AWS Certified Solutions Architect – Associate (SAA-C03): Complete Study Guide

Everything you need to pass the SAA-C03: exam format, the four domains and their weights, a 6-week study plan, and the AWS services that matter most.

Practice 1012 free AWS Certified Solutions Architect – Associate (SAA-C03) questions

Official exam page: https://aws.amazon.com/certification/certified-solutions-architect-associate/

The AWS Certified Solutions Architect – Associate (SAA-C03) is the most popular AWS certification and a strong proof that you can design resilient, secure and cost-effective architectures on AWS. This guide walks you through the exam structure, what to study, and how to prepare efficiently.

Exam at a glance

• Format: 65 questions (multiple choice and multiple response)
• Duration: 130 minutes
• Cost: 150 USD
• Passing score: 720 out of 1000 (scaled)
• Validity: 3 years

Always confirm the current numