SAA-C03 / Domain 3 / 24%

Design High-Performing Architectures

High-performing storage, compute, database, network, and data ingestion or transformation.

Official Task Statements

TaskWhat to prove
SAA-3.1Determine high-performing and scalable storage solutions.
SAA-3.2Design high-performing and elastic compute solutions.
SAA-3.3Determine high-performing database solutions.
SAA-3.4Determine high-performing and scalable network architectures.
SAA-3.5Determine high-performing data ingestion and transformation solutions.

Concepts You Need to Understand

  • Storage performance, compute elasticity, database access patterns, caching, network latency, edge delivery, and data ingestion throughput.

AWS services involved

  • S3
  • EBS
  • EFS
  • FSx
  • EC2
  • Lambda
  • ECS
  • RDS
  • Aurora
  • DynamoDB
  • ElastiCache
  • CloudFront
  • Kinesis

Important configurations

  • EBS volume type.
  • DynamoDB capacity mode.
  • Aurora replicas.
  • CloudFront cache behaviors.
  • Lambda memory and concurrency.

Exam Decision Patterns

Least operational overhead

Prefer managed and serverless services when they satisfy the requirement. Exceptions appear when the scenario needs host control, unsupported runtimes, specialized network behavior, or exact migration compatibility.

Highly available

Identify the failure boundary. One instance is not HA. Multiple instances in one AZ help capacity but not AZ failure. Multi-AZ handles regional AZ faults. Multi-Region handles regional events but adds complexity and cost.

Durable

Durability is about preserving data. Use replication, versioning, backups, point-in-time recovery, and tested restore plans. A durable backup does not guarantee a low RTO.

Decouple the application

Use SQS for buffering work, SNS for fanout, EventBridge for event routing, and Step Functions for visible workflow state. Add retries, DLQs, and idempotent consumers.

Least privilege

Prefer roles and temporary credentials, scope actions/resources/conditions, watch explicit denies, and remember that resource policies may also be required.

Most cost-effective

Read usage pattern, duration, access frequency, scaling behavior, data transfer, and operations. Cheapest unit price is not always lowest total cost.

Lowest latency

Move content or compute closer to users, cache aggressively, choose the right database access pattern, and avoid unnecessary cross-Region or NAT paths.

Private connectivity

Use private subnets, VPC endpoints, PrivateLink, VPN, Direct Connect, Transit Gateway, and tight DNS/routing design instead of public exposure.

Minimum downtime

Separate deployment downtime, failure recovery, and data restore time. Use blue/green, canary, Multi-AZ, replication, and tested rollback where appropriate.

Automatic remediation

Pair a reliable signal with EventBridge or CloudWatch, a scoped Systems Manager Automation or Lambda action, and a validation step.

Common Mistakes

  • Optimizing one layer while the bottleneck is elsewhere.
  • Ignoring hot partitions or cache invalidation.

Example Architecture

Private Subnet Architecture Internet-facing load balancers stay public while application and database resources stay private with controlled egress and private AWS service access. Private Subnet Architecture Public ALB SubnetsPrivate App SubnetsPrivate DB SubnetsNAT GatewayVPC Endpoints
Internet-facing load balancers stay public while application and database resources stay private with controlled egress and private AWS service access.

Hands-On Activity

Given a workload, list read/write ratio, object size, latency target, scale pattern, and likely service choice.

For an AWS-account lab, use one of the linked mini labs and keep cleanup steps visible before you start.

Task-by-Task Study Notes

SAA-3.1 - Determine high-performing and scalable storage solutions.

Read this task as a decision problem: identify the workload requirement, the control or service family involved, and the tradeoff AWS is testing. The validated local corpus connects this objective to 11 official AWS sources and identifies these study anchors:

  • Determine high-performing and scalable storage solutions.
  • Design High-Performing Architectures
  • S3
  • EBS
  • EFS
  • FSx
  • EC2
  • Lambda

How to apply the material

  • Translate the wording into requirements: security, operations, cost, availability, latency, governance, or data behavior.
  • Choose the service or configuration that directly satisfies those requirements with the least unnecessary complexity.
  • Reject options that are technically possible but miss the domain goal or increase risk without a requirement.

Explain before memorizing

Know this distinction: explain why the selected approach fits the requirement, what it does not provide, and which customer-managed control remains. Then test the explanation against a changed constraint: a different failure boundary, traffic pattern, data sensitivity, latency target, or operating-cost limit.

