, even unintentionally, violates the AWS Certification Program Agreement”. Its listed sanctions include invalidating exam results “even after a certification has been issued”, revoking specific or all AWS certifications, and — for proxy testing — a permanent ban from the programme.

Consider also what a hiring manager in security would make of it. The credential is meant to be evidence of judgement, and the shortcut is a demonstration of its absence.

Renewal and the three-year clock

Three years, like every AWS certification. The renewal routes are retaking the current version, passing a higher-level exam, or the Skill Builder maintenance route — a one-year extension requiring an active paid subscription and only available within 90 days of expiry. The 50% recertification voucher in your AWS Certification Account applies here too, which on a $300 exam is the largest discount AWS publishes.

One planning note specific to specialties: because there are now so few of them, “pass something higher” is not really an option at this level. In practice you renew by retaking, or by holding a professional certification alongside. The renewal routes in detail covers how each one works.

The value question, answered carefully

AWS publishes no pass rate for this exam and no salary data for any of its certifications, so nothing here will tell you what a security specialty is worth in money. The cloud-security salary figures that circulate are published by training vendors.

What can be said: it is the deepest AWS credential still available in a subject every organisation on the platform has to take seriously, and it is one of the few AWS exams where the recommended experience is itself a useful signal of who the questions were written for. The wider argument about whether AWS certification is worth it applies here with one adjustment — at $300, the cost of choosing wrong is triple.

Reading the exam guide as a work plan

AWS publishes an exam guide for SCS-C03 listing domains, weightings and in-scope services. For a specialty exam that document is worth more than most courses built on top of it, because it tells you what AWS considers competent practice on its own platform.

Used honestly, it is a gap analysis. Work down the domains and mark the ones where you have made real decisions under pressure rather than read a whitepaper. If the unfamiliar half is conceptual, a few months of deliberate work closes it. If the unfamiliar half is “I have never held the on-call phone for this”, no amount of study substitutes, and the recommended five years exists for that reason.

Booking, results and the retake rule

Exams are delivered through Pearson VUE, at a test centre or online proctored, and can be rescheduled twice before you have to cancel and rebook. Final results reach your AWS Certification Account within five business days of the exam closing, unless they are under review for security or technical reasons.

A failure costs $300 and 14 calendar days, with no cap on attempts. At this level that is the single most persuasive argument for buying a full-length official practice exam first: one month of AWS Skill Builder at $29 against a $300 second attempt is not a close call, and it is the same subscription that carries the hands-on labs this exam rewards.

What “specialty” means now that there is one

When AWS ran a shelf of specialty exams, the word marked a branch off the main ladder. With Machine Learning closed since 31 March 2026 and Advanced Networking closing on 31 December 2026, it marks something narrower: the one subject AWS has decided needs depth beyond the professional level.

That concentration is quietly useful to you. A credential that is one of six reads as a preference; a credential that is one of one reads as a specialism. It also means study material for this exam is unlikely to be orphaned by a retirement notice in the way the analytics, database and SAP specialty material was in April 2024 — SCS-C03 has no published end date.