CoursifyCoursify

AWS Solutions Architect Associate (SAA-C03): Comprehensive Exam Preparation Guide

AWS Solutions Architect Associate (SAA-C03): Comprehensive Exam Preparation Guide

Verified Sources
Jun 15, 2026

AWS Solutions Architect Associate (SAA-C03): Comprehensive Exam Preparation Guide

The AWS Certified Solutions Architect – Associate (SAA-C03) is one of the most sought-after cloud certifications in the industry. It validates your ability to design secure, resilient, high-performing, and cost-optimized architectures on AWS. With a reported first-attempt pass rate as low as 27–37%, thorough preparation is essential. This guide covers the exam blueprint, core services, architectural patterns, and a structured study plan to help you succeed.

The exam consists of 65 questions (50 scored + 15 unscored experimental), delivered in multiple-choice and multiple-response formats. You have 130 minutes to complete the exam, and the passing score is 720 out of 1,000. The exam tests not just rote memorization of services, but your ability to make architectural decisions based on real-world scenarios across four weighted domains:

DomainWeight
Design Secure Architectures30%
Design Resilient Architectures26%
Design High-Performing Architectures24%
Design Cost-Optimized Architectures20%

The architecture of AWS solutions revolves around the Well-Architected Framework — a foundational body of knowledge every aspiring Solutions Architect must internalize. The following diagram illustrates how the exam domains map to the framework's six pillars:

Footnotes

  1. DEV Community — 63% Fail AWS SAA on First Attempt - Statistics on first-attempt pass rates for AWS SAA-C03 exam. ↩

  2. AWS Official SAA-C03 Exam Guide (PDF) - Official exam blueprint with domains, weightings, task statements, and in-scope services. ↩

How I Passed the AWS Solutions Architect Exam as a Beginner

The AWS Well-Architected Framework: Six Pillars

The AWS Well-Architected Framework provides the theoretical backbone for every exam question. Understanding the six pillars is not optional — it is the lens through which every architectural decision should be evaluated.

PillarFocusKey AWS Services
Operational ExcellenceRun & monitor systems; improve processesCloudFormation, CloudWatch, Systems Manager, Config
SecurityProtect information, systems, and assetsIAM, KMS, Shield, WAF, GuardDuty, Secrets Manager
ReliabilityRecover from failures; scale to meet demandAuto Scaling, Multi-AZ RDS, Route 53, CloudWatch
Performance EfficiencyUse resources efficiently; maintain performance as demand changesCloudFront, ElastiCache, Lambda, Aurora
Cost OptimizationAvoid unnecessary costs; optimize spendCost Explorer, Budgets, Reserved Instances, Savings Plans
SustainabilityMinimize environmental impactCompute Optimizer, Graviton instances, serverless architectures

Each pillar contains design principles and best practices that directly map to exam scenarios. For example, the Security pillar's principle of "implement strong identity foundations" translates directly to exam questions about IAM least-privilege policies, roles vs. users, and cross-account access patterns.

Footnotes

  1. AWS Well-Architected Framework - Six Pillars - AWS Partner Network overview of the six pillars including design principles and best practices. ↩

  2. Whizlabs — Top 15 Must-Knows for AWS SAA Exam - Detailed breakdown of high-frequency exam topics including IAM, encryption, and security patterns. ↩

SAA-C03 Exam Domain Weights

Percentage of scored content per domain

Core AWS Services You Must Master

The SAA-C03 exam references 138+ AWS services, but you do not need to master them equally. Focus on the high-priority services that appear in multiple exam questions, and maintain awareness-level knowledge for the rest.