Exam habit: when two answers seem technically possible, prefer the one that matches the stated outcome and shared-responsibility boundary. Do not assume that a managed service removes identity, data-protection, configuration, monitoring, recovery, or cost responsibilities.

Mastery check before Arcade practice

  • I can define the central terms and explain what problem the objective is solving.
  • I can select the best answer from a realistic scenario without relying on a product name alone.
  • I can explain why the closest distractor is wrong when one requirement changes.
  • I can identify the AWS-managed boundary and the customer-managed control that remains.
  • I can predict the main availability, security, scaling, operations, or cost consequence of the choice.

Use the Arcade after you can explain all five checks aloud or in writing. If an answer is correct only because it looks familiar, return to the source anchors and compare the service purpose, constraints, and tradeoffs again.

Practice SAA-3.1 style questions in this domain

Official AWS references for this objective

Sources are from the validated local corpus; retrieved 2026-08-14. Retrieval metadata and hashes are retained in the corpus manifest.

SAA-3.2 - Design high-performing and elastic compute solutions.

Read this task as a decision problem: identify the workload requirement, the control or service family involved, and the tradeoff AWS is testing. The validated local corpus connects this objective to 11 official AWS sources and identifies these study anchors:

  • Design high-performing and elastic compute solutions.
  • Design High-Performing Architectures
  • S3
  • EBS
  • EFS
  • FSx
  • EC2
  • Lambda

How to apply the material

  • Translate the wording into requirements: security, operations, cost, availability, latency, governance, or data behavior.
  • Choose the service or configuration that directly satisfies those requirements with the least unnecessary complexity.
  • Reject options that are technically possible but miss the domain goal or increase risk without a requirement.

Explain before memorizing

Know this distinction: explain why the selected approach fits the requirement, what it does not provide, and which customer-managed control remains. Then test the explanation against a changed constraint: a different failure boundary, traffic pattern, data sensitivity, latency target, or operating-cost limit.

Exam habit: when two answers seem technically possible, prefer the one that matches the stated outcome and shared-responsibility boundary. Do not assume that a managed service removes identity, data-protection, configuration, monitoring, recovery, or cost responsibilities.

Mastery check before Arcade practice

  • I can define the central terms and explain what problem the objective is solving.
  • I can select the best answer from a realistic scenario without relying on a product name alone.
  • I can explain why the closest distractor is wrong when one requirement changes.
  • I can identify the AWS-managed boundary and the customer-managed control that remains.
  • I can predict the main availability, security, scaling, operations, or cost consequence of the choice.

Use the Arcade after you can explain all five checks aloud or in writing. If an answer is correct only because it looks familiar, return to the source anchors and compare the service purpose, constraints, and tradeoffs again.

Practice SAA-3.2 style questions in this domain

Official AWS references for this objective

Sources are from the validated local corpus; retrieved 2026-08-14. Retrieval metadata and hashes are retained in the corpus manifest.

SAA-3.3 - Determine high-performing database solutions.

Read this task as a decision problem: identify the workload requirement, the control or service family involved, and the tradeoff AWS is testing. The validated local corpus connects this objective to 11 official AWS sources and identifies these study anchors:

  • Determine high-performing database solutions.
  • Design High-Performing Architectures
  • S3
  • EBS
  • EFS
  • FSx
  • EC2
  • Lambda

How to apply the material

  • Translate the wording into requirements: security, operations, cost, availability, latency, governance, or data behavior.
  • Choose the service or configuration that directly satisfies those requirements with the least unnecessary complexity.
  • Reject options that are technically possible but miss the domain goal or increase risk without a requirement.

Explain before memorizing

Know this distinction: explain why the selected approach fits the requirement, what it does not provide, and which customer-managed control remains. Then test the explanation against a changed constraint: a different failure boundary, traffic pattern, data sensitivity, latency target, or operating-cost limit.

Exam habit: when two answers seem technically possible, prefer the one that matches the stated outcome and shared-responsibility boundary. Do not assume that a managed service removes identity, data-protection, configuration, monitoring, recovery, or cost responsibilities.

Mastery check before Arcade practice

  • I can define the central terms and explain what problem the objective is solving.
  • I can select the best answer from a realistic scenario without relying on a product name alone.
  • I can explain why the closest distractor is wrong when one requirement changes.
  • I can identify the AWS-managed boundary and the customer-managed control that remains.
  • I can predict the main availability, security, scaling, operations, or cost consequence of the choice.

