AWS Certified Security Specialty 2022: structured overview

Course overview

Description generated based on course syllabus and open data.

A concise overview for preparing for the AWS Certified Security – Specialty 2022: key security services, topic structure, and practical directions for self-study.

Who the AWS Security certification (Certified Security Specialty) suits and who it does not

• Suitable: security engineers and DevOps/SRE working with IAM, VPC, encryption, and logging in AWS.
• Suitable: architects and analysts using AWS Security services (KMS, GuardDuty, WAF, Security Hub).
• Not suitable: beginners without foundational AWS, networking, and access control knowledge.
• Not suitable: those expecting preparation without hands-on labs and time investment.

Problem → indicative outcome for AWS Security Specialty

• Problem: fragmented knowledge of AWS security services → Outcome: a structured map of services and usage scenarios.
• Problem: choosing data encryption mechanisms → Outcome: understanding KMS, customer managed keys, envelope encryption, and access policies.
• Problem: audit and alerting → Outcome: configured CloudTrail, CloudWatch, Security Hub, and event correlation.
• Problem: perimeter and application protection → Outcome: approaches with AWS WAF, Shield, Network Firewall, and TLS/ACM.

Comparison with alternatives for AWS security certification preparation

Official AWS Security documentation

Pros: complete and up-to-date. Cons: fragmented, requires more navigation time.

Whitepapers and Security best practices

Pros: distilled principles and architectural guidance. Cons: fewer step-by-step examples.

Practice in AWS Free Tier / labs

Pros: real experience and incident drills. Cons: environment design and cost control required.

Communities and Q&A

Pros: quick hints. Cons: uneven quality and potential staleness.

Covered competencies for AWS Certified Security – Specialty

• Access and identity control: IAM users/roles/policies, SCP, principle of least privilege.
• Data encryption: S3, EBS, RDS, KMS (CMK), Secrets Manager, key management and rotation.
• Network protection in VPC: Security Groups, NACL, PrivateLink, Transit Gateway, Network Firewall.
• Monitoring and detection: CloudTrail, CloudWatch, GuardDuty, Detective, Config, Security Hub.
• Application and perimeter security: AWS WAF, Shield, ALB/NLB, TLS/ACM, certificate management.
• Incident response and compliance: automation with Lambda/Step Functions, baseline controls and policies.

Key AWS security topics (Security Specialty 2022)

• Logging and audit: centralization, retention, analysis, alerts.
• Segmentation and isolation: multi-account, VPC design, Zero Trust approach.
• Data protection: classification, versioning, delete protection, MFA Delete.