Cloud Certifications Explained: What They Are and How They Work
Cloud certifications are vendor-issued credentials that confirm you have a tested understanding of a cloud platform. They are awarded by the platform providers themselves — AWS, Google, Microsoft — after you pass a proctored exam covering their services, architecture patterns, security models, and operational concepts.
They are not degrees. They do not require years of study. But they are not trivial either — the associate and professional-level exams require real preparation, and the questions are not always straightforward.
This page explains how the system works so you can make an informed decision about which certifications to pursue and why.
How certification exams work#
Most cloud certification exams share a similar format regardless of vendor:
Multiple choice and multiple response questions. The majority of questions present a scenario and ask you to select the correct service, configuration, or approach. Multiple-response questions require you to select two or three correct answers from a list — these are harder because you lose marks if you select an incorrect option alongside a correct one.
Scenario-based questions. Higher-level exams rarely ask pure trivia. They present a realistic business or technical situation and ask which solution best fits the constraints. Understanding trade-offs matters more than memorising service names.
No open-book or internet access. Exams are proctored — either at a testing centre or via online proctoring software with webcam monitoring. You work from memory.
Scaled scoring. AWS and GCP use a 1-1000 point scale with passing thresholds typically between 700 and 750 depending on the exam. Azure uses a 1-1000 scale with a passing threshold of 700. The raw number of correct answers is converted to a scaled score, so the threshold is not simply 70%.
Time limits. Most associate-level exams allow 130-180 minutes. Foundational exams are shorter (60-90 minutes). Professional and specialty exams can run up to 180 minutes.
The four levels of cloud certification#
Foundational#
Foundational certifications are broad, non-technical overviews of a cloud platform. They cover what cloud is, what services exist, how pricing works, and the basic security and compliance model.
Examples: AWS Cloud Practitioner, GCP Cloud Digital Leader, Azure Fundamentals (AZ-900).
These are accessible to people without a technical background. They are often taken by project managers, salespeople, or technical beginners wanting a structured introduction. For engineers, they are a useful first step but are rarely the stopping point.
Associate#
Associate certifications are the first meaningful technical level. They test that you can deploy, manage, and troubleshoot real workloads on the platform — not just describe what services do.
Examples: AWS Solutions Architect – Associate, GCP Associate Cloud Engineer, Azure Administrator (AZ-104).
Associate certifications are what most hiring managers mean when they ask for cloud certifications in a job description. They represent a realistic minimum technical bar.
Professional#
Professional certifications are advanced credentials for engineers with meaningful hands-on experience. They test architectural design, operational maturity, security depth, and the ability to choose the right service for complex constraints.
Examples: AWS Solutions Architect – Professional, AWS DevOps Engineer – Professional, GCP Professional Cloud Architect.
These are difficult. Passing one without real experience is very hard. They are respected credentials that carry genuine weight in interviews and salary negotiations.
Specialty#
Specialty certifications go deep into a specific domain: security, machine learning, networking, databases. They are designed for engineers who have built expertise in a particular area and want to signal it.
Examples: AWS Certified Security – Specialty, GCP Professional Machine Learning Engineer, Azure Security Technologies (AZ-500).
Specialty certifications are valuable when they match your actual work. They are less useful as general market signals.
How AWS, GCP, and Azure structure their certification paths#
AWS#
AWS has the most extensive catalogue with certifications at every level:
- One foundational cert (Cloud Practitioner)
- Three associate certs (Solutions Architect, Developer, SysOps Administrator)
- Two professional certs (Solutions Architect Professional, DevOps Engineer Professional)
- Several specialty certs covering security, networking, machine learning, data analytics, and databases
The recommended path for most engineers is Cloud Practitioner → Solutions Architect Associate → Solutions Architect Professional, branching into specialties based on their role.
GCP#
GCP has one foundational credential (Cloud Digital Leader), one associate credential (Associate Cloud Engineer), and a set of professional certifications covering architecture, data engineering, development, DevOps, security, machine learning, networking, and databases.
Unlike AWS, GCP does not have a strict two-tier associate/professional split for most domains — you move from the single Associate Cloud Engineer cert directly into professional certifications in your area of focus.
Azure#
Azure organises certifications by role (administrator, developer, architect, security, DevOps) and level (fundamentals, associate, expert). The recommended entry path is Azure Fundamentals (AZ-900) followed by the appropriate associate certification for your role — typically AZ-104 for administrators or AZ-204 for developers.
What certifications cost#
Exam fees vary by vendor and level:
| Platform | Foundational | Associate | Professional/Expert | Specialty |
|---|---|---|---|---|
| AWS | ~$100 | ~$150 | ~$300 | ~$300 |
| GCP | ~$99 | ~$200 | ~$200 | — |
| Azure | ~$165 | ~$165 | ~$165 | ~$165 |
Prices are approximate USD and change periodically. Check vendor sites for current pricing in your region.
AWS charges more for professional-level exams. GCP charges the same across most levels. Azure pricing is consistent across tiers.
Retake fees apply if you fail. AWS requires a 14-day waiting period before a retake. If you fail twice, you wait 90 days. Factor this into your study plan — rushing and failing costs both time and money.
How long certifications last#
- AWS: 3-year validity, renewed by passing a higher-level exam, a new exam in the same domain, or a recertification exam
- GCP: 2-year validity for associate and professional certifications, renewed by re-examination
- Azure: Fundamentals certifications do not expire. Role-based and specialty certifications require annual renewal through a free online assessment (typically 30–40 questions, no proctor, open book)
Azure’s renewal model is the most forgiving — free online renewal each year rather than a full retake. GCP’s two-year cycle is the shortest and requires re-examination. AWS sits in the middle.
What certifications prove — and what they don’t#
A certification tells an employer that you sat a proctored exam and passed it at or above the published threshold. This is useful signal but limited signal.
What it proves:
- You understood enough of the platform to answer scenario-based questions correctly
- You put in deliberate preparation time
- You can work with the vendor’s terminology and service concepts
What it does not prove:
- That you have deployed real infrastructure at scale
- That you can debug a broken production system under pressure
- That you understand cost implications in real environments
- That you will be effective in a team
Certifications are most valuable when they are accompanied by evidence of real work — GitHub projects, work history, or demonstrated problem-solving in interviews. A certification alone rarely closes a senior role. See certifications vs experience for a direct comparison.
Who should get certified, and when#
Certifications are most useful at certain stages of a career:
Before your first cloud role: A foundational or associate cert signals that you are serious, have baseline knowledge, and have done more than watch YouTube videos. It helps you get past CV screening at companies that filter for certifications.
When changing platforms: If you have AWS experience but are targeting a GCP-heavy company, the Associate Cloud Engineer cert tells them you have verified your GCP knowledge, not just transferred assumptions.
When moving toward seniority: A professional-level certification alongside real experience reinforces a senior title or salary negotiation.
When a role specifically requires it: Some enterprise contracts, government roles, and consulting positions have certification requirements for specific compliance or procurement reasons. In these cases, the cert is genuinely mandatory.
Certifications are less critical once you have several years of verifiable experience and strong references. At that point, your track record does more work than any exam credential.
Summary#
- Cloud certification exams use multiple-choice scenario questions scored on a 1-1000 scale
- The four levels are foundational, associate, professional, and specialty
- AWS, GCP, and Azure each have their own certification structures and renewal cycles
- AWS certs last three years; GCP certs last two; Azure role-based certs require free annual renewal
- Certifications prove platform knowledge but not real-world effectiveness — they work best alongside practical project evidence