Use the Arcade after you can explain all five checks aloud or in writing. If an answer is correct only because it looks familiar, return to the source anchors and compare the service purpose, constraints, and tradeoffs again.

Practice SAA-3.3 style questions in this domain

Official AWS references for this objective

Sources are from the validated local corpus; retrieved 2026-08-14. Retrieval metadata and hashes are retained in the corpus manifest.

SAA-3.4 - Determine high-performing and scalable network architectures.

Read this task as a decision problem: identify the workload requirement, the control or service family involved, and the tradeoff AWS is testing. The validated local corpus connects this objective to 11 official AWS sources and identifies these study anchors:

  • Determine high-performing and scalable network architectures.
  • Design High-Performing Architectures
  • S3
  • EBS
  • EFS
  • FSx
  • EC2
  • Lambda

How to apply the material

  • Translate the wording into requirements: security, operations, cost, availability, latency, governance, or data behavior.
  • Choose the service or configuration that directly satisfies those requirements with the least unnecessary complexity.
  • Reject options that are technically possible but miss the domain goal or increase risk without a requirement.

Explain before memorizing

Know this distinction: explain why the selected approach fits the requirement, what it does not provide, and which customer-managed control remains. Then test the explanation against a changed constraint: a different failure boundary, traffic pattern, data sensitivity, latency target, or operating-cost limit.

Exam habit: when two answers seem technically possible, prefer the one that matches the stated outcome and shared-responsibility boundary. Do not assume that a managed service removes identity, data-protection, configuration, monitoring, recovery, or cost responsibilities.

Mastery check before Arcade practice

  • I can define the central terms and explain what problem the objective is solving.
  • I can select the best answer from a realistic scenario without relying on a product name alone.
  • I can explain why the closest distractor is wrong when one requirement changes.
  • I can identify the AWS-managed boundary and the customer-managed control that remains.
  • I can predict the main availability, security, scaling, operations, or cost consequence of the choice.

Use the Arcade after you can explain all five checks aloud or in writing. If an answer is correct only because it looks familiar, return to the source anchors and compare the service purpose, constraints, and tradeoffs again.

Practice SAA-3.4 style questions in this domain

Official AWS references for this objective

Sources are from the validated local corpus; retrieved 2026-08-14. Retrieval metadata and hashes are retained in the corpus manifest.

SAA-3.5 - Determine high-performing data ingestion and transformation solutions.

Read this task as a decision problem: identify the workload requirement, the control or service family involved, and the tradeoff AWS is testing. The validated local corpus connects this objective to 11 official AWS sources and identifies these study anchors:

  • Determine high-performing data ingestion and transformation solutions.
  • Design High-Performing Architectures
  • S3
  • EBS
  • EFS
  • FSx
  • EC2
  • Lambda

How to apply the material

  • Translate the wording into requirements: security, operations, cost, availability, latency, governance, or data behavior.
  • Choose the service or configuration that directly satisfies those requirements with the least unnecessary complexity.
  • Reject options that are technically possible but miss the domain goal or increase risk without a requirement.

Explain before memorizing

Know this distinction: explain why the selected approach fits the requirement, what it does not provide, and which customer-managed control remains. Then test the explanation against a changed constraint: a different failure boundary, traffic pattern, data sensitivity, latency target, or operating-cost limit.

Exam habit: when two answers seem technically possible, prefer the one that matches the stated outcome and shared-responsibility boundary. Do not assume that a managed service removes identity, data-protection, configuration, monitoring, recovery, or cost responsibilities.

Mastery check before Arcade practice

  • I can define the central terms and explain what problem the objective is solving.
  • I can select the best answer from a realistic scenario without relying on a product name alone.
  • I can explain why the closest distractor is wrong when one requirement changes.
  • I can identify the AWS-managed boundary and the customer-managed control that remains.
  • I can predict the main availability, security, scaling, operations, or cost consequence of the choice.

Use the Arcade after you can explain all five checks aloud or in writing. If an answer is correct only because it looks familiar, return to the source anchors and compare the service purpose, constraints, and tradeoffs again.

Practice SAA-3.5 style questions in this domain

Official AWS references for this objective

Sources are from the validated local corpus; retrieved 2026-08-14. Retrieval metadata and hashes are retained in the corpus manifest.

Review Checklist

Sources and Review Metadata