AWS Certified Solutions Architect - Associate (SAA-C03)
AWS architecture exam section for SAA-C03, focused on service selection, high availability, security, networking, storage, and cost-performance trade-offs.
This guide is for candidates preparing for AWS Certified Solutions Architect - Associate (SAA-C03) and for readers who need a stronger review of AWS design trade-offs. The exam is not a service flash-card test. It is a decision test: choose the right storage, networking, database, compute, resiliency, and cost pattern under an explicit constraint such as latency, operational effort, failure tolerance, or security.
Current exam snapshot
AWS’s current SAA-C03 exam guide states:
- 65 questions in 130 minutes
- 50 scored questions plus 15 unscored
- 720 passing score on a scaled 100-1000 range
- recommended candidate profile: about 1 year of hands-on AWS solution-design experience
AWS’s current exam guide breaks SAA-C03 into four weighted domains:
- 1. Secure Architectures: 30%
- 2. Resilient Architectures: 26%
- 3. High-Performing Architectures: 24%
- 4. Cost-Optimized Architectures: 20%
This guide follows that structure directly.
How to use this guide well
flowchart LR
S["Study Plan"] --> D["Domain chapters"]
D --> L["Lesson pages"]
L --> C["Cheat Sheet and Glossary"]
C --> M["Mixed mocks and miss-log review"]
M --> R["Resources for final scope check"]
What to notice:
- the main lesson pages are where you learn the architecture logic
- the appendices are support layers, not replacements for the chapter work
- mixed mocks should happen after you already have domain-level judgment, not before
Use one of these paths:
- if you want a paced build, start with the study plan
- if you already know AWS services but miss scenario questions, go straight into the four domain chapters and keep the cheat sheet open
- if you are close to exam day, use the faq, glossary, and resources to tighten scope and eliminate avoidable mistakes
Coverage map against the current exam guide
| Domain | Weight | What to master in this guide |
|---|
| 1. Secure Architectures | 30% | 1.1 Secure Access, 1.2 Secure Workloads & Applications, 1.3 Data Security Controls |
| 2. Resilient Architectures | 26% | 2.1 Scalable & Loosely Coupled, 2.2 Highly Available & Fault-Tolerant |
| 3. High-Performing Architectures | 24% | 3.1 Storage Solutions, 3.2 Compute Solutions, 3.3 Database Solutions, 3.4 Network Architectures, 3.5 Data Ingestion & Transformation |
| 4. Cost-Optimized Architectures | 20% | 4.1 Storage Solutions, 4.2 Compute Solutions, 4.3 Database Solutions, 4.4 Network Architectures |
Cross-domain patterns you should expect repeatedly
These are the same decisions that keep reappearing in different clothing:
- gateway endpoint vs NAT for private AWS service access
- Multi-AZ vs read replica for availability versus read scale
- ALB vs NLB for Layer 7 versus Layer 4 routing
- CloudFront vs Global Accelerator for HTTP edge caching versus fast network entry
- RDS or Aurora vs DynamoDB for relational workload shape versus key-value scale
- SQS vs SNS vs EventBridge for queueing, fan-out, and event routing
Use the appendices as support layers rather than substitutes for the main guide:
- Cheat Sheet for last-mile decision tables
- Glossary when similar AWS terms blur together
- FAQ for exam logistics and common traps
- Resources for the official AWS exam guide and primary docs
If you only have time for one final pass before mocks, spend it on Secure Architectures and Resilient Architectures first. Those two domains carry the most weight and also influence how many performance and cost questions are solved.
In this section
- AWS SAA-C03 Study Plan — A Practical 6-Week Path Through Secure, Resilient, High-Performing, and Cost-Aware Design
A practical SAA-C03 study plan that sequences the official domains, hands-on reps, architecture review, and timed mocks into a realistic six-week path.
- Design Secure Architectures for SAA-C03
Work through the IAM, workload-isolation, network-security, and data-protection decisions that anchor the heaviest SAA-C03 domain.
- Design Secure Access to AWS Resources for SAA-C03
Understand IAM roles, federation, cross-account access, root-user controls, and least-privilege patterns for the secure-access questions on SAA-C03.
- Design Secure Workloads and Applications for SAA-C03
Learn the subnet, endpoint, security-group, WAF, Shield, and secure-application-access patterns that show up in SAA-C03 workload-security scenarios.
- Determine Appropriate Data Security Controls for SAA-C03
Cover encryption, KMS policy, TLS, backups, replication, and data-access controls for the SAA-C03 data-protection objective.
- Design Resilient Architectures for SAA-C03
Study the loose coupling, scaling, high-availability, and disaster-recovery choices AWS expects in SAA-C03 resilience scenarios.
- Design High-Performing Architectures for SAA-C03
Cover the storage, compute, database, network, and ingestion choices that drive performance decisions on the current SAA-C03 exam guide.
- Determine High-Performing Storage Solutions for SAA-C03
Choose the right S3, EBS, EFS, FSx, replication, and access-pattern design for SAA-C03 storage-performance scenarios.
- Design High-Performing and Elastic Compute Solutions for SAA-C03
Learn how SAA-C03 frames EC2, Auto Scaling, Lambda, containers, Batch, EMR, and resource sizing for high-performing compute decisions.
- Determine High-Performing Database Solutions for SAA-C03
Study the Aurora, RDS, DynamoDB, read-replica, proxy, and caching choices that drive SAA-C03 database-performance questions.
- Determine High-Performing and Scalable Network Architectures for SAA-C03
Cover CloudFront, Global Accelerator, Direct Connect, VPN, PrivateLink, load balancing, and scalable VPC topology choices for SAA-C03 networking scenarios.
- Determine High-Performing Data Ingestion and Transformation Solutions for SAA-C03
Learn the Kinesis, Glue, Athena, EMR, DataSync, Lake Formation, and transfer-pattern choices AWS tests for SAA-C03 ingestion and transformation scenarios.
- Design Cost-Optimized Architectures for SAA-C03
Study how SAA-C03 frames cost through storage, compute, database, and network design choices rather than isolated pricing trivia.
- Design Cost-Optimized Storage Solutions for SAA-C03
Study storage tiering, lifecycle, backup, migration, and transfer-cost decisions for the SAA-C03 cost-optimized storage objective.
- Design Cost-Optimized Compute Solutions for SAA-C03
Cover right sizing, Spot, Reserved Instances, Savings Plans, Lambda, Fargate, and scaling trade-offs for SAA-C03 compute-cost scenarios.
- Design Cost-Optimized Database Solutions for SAA-C03
Learn how SAA-C03 frames database cost through engine choice, service type, caching, retention, and capacity-planning decisions.
- Design Cost-Optimized Network Architectures for SAA-C03
Study NAT placement, VPC endpoints, CDN use, transfer-path design, and hybrid connectivity trade-offs for SAA-C03 network-cost scenarios.
- SAA-C03 Cheat Sheet — High-Yield Patterns, Decision Tables & Snippets
High-signal SAA-C03 reference: VPC/networking patterns, IAM/KMS/S3 security, storage and database selection, HA/DR strategies, observability essentials, and cost optimization levers.
- SAA-C03 Glossary — High-Confusion AWS Terms for Architecture Scenarios
A practical SAA-C03 glossary focused on the AWS terms and design distinctions candidates most often confuse under exam pressure.
- SAA-C03 FAQ — Common Questions & Quick Answers
Answers to the most frequent questions about the AWS Solutions Architect Associate (SAA‑C03): format, timing, scoring, retakes, prerequisites, hands‑on expectations, what to study, and how to use our practice effectively.