AWS Certified Security - Specialty

Professionals need to understand public and private networks, network segmentation, routing, firewalls, and secure connectivity.

A well-designed network can reduce the exposure of sensitive resources and restrict communication to only the paths that are required.

Application Security

Applications running in AWS need to be protected throughout their development and operational lifecycle.

Application security can involve secure authentication, access control, encryption, API protection, vulnerability management, secrets management, and secure configuration.

Security should be incorporated early in the development lifecycle rather than added only after an application has been deployed.

DevSecOps practices can help development and operations teams integrate automated security checks into application development and deployment workflows.

Logging and Security Monitoring

Continuous monitoring is essential for identifying suspicious activity and security problems.

AWS CloudTrail provides a record of AWS API activity, which can help organizations understand who performed actions, what actions were taken, and which resources were affected.

Amazon CloudWatch provides monitoring and logging capabilities that can support operational visibility.

Centralized logging can help security teams investigate incidents, identify unusual behavior, detect configuration changes, and support auditing requirements.