› Certifications · compare
Compare certifications Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
Microsoft · associate
AZ-500 Microsoft Certified: Azure Security Engineer Associate
Azure-native security engineering: Entra ID, network controls, Defender, Sentinel.
Official page AWS · professional
AWS CSS Amazon Web Services Certified Security - Specialty
The AWS Security Specialty is AWS's most demanding security certification and requires solid practical experience with AWS workloads. It covers a broad spectrum: from IAM and data encryption to incident response, logging, and compliance. The practical relevance is high; pure textbook candidates typically fail. The certification has high market value potential, as it is regarded as proof of quality for security architects in cloud environments. Important: Version SCS-C02 was superseded in December 2025; SCS-C03 is now current.
Official page Comparing
Microsoft AZ-500
AWS AWS CSS
› Cost 3-year cost of ownership
$165
$300
› Exam mechanics Pass mark
AZ-500 700/1000 (scaled)
AWS CSS 750/1000 (scaled, ~75%)
Pass mark
700/1000 (scaled)
750/1000 (scaled, ~75%)
Retake policy
AZ-500 $165 fee · 1d wait
AWS CSS $300 fee · 14d wait
Retake policy
$165 fee · 1d wait
$300 fee · 14d wait
Study time
AZ-500 60–120 hrs
AWS CSS 100–200 hrs
Study time
60–120 hrs
100–200 hrs
Delivery
AZ-500 online proctored
AWS CSS mixed
Delivery
online proctored
mixed
› Salary signal (US base) Range
AZ-500 $115K – $165K
AWS CSS $130K – $180K
Range
$115K – $165K
$130K – $180K
Median
AZ-500 $135,000
AWS CSS $150,000
Role context
AZ-500 Azure security engineer, US, 3–5 years.
AWS CSS Cloud security engineer (AWS-focused), US, 3–5 years.
Role context
Azure security engineer, US, 3–5 years.
Cloud security engineer (AWS-focused), US, 3–5 years.
› Quality (4-axis rubric · 0–10) › Recognition & lifecycle Recognition
AZ-500 Global · US · EU · UK
AWS CSS Global
Recognition
Global · US · EU · UK
Global
Current version
AZ-500 AZ-500 (current) (2024-11)
AWS CSS SCS-C02 (2023-07)
Current version
AZ-500 (current) (2024-11)
SCS-C02 (2023-07)
› Domain coverage A10 Security Operations
○ touched
·
A11 Detection Engineering & Threat Hunting
A11 Detection Engineering & Threat Hunting
● core
·
A12 Data Security, Privacy & Protection
A12 Data Security, Privacy & Protection
○ touched
·
A2 Network Security
○ touched
·
A25 Security Architecture & Engineering
A25 Security Architecture & Engineering
·
● core
A5 Cloud Security
AZ-500 ● core
AWS CSS ● core
A5 Cloud Security
● core
● core
A6 Identity & Access Management
A6 Identity & Access Management
● core
·
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.