AWS Services, Features, Concepts, Tools

In-scope for the Security Specialty Exam (SCS-C03)

Cybr https://cybr.com Christophe Limpalair

Just because a service or topic isn’t listed below doesn’t mean it won’t be on the exam. It’s not an exhaustive list and AWS can make modifications at any time. Each exam is a little bit different and your version may not contain everything you see here. However, this cheat sheet contains the most important services and tools to focus on since you’re likely to see them on the exam.

Concepts & Tools

Tools and concepts that might appear on the exam

AWS CLI (Command Line Interface)

AWS Management Console

AWS SDKs (Software Development Kits)

Secure Remote Access

Certificate Management

IaC (Infrastructure as Code)

OWASP Top 10 (including GenAI OWASP Top 10 for LLM Applications)

In-scope AWS services and features

What to learn: What’s the main purpose of each service? How do they work with other AWS services (and which ones)? How are they deployed in multi-account environments? What are best practices for configuring, deploying, and managing them?

Management and Governance

AWS CloudFormation

AWS CloudTrail

AWS CloudTrail Lake

Amazon CloudWatch

AWS Config

AWS Control Tower

Amazon Managed Grafana

AWS Organizations

AWS Resilience Hub

AWS RAM (Resource Access Manager)

AWS Service Catalog

AWS Systems Manager

AWS Trusted Advisor

AWS User Notifications

AWS Well-Architected Tool

Networking and Content Delivery Security

Amazon Application Recovery Controller

Amazon VPC

Network Access Analyzer

Network ACLs

Security Groups (SGs)

VPC Endpoints

AWS Site-to-Site VPN

VPC Flow Logs

AWS Verified Access

AWS Client VPN

Amazon CloudFront

Amazon Verified Permissions

Amazon Route 53 (including Route 53 Resolver DNS Firewall)

AWS Direct Connect

Elastic Load Balancing (ELB)

AWS Transit Gateway

Security, Identity, and Compliance

AWS Artifact

AWS Audit Manager

AWS Certificate Manager (ACM)

AWS CloudHSM

Amazon Cognito

Amazon Detective

AWS Directory Service

AWS Firewall Manager

Automated Forensics Orchestrator for Amazon EC2

Amazon GuardDuty

AWS Identity and Access Management (IAM)

AWS IAM Identity Center

Amazon Inspector

AWS KMS (Key Management Service)

Amazon Macie

AWS Network Firewall

AWS Private Certificate Authority

AWS Secrets Manager

AWS Security Hub

Amazon Security Lake

AWS Shield / AWS Shield Advanced

AWS Security Token Service (AWS STS)

AWS WAF (Web App Firewall)

Analytics

Amazon Athena

Amazon OpenSearch Service

Application Integration

Amazon SNS

AWS Step Functions

Developer Tools

AWS Fault Injection Service

Internet of Things

AWS IoT Core

Compute

Amazon API Gateway

Amazon EC2 (including EC2 Image Builder, EC2 Instance Connect)

Amazon EKS

Amazon EMR

AWS Lambda

Amazon Data Lifecycle Manager

Machine Learning

Amazon Bedrock

Amazon Q

Amazon SageMaker AI

Storage and Data Management

Amazon S3

AWS Backup

AWS DataSync

Amazon EFS (including EFS Lifecycle policies)

Amazon FSx for Lustre

Other important services

Amazon EventBridge

Elastic Container Registry

Signer

Elastic Container Service

DynamoDB

Use this cheat sheet with AI

Copy a ready-to-use prompt into your preferred AI assistant.

Goal

Preview prompt

Prompt

Use this Cybr cheat sheet as reference: AWS Services, Features, Concepts, Tools
Source: https://cybr.com/cheat-sheets/aws-security-specialty-exam/

My goal: Quiz me on this

Help me prepare for AWS Certified Security - Specialty SCS-C03 with original scenario-based practice questions. Ask about my experience and weakest topics. Ask one question at a time, wait for my answer, then explain the reasoning and why the other choices are weaker. Track weak areas and revisit them. Check the current official exam guide for scope; do not present practice questions as actual exam questions.

Use the included reference material even if you cannot open the source URL. Ask for missing context rather than inventing my environment. Explain assumptions. For version-sensitive service behavior or commands, consult current official documentation when available, cite it, and explain any differences from this reference. If you cannot verify something, say so.

Reference material from the cheat sheet (structured text or a curated summary):

The sheet is a reference for the AWS Certified Security - Specialty SCS-C03 exam. It covers security concepts and tools; management and governance; networking and content delivery security; security, identity, and compliance; and supporting AWS services. Study the relationships between IAM and federation, logging and monitoring, threat detection and incident response, network controls, encryption and key management, and organization-level governance. This reference is not a complete exam syllabus.

More cheat sheets