High-Priority Services (Expect Multiple Questions)

Compute: Amazon EC2 (instance types, pricing models, user data), AWS Lambda (event-driven patterns, concurrency, layers), Amazon ECS/Fargate (container orchestration)

Storage: Amazon S3 (storage classes, lifecycle policies, encryption options, bucket policies), Amazon EBS (volume types, snapshots, encryption), Amazon EFS (shared file storage, mount targets)

Database: Amazon RDS (Multi-AZ vs. Read Replicas, engine selection), Amazon Aurora (Serverless v2, Global Database), Amazon DynamoDB (DAX, Global Tables, capacity modes)

Networking: Amazon VPC (subnets, route tables, NAT Gateway, VPC peering, endpoints), Elastic Load Balancing (ALB vs. NLB vs. GLB), Amazon CloudFront (caching, origins, custom origins), Amazon Route 53 (routing policies, health checks, failover)

Security: AWS IAM (policies, roles, groups, identity-based vs. resource-based policies), AWS KMS (key rotation, envelope encryption), AWS WAF & Shield, Amazon GuardDuty

Management: AWS CloudFormation (IaC patterns), Amazon CloudWatch (metrics, alarms, logs), AWS CloudTrail (API audit logging), AWS Config (resource compliance)

Key Architecture Patterns on the Exam

The exam tests your ability to combine services into coherent architectures:

This web application architecture pattern — CloudFront → ALB → Auto Scaling → RDS/DynamoDB — is the most frequently tested. Variations include replacing EC2 with Lambda for serverless, swapping SQS for SNS/EventBridge for pub/sub, or adding ElastiCache for read-heavy workloads.

Footnotes

  1. Towards The Cloud — SAA-C03 Exam Guide - Comprehensive study guide with prioritized service list and week-by-week preparation strategy. ↩

  2. Sailor.sh Blog — AWS Solutions Architect Exam Topics Deep Dive - Cross-domain architectural patterns and service integration scenarios tested on the exam. ↩

DR Strategy     | RTO          | RPO          | Cost
----------------|-------------|-------------|-------
Backup & Restore| Hours-Days   | Hours-Days   | Low
Pilot Light     | Minutes-Hours| Minutes      | Medium
Warm Standby    | Minutes      | Seconds-Min  | Medium-High
Active-Active   | Seconds      | Near-Zero    | High

Key services: S3 Cross-Region Replication, 
RDS Read Replicas (cross-region), Route 53 
failover, CloudFormation for infra-as-code 
re-deployment, AWS Backup for orchestration.

Exam tip: Match DR strategy to RTO/RPO 
requirements specified in scenario questions.

Deep Dive: Domain 1 — Design Secure Architectures (30%)

Security is the highest-weighted domain on the exam. You must demonstrate competency in three task areas: designing secure access to AWS resources, designing secure workloads and applications, and determining appropriate data security controls.

IAM Architecture Deep Dive

IAM policies are the most tested security topic. Understand the distinction:

Policy TypeAttached ToKey Use Case
Identity-basedIAM Users, Groups, RolesGrant permissions to principals
Resource-basedS3 buckets, SNS topics, SQS queuesGrant cross-account/anonymous access
Session policiesSTS temporary sessionsFurther restrict assumed role permissions
SCPsAWS Organizations OUsSet permission guardrails across accounts

Key exam pattern: When a question asks about cross-account access, the answer almost always involves an IAM role with a trust policy, not a cross-account IAM user.

VPC Security Architecture

Understanding the differences between Security Groups and NACLs is critical:

FeatureSecurity GroupNACL
Stateful/StatelessStatefulStateless
Rule evaluationAll rules evaluatedRules evaluated in order by number
Allow/DenyAllow rules onlyBoth allow and deny rules
Applied atENI (instance) levelSubnet level
Return trafficAutomatically allowedMust be explicitly allowed

Data Encryption

Understand the Shared Responsibility Model and where encryption responsibilities lie:

  • At rest: KMS (SSE-KMS, SSE-C), EBS encryption, RDS encryption, S3 server-side encryption
  • In transit: TLS/SSL, ACM certificates, VPN encryption
  • Key rotation: KMS automatic key rotation (annual), customer-managed keys with manual rotation
  • Envelope encryption: KMS generates data keys; data keys encrypt your payloads (reduces KMS API calls)

Footnotes

  1. AWS Official SAA-C03 Exam Guide (PDF) - Official exam blueprint with domains, weightings, task statements, and in-scope services. ↩

