---
title: "AWS Services, Features, Concepts, Tools Cheat Sheet | Cybr"
description: "In-scope for the Security Specialty Exam (SCS-C03)"
url: https://cybr.com/cheat-sheets/aws-security-specialty-exam/
---

# AWS Services, Features, Concepts, Tools

In-scope for the **Security Specialty Exam (SCS-C03)**

![AWS Certified Security - Specialty badge](https://cybr.com/aws-security-services/aws-certified-security-specialty.png)

 [Cybr](https://cybr.com/) [https://cybr.com](https://cybr.com/) [Christophe Limpalair](https://www.linkedin.com/in/christophelimpalair/)

Just because a service or topic isn’t listed below doesn’t mean it won’t be on the exam. It’s not an exhaustive list and AWS can make modifications at any time. Each exam is a little bit different and your version may not contain everything you see here. However, this cheat sheet contains the most important services and tools to focus on since you’re likely to see them on the exam.

### Concepts & Tools

Tools and concepts that might appear on the exam

**AWS CLI** (Command Line Interface)

**AWS Management Console**

**AWS SDKs** (Software Development Kits)

**Secure Remote Access**

**Certificate Management**

**IaC** (Infrastructure as Code)

**OWASP Top 10** (including GenAI OWASP Top 10 for LLM Applications)

### In-scope AWS services and features

**What to learn:** What’s the main purpose of each service? How do they work with other AWS services (and which ones)? How are they deployed in multi-account environments? What are best practices for configuring, deploying, and managing them?

### Management and Governance

**AWS CloudFormation**

**AWS CloudTrail**

**AWS CloudTrail Lake**

**Amazon CloudWatch**

**AWS Config**

**AWS Control Tower**

**Amazon Managed Grafana**

**AWS Organizations**

**AWS Resilience Hub**

**AWS RAM** (Resource Access Manager)

**AWS Service Catalog**

**AWS Systems Manager**

**AWS Trusted Advisor**

**AWS User Notifications**

**AWS Well-Architected Tool**

### Networking and Content Delivery Security

**Amazon Application Recovery Controller**

**Amazon VPC**

**Network Access Analyzer**

**Network ACLs**

**Security Groups (SGs)**

**VPC Endpoints**

**AWS Site-to-Site VPN**

**VPC Flow Logs**

**AWS Verified Access**

**AWS Client VPN**

**Amazon CloudFront**

**Amazon Verified Permissions**

**Amazon Route 53** (including Route 53 Resolver DNS Firewall)

**AWS Direct Connect**

**Elastic Load Balancing (ELB)**

**AWS Transit Gateway**

### Security, Identity, and Compliance

**AWS Artifact**

**AWS Audit Manager**

**AWS Certificate Manager (ACM)**

**AWS CloudHSM**

**Amazon Cognito**

**Amazon Detective**

**AWS Directory Service**

**AWS Firewall Manager**

**Automated Forensics Orchestrator for Amazon EC2**

**Amazon GuardDuty**

**AWS Identity and Access Management (IAM)**

**AWS IAM Identity Center**

**Amazon Inspector**

**AWS KMS** (Key Management Service)

**Amazon Macie**

**AWS Network Firewall**

**AWS Private Certificate Authority**

**AWS Secrets Manager**

**AWS Security Hub**

**Amazon Security Lake**

**AWS Shield / AWS Shield Advanced**

**AWS Security Token Service (AWS STS)**

**AWS WAF** (Web App Firewall)

### Analytics

**Amazon Athena**

**Amazon OpenSearch Service**

### Application Integration

**Amazon SNS**

**AWS Step Functions**

### Developer Tools

**AWS Fault Injection Service**

### Internet of Things

**AWS IoT Core**

### Compute

**Amazon API Gateway**

**Amazon EC2** (including EC2 Image Builder, EC2 Instance Connect)

**Amazon EKS**

**Amazon EMR**

**AWS Lambda**

**Amazon Data Lifecycle Manager**

### Machine Learning

**Amazon Bedrock**

**Amazon Q**

**Amazon SageMaker AI**

### Storage and Data Management

**Amazon S3**

**AWS Backup**

**AWS DataSync**

**Amazon EFS** (including EFS Lifecycle policies)

**Amazon FSx for Lustre**

### Other important services

**Amazon EventBridge**

**Elastic Container Registry**

**Signer**

**Elastic Container Service**

**DynamoDB**

## Use this cheat sheet with AI

Copy a ready-to-use prompt into your preferred AI assistant.

Goal

Preview prompt

Prompt

Sources and
more info:

[**\- Official AWS exam guide:** https://docs.aws.amazon.com/pdfs/aws-certification/latest/
security-specialty-03/security-specialty-03.pdf](https://docs.aws.amazon.com/pdfs/aws-certification/latest/security-specialty-03/security-specialty-03.pdf)

**More cheat sheets like this:** [https://cybr.com/cheat-sheets](https://cybr.com/cheat-sheets)

[More cheat sheets](https://cybr.com/cheat-sheets/)