ExamFinch.com My Study

Study guide

AWS Security Specialty (SCS-C03) study guide

Read a lesson, then practice the ideas you want to remember.

Practice this exam

Lessons

  1. Attribute-Based Access Control with IAM Tags
  2. Permission Boundaries & Safe Admin Delegatio
  3. Complete AWS Policy Evaluation Logic & Decis
  4. Audit Evidence Collection & Well-Architected
  5. AWS Config, Conformance Packs & Automated Re
  6. Infrastructure as Code Security & Multi-Acco
  7. Instance Profiles, Service Roles & Execution
  8. Generative AI Security: Amazon Bedrock Guard
  9. Golden AMIs & Container Image Hardening Pipe
  10. Secure Administrative Access: Session Manage
  11. Amazon Inspector Vulnerability Management &
  12. Imported Key Material & CloudHSM Key Stores
  13. KMS Grants, Encryption Context & Multi-Regio
  14. AWS KMS Architecture, Key Policies & Key Typ
  15. Forensic Artifact Capture & Chain of Custody
  16. Correlating Events & Root Cause Analysis wit
  17. Threat Containment & Network Quarantine Tech
  18. AWS WAF Architecture & Advanced Rule Sets
  19. CloudFront Security Headers & Origin Access
  20. Edge Integrations: Managed Rule Groups, OCSF
  21. AWS Shield Advanced & DDoS Defense Architect
  22. Amazon Cognito User Pools & Identity Pools
  23. AWS IAM Identity Center & Enterprise IdP Int
  24. AWS Security Token Service & Temporary Crede
  25. Troubleshooting Identity & Authentication Fa
  26. Multi-Account CloudTrail & Organization Trai
  27. Analyzing, Normalizing & Correlating Securit
  28. Network Telemetry: VPC Flow Logs & Route 53
  29. Amazon Security Lake & OCSF Log Normalizatio
  30. Troubleshooting Security Telemetry & Log Ing
  31. Automated Incident Remediation with EventBri
  32. Incident Response Planning & Blast Radius Mi
  33. Systems Manager OpsCenter & Incident Manager
  34. Testing & Validating Incident Response Plans
  35. Analyzing Authorization Failures & Policy Si
  36. Auditing External & Unused Access with IAM A
  37. IAM Roles Anywhere & Amazon Verified Permiss
  38. Amazon GuardDuty Architecture & Finding Type
  39. AWS Security Hub & Automated Conformance Ass
  40. Amazon Macie & Automated Data Classification
  41. Workload Monitoring & Health Check Strategie
  42. AWS Organizations Structure, Hierarchy & Res
  43. AWS Control Tower Landing Zone & Guardrail F
  44. Centralized Resource Sharing with RAM & Serv
  45. Delegated Administrator Architecture & Root
  46. Hybrid Connectivity Security: VPN, Direct Co
  47. Inter-Resource Encryption in Transit: Nitro,
  48. Private Access: VPC Endpoints, PrivateLink,
  49. Layered Traffic Filtering: SGs, NACLs & AWS
  50. Enforcing Encryption in Transit: ELB Securit
  51. Zero-Trust Access & Network Access Analysis
  52. SCS-C03 Exam Format, Domains & Study Strateg
  53. AWS Certificate Manager & Private CA Archite
  54. Sensitive Data Masking in Telemetry & Messag
  55. AWS Secrets Manager & Systems Manager Parame
  56. Data Integrity Protection: Object Lock, Vaul
  57. Lifecycle, Backup & Secure Replication Beyon
  58. S3 Encryption Modes & S3 Bucket Keys — Free Study Guide 2026
  59. Secure Data Lifecycle, Cross-Account Replica