  2. Whizlabs — Top 15 Must-Knows for AWS SAA Exam - Detailed breakdown of high-frequency exam topics including IAM, encryption, and security patterns. ↩

Exam Strategy: Elimination Method

On the exam, use the elimination method. Most questions have 2 clearly wrong distractors and 2 plausible answers. Focus on identifying what makes one answer better than the other — usually it comes down to: (1) does it meet the specific RTO/RPO/latency requirement? (2) is it the MOST cost-effective option? (3) does it follow AWS best practices over custom solutions? Always prefer AWS managed services over self-managed when requirements allow.

Footnotes

  1. DEV Community — My Journey to Passing AWS SAA - First-hand exam experience with preparation strategy and domain analysis. ↩

Structured Study Plan for SAA-C03

  1. 1
    Step 1

    Watch a comprehensive video course (Stephane Maarek or Adrian Cantrill recommended). Focus on core services: IAM, VPC, EC2, S3, RDS, DynamoDB. Take notes on why you'd choose each service, not just what it does. Complete hands-on labs for each service in AWS free tier or a sandbox environment.

    Footnotes

    1. Reddit r/AWSCertifications — SAA-C03 Resource Compilation - Community-validated resource recommendations and study strategies for exam preparation. ↩

  2. 2
    Step 2

    Study advanced topics: encryption (KMS, ACM), disaster recovery strategies, hybrid connectivity (VPN, Direct Connect), serverless patterns (Lambda, API Gateway, DynamoDB), and the Well-Architected Framework pillars. Read the official AWS whitepapers on Security and Reliability.

    Footnotes

    1. AWS Well-Architected Framework - Six Pillars - AWS Partner Network overview of the six pillars including design principles and best practices. ↩

  3. 3
    Step 3

    Take at least 2-3 full practice exams from different sources (Tutorials Dojo and Stephane Maarek practice exams are community favorites). Do not just check your score — analyze every incorrect answer. Understand WHY the wrong answers are wrong. This is where the real learning happens. Target 75%+ on practice exams before scheduling the real exam.

    Footnotes

    1. Reddit r/AWSCertifications — SAA-C03 Resource Compilation - Community-validated resource recommendations and study strategies for exam preparation. ↩

  4. 4
    Step 4

    Address weak areas identified in practice exams. Review the AWS official exam guide's in-scope services list. Focus on service comparisons: SQS vs. Kinesis, ALB vs. NLB, S3 Standard vs. IA vs. Glacier, RDS vs. Aurora vs. DynamoDB, CloudFront vs. Global Accelerator. Create comparison tables for quick reference.

  5. 5
    Step 5

    Re-read your notes and cheat sheets. Take one final practice exam to confirm readiness. Review key numbers: Lambda max timeout (15min), S3 max object size (5TB single upload / 5TB multipart), DynamoDB max item size (400KB), EBS volume types and IOPS. Schedule the exam — a fixed deadline creates accountability. On exam day, read each question carefully, look for key constraint words (most cost-effective, least operational overhead, highest availability).

Cost Optimization: The Most Actionable Domain

While Cost Optimization carries the lowest weight at 20%, the concepts are straightforward and provide easy points if you know the pricing models and tools.

EC2 Pricing Models Comparison

ModelCommitmentDiscountBest For
On-DemandNone0%Short-term, unpredictable workloads
Reserved Instances1 or 3 yearUp to 72%Steady-state, predictable usage
Savings Plans1 or 3 yearUp to 72%Flexible compute (any instance type/region)
Spot InstancesNoneUp to 90%Fault-tolerant, flexible workloads
Dedicated HostsPer hostVariesLicensing/compliance requirements

Storage Optimization

S3 storage class selection is a high-frequency exam topic. Consider the access pattern and retrieval speed requirement:

Key Cost Management Tools

  • AWS Cost Explorer: Visualize and forecast spending; identify trends
  • AWS Budgets: Set spending alerts; track RI/Savings Plans utilization
  • AWS Compute Optimizer: ML-based right-sizing recommendations for EC2 instances
  • AWS Trusted Advisor: Identifies unused resources, idle EC2, unassociated Elastic IPs, and underutilized EBS volumes

