The next step to prepare for the AWS Certified Security - Specialty exam is to review the AWS security services and how they work together to provide a secure cloud environment. You should have a working knowledge of the following services and their features, use cases, limitations, and best practices; Identity and Access Management (IAM), Key Management Service (KMS), CloudTrail, CloudFormation, Config, Systems Manager, GuardDuty, Inspector, Macie, Shield, WAF, Firewall Manager, and Artifact. IAM allows you to manage users, groups, roles, policies, and permissions for accessing AWS resources. KMS allows you to create and manage encryption keys for encrypting data at rest and in transit. CloudTrail allows you to track and audit the API calls made by users, applications, and services in your AWS account. CloudFormation allows you to create and manage stacks of AWS resources using templates that define the configuration and dependencies of the resources. Config allows you to monitor and record the configuration changes of your AWS resources and evaluate them against compliance rules. Systems Manager allows you to manage and automate tasks for your EC2 instances and other AWS resources. GuardDuty allows you to detect and respond to threats and anomalies in your AWS account and resources using machine learning and threat intelligence. Inspector allows you to assess the security and compliance of your EC2 instances and applications using predefined or custom rules packages. Macie allows you to discover, classify, and protect sensitive data stored in S3 buckets using machine learning and pattern matching. Shield allows you to protect your web applications from distributed denial-of-service (DDoS) attacks using AWS's global network. WAF allows you to filter malicious web requests based on rules that you define or choose from predefined rule sets. Firewall Manager allows you to centrally manage WAF rules across multiple accounts and resources. Finally, Artifact allows you to access security reports from AWS.