The beta exam is difficult. To give you an idea of the difficulty level of the exam, the AWS Certified Database – Specialty is a cross between the Solutions Architect – Professional, SysOps Administrator – Associate, and Security – Specialty except that it is focused on AWS database services.
The AWS Identity and Access Management service is essential to master to manage access control of an AWS account. The service provides the necessary permissions to allow or deny service actions, such as uploading an object to an S3 bucket or launching an EC2 instance, to a principal (an entity that performs actions). Within an organization’s AWS account, users and groups are created to represent the entities that perform the actions. In cases a 3rd party like a consulting partner need to access the AWS account, roles provide a secured and controlled way of accessing your AWS resources.