Watch Out for These Common Exam Traps

  1. Don't choose EC2 when Lambda works — The exam favors serverless for event-driven workloads with "least operational overhead." 2. Don't choose S3 Standard-IA for frequently accessed data — Minimum storage duration (30 days) and per-GB retrieval fees make it MORE expensive than Standard for frequent access. 3. Don't confuse Multi-AZ with Read Replicas — Multi-AZ is for HIGH AVAILABILITY (automatic failover), Read Replicas are for READ PERFORMANCE (manual promotion). 4. Don't forget the NAT Gateway vs. NAT Instance trade-off — NAT Gateway is the AWS best practice (managed, scalable, single AZ); NAT Instance is legacy but free/cheap. 5. Remember: "least operational overhead" almost always means a managed service.

Footnotes

  1. DEV Community — My Journey to Passing AWS SAA - First-hand exam experience with preparation strategy and domain analysis. ↩

SAA-C03 Exam Preparation Lifecycle

Foundation Building

Week 1-2

Watch video course, learn core services (IAM, VPC, EC2, S3, RDS, DynamoDB). Complete 10+ hands-on labs. Build mental map of AWS service categories."

Deep Dive & Whitepapers

Week 3-4

Study advanced patterns: encryption, DR strategies, hybrid connectivity, serverless, Well-Architected Framework. Read official whitepapers on Security and Reliability."

Practice Exams

Week 5-6

Take 2-3 full-length practice exams from different providers. Analyze EVERY question — both correct and incorrect answers. Target 75%+ scores."

Gap Filling

Week 7

Address weak areas identified in practice exams. Create service comparison tables. Review common exam question patterns and tricks."

Final Review & Exam Day

Week 8

Re-read notes and cheat sheets. One final practice exam. Review key service limits. Schedule and take the exam with confidence!"

Frequently Asked Questions: AWS SAA-C03 Exam

Knowledge Check

Question 1 of 5
Q1Single choice

A company needs to store infrequently accessed data that must survive the loss of an Availability Zone, while minimizing cost. Which S3 storage class should they use?

Explore Related Topics

1

Systems Programmer Interview Preparation

The course provides a structured roadmap to ace systems programmer interviews, covering OS internals, concurrency, memory management, C/C++ mastery, and networking.

  • Core domains (OS internals, concurrency, memory, C/C++, networking) each ~20‑25%; know syscall flow and 11–5  μs5\;\mu\text{s} context‑switch cost.
  • Assess baseline, then deep‑dive into process lifecycle, lock‑free structures, page‑fault handling, and TCP/epoll server implementation.
  • Hone C/C++ low‑level skills (pointers, UB, move semantics, ABI) and use ASan, Valgrind, perf.
  • Practice tracing, concurrency bugs, implementations, performance analysis, and low‑level system design.
  • Follow the 12‑week timeline, solve targeted problems, do mock interviews, and read kernel source.
2

Software Architect Roadmap

A Software Architect is the mastermind behind the structure and design of software systems, responsible for ensuring that software meets both functional and non-functional requirements while balancing business needs with technical constraints. Unlike developers who focus on implementing specific fea

3

AWS vs Azure: A Comprehensive Cloud Platform Comparison

The course contrasts AWS and Azure on market share, services, pricing, hybrid capabilities, and AI/ML to guide platform choice.

  • AWS holds 30%30\% market share with 28.8B28.8B quarterly revenue; Azure 21%21\% with 25.5B25.5B and is the fastest‑growing.
  • Both provide 200+ services; Azure offers tighter Microsoft integration and hybrid tools, while AWS gives more instance types and custom AI silicon.
  • Azure’s hybrid edge (Arc, Stack) and 80%80\% licensing savings contrast AWS’s broader AI/ML options (SageMaker, Trainium) and lower compute pricing.
Coursify logoBrowse all research articles