AWS Solutions Architect Associate Guide: Exam Breakdown and Study Plan
The AWS Solutions Architect – Associate (SAA-C03) is the most widely recognised AWS certification in the job market. When employers ask for “AWS certified”, this is usually the certification they mean. It is an associate-level credential that tests your ability to design cost-effective, resilient, and secure solutions on AWS — not just your knowledge of what individual services do.
This guide covers everything you need to know to prepare for it and pass it.
What the exam actually tests#
The SAA-C03 does not ask you to list service names. It presents realistic architectural scenarios and asks which solution best meets a set of requirements — typically involving some combination of performance, cost, availability, and security.
A typical question might describe a company that needs to store large volumes of infrequently accessed data, has a strict budget, and requires retrieval within 12 hours. You choose between S3 storage classes. The exam tests whether you understand why S3 Glacier is the right answer, not just that it exists.
Exam domains and weightings:
| Domain | Approximate weighting |
|---|---|
| Design Secure Architectures | 30% |
| Design Resilient Architectures | 26% |
| Design High-Performing Architectures | 24% |
| Design Cost-Optimised Architectures | 20% |
Format: 65 questions (mix of multiple choice and multiple response), 130 minutes, scaled scoring with a passing score of approximately 720/1000. Cost approximately $150. Valid for 3 years.
Key topics and services to know well#
You will not be asked about every AWS service in depth. Focus your preparation on the following:
Compute:
- EC2: instance types (purpose-built families), placement groups, spot vs on-demand vs reserved pricing, Auto Scaling groups, launch templates
- Lambda: use cases, execution limits (15 minute max), integration patterns with SQS, S3, API Gateway
- ECS and EKS: when to use containers vs Lambda vs EC2
Storage:
- S3: storage classes (Standard, IA, Glacier, Glacier Deep Archive), lifecycle policies, versioning, replication, encryption options
- EBS: volume types (gp3, io2, st1, sc1), snapshots, performance characteristics
- EFS: use cases (shared file system across multiple EC2 instances), when not to use it
Networking:
- VPC fundamentals: subnets, route tables, internet gateways, NAT gateways
- Security groups vs NACLs: stateful vs stateless differences
- VPC peering, Transit Gateway, VPN connections, Direct Connect
- Elastic Load Balancing: ALB vs NLB vs CLB differences and use cases
- Route 53: routing policies (simple, weighted, latency, failover, geolocation)
Databases:
- RDS: Multi-AZ vs read replicas, automated backups, when to use each engine
- Aurora: differences from standard RDS, serverless option, global database
- DynamoDB: key design, consistency models, capacity modes, DAX
- ElastiCache: Redis vs Memcached and when each applies
- Redshift: OLAP use case, when to choose over RDS
Security:
- IAM: policies, roles, users, groups, trust relationships
- AWS KMS: encryption at rest, CMKs, envelope encryption
- AWS WAF, Shield, and GuardDuty: their distinct purposes
- CloudTrail, AWS Config, Security Hub: monitoring and compliance
Application integration:
- SQS: standard vs FIFO queues, visibility timeout, dead-letter queues
- SNS: fan-out patterns, topic subscriptions
- EventBridge: event-driven architecture patterns
- Step Functions: orchestrating multi-step workflows
Monitoring and cost:
- CloudWatch: metrics, alarms, Logs, dashboards
- AWS Trusted Advisor: cost, performance, security checks
- Cost Explorer and Budgets
What the exam is actually like on the day#
The scenario-based format rewards engineers who think in terms of trade-offs, not just feature lists. Several question patterns appear repeatedly:
The “most cost-effective” pattern: Given several architecturally equivalent solutions, which is cheapest? You need to understand reserved instances vs savings plans, S3 storage class differences, and serverless vs provisioned compute costs.
The “most resilient” pattern: Given a requirement for 99.99% availability, which architecture achieves it? This tests Multi-AZ designs, cross-region replication, and fault isolation patterns.
The “migration” pattern: A company is moving from on-premises to AWS. What is the right approach for their workload type? These questions test AWS migration services (Database Migration Service, DataSync, Snowball) and migration strategies.
The “minimum permissions” pattern: Which IAM policy or configuration grants only the necessary access? These test whether you understand least-privilege IAM design.
Multiple-response questions are harder than they look. You must select exactly the right combination — selecting an incorrect option alongside correct ones reduces your score on that question.
How to prepare#
Step 1: Build hands-on experience in parallel with studying (essential)
The most common mistake is studying for this exam entirely from courses and practice questions without touching the actual AWS console. Questions that seemed abstract become obvious once you have deployed a VPC, configured an ALB, and watched SQS messages flow between services.
Open a free-tier AWS account. Deploy real resources. Delete them when you are done to stay within free tier limits.
Step 2: Use a structured course for initial coverage
A good video course provides systematic coverage of all exam domains. Work through it actively — pause, follow along in your own AWS account, and take notes on things you do not understand.
Step 3: Practice exams are the most important preparation tool
After covering the material, your most valuable activity is working through practice exams. For each wrong answer:
- Read the explanation carefully
- Identify which concept you misunderstood
- Go back to the relevant topic and consolidate
Aim to consistently score 80%+ on practice exams before your real attempt. The real exam is often harder than free practice questions, so a high practice score gives you margin.
Step 4: Review the AWS Well-Architected Framework
The exam references the five pillars: operational excellence, security, reliability, performance efficiency, and cost optimisation. Understanding how AWS frames these trade-offs will help you choose between architecturally similar options.
Realistic preparation timeline#
| Starting point | Time needed |
|---|---|
| New to AWS, no hands-on experience | 3–4 months at 10 hours/week |
| Some AWS experience, no certification | 6–10 weeks at 8–10 hours/week |
| Regular AWS user, recent hands-on work | 4–6 weeks of focused study |
Do not book your exam date before you feel ready. You can reschedule, but failing costs time and money. Aim to take a full practice exam under timed conditions and score above 80% before booking.
What this certification is worth#
The SAA-C03 is the single AWS certification most frequently mentioned in job descriptions at junior to mid level. Holding it:
- Gets you through CV screening at companies that filter for AWS credentials
- Provides credible signal to hiring managers that you understand AWS broadly
- Supports salary negotiations, particularly at entry to mid level
- Gives you a foundation for pursuing the Solutions Architect Professional later
It is not a guarantee of anything. You will still need to demonstrate hands-on capability in interviews. Pair it with a GitHub portfolio showing real AWS deployments to make it meaningful.
For senior roles (five or more years of experience), the Associate cert matters less than your track record. But even then, it provides a recognised credential that removes doubt from your AWS knowledge.
Should you get this before or after the Cloud Practitioner?#
If you have any hands-on AWS experience, go directly to the Solutions Architect Associate. The Cloud Practitioner covers material that is a subset of the Associate exam. If you can pass the Associate, you already know the Practitioner content.
The only reason to take the Practitioner first is if you are entirely new to cloud computing and want a structured introduction before attempting something harder.
Summary#
- The SAA-C03 is the most recognised AWS certification for technical roles
- It tests scenario-based architectural decision-making, not just service knowledge
- Key domains: security, resilience, performance, and cost optimisation
- Prepare with hands-on AWS experience, a structured course, and practice exams
- Aim for 80%+ on practice exams before sitting the real thing
- Pair it with project work to make it credible in technical interviews