DJames617 associate / SAA-C03
AWS Certified Solutions Architect - Associate Study Guide
Practice secure, resilient, high-performing, and cost-optimized architecture decisions using realistic AWS constraints.
Certification Overview
- Exam code
- SAA-C03
- Target candidate
- Individuals with at least 1 year of hands-on experience designing AWS cloud solutions.
- Study scope
- Eight to twelve focused weeks for a learner with basic AWS familiarity. Architecture tradeoffs matter more than memorized service definitions.
- Completion status
- Published and source-reviewed 2026-08-07
What This Exam Is Really Testing
- Whether you can design secure access, network boundaries, and data protection before picking compute.
- Whether you can translate availability, durability, latency, RPO, and RTO into an architecture.
- Whether you can choose managed services that reduce operational work without missing constraints.
- Whether you can compare cost, performance, and resilience tradeoffs under scenario pressure.
Who This Exam Is For
Individuals with at least 1 year of hands-on experience designing AWS cloud solutions. Best after core AWS service fluency and basic Well-Architected familiarity.
Exam Blueprint
| Domain | Weight | Study page |
|---|---|---|
| Design Secure Architectures | 30% | Open Domain 1 |
| Design Resilient Architectures | 26% | Open Domain 2 |
| Design High-Performing Architectures | 24% | Open Domain 3 |
| Design Cost-Optimized Architectures | 20% | Open Domain 4 |
How to Use These Notes
For every service, ask what fails, what scales, what AWS manages, what you still configure, and what it costs when traffic changes.
Domains
Design Secure Architectures
Secure access, secure workloads and applications, and data security controls.
Practice this domain in AWS ArcadeDesign Resilient Architectures
Scalable, loosely coupled, highly available, and fault-tolerant architectures.
Practice this domain in AWS ArcadeDesign High-Performing Architectures
High-performing storage, compute, database, network, and data ingestion or transformation.
Practice this domain in AWS ArcadeDesign Cost-Optimized Architectures
Cost-optimized storage, compute, database, and network architectures.
Practice this domain in AWS ArcadeCritical AWS Services
Do not study these as vocabulary words. For each service, know the workload fit, what AWS manages, what you still configure, security boundaries, scaling behavior, and cost signal.
Service Comparisons
Many AWS questions are not asking whether a service can solve the problem. They ask which service solves it with the right operational, security, availability, and cost tradeoff.
Exam Decision Patterns
Least operational overhead
Prefer managed and serverless services when they satisfy the requirement. Exceptions appear when the scenario needs host control, unsupported runtimes, specialized network behavior, or exact migration compatibility.
Highly available
Identify the failure boundary. One instance is not HA. Multiple instances in one AZ help capacity but not AZ failure. Multi-AZ handles regional AZ faults. Multi-Region handles regional events but adds complexity and cost.
Durable
Durability is about preserving data. Use replication, versioning, backups, point-in-time recovery, and tested restore plans. A durable backup does not guarantee a low RTO.
Decouple the application
Use SQS for buffering work, SNS for fanout, EventBridge for event routing, and Step Functions for visible workflow state. Add retries, DLQs, and idempotent consumers.
Least privilege
Prefer roles and temporary credentials, scope actions/resources/conditions, watch explicit denies, and remember that resource policies may also be required.
Most cost-effective
Read usage pattern, duration, access frequency, scaling behavior, data transfer, and operations. Cheapest unit price is not always lowest total cost.
Lowest latency
Move content or compute closer to users, cache aggressively, choose the right database access pattern, and avoid unnecessary cross-Region or NAT paths.
Private connectivity
Use private subnets, VPC endpoints, PrivateLink, VPN, Direct Connect, Transit Gateway, and tight DNS/routing design instead of public exposure.
What AWS Wants You to Notice
Common Exam Traps
- Confusing read replicas with high availability failover.
- Selecting a public subnet because a workload needs internet egress.
- Ignoring data-transfer cost in multi-Region or NAT-heavy designs.
- Choosing a technically possible custom solution when a managed service directly matches the requirement.
Architecture Diagrams
Hands-On Practice
These labs are optional. They do not provision anything from this website. Read the cost warning before creating AWS resources.
Mastery Checklist
Checklist state is saved locally in this browser and does not change Arcade readiness scoring.
Practice in AWS Arcade
Use the Arcade after studying a domain so explanations reinforce reasoning instead of becoming answer memorization.
Sources and Review Metadata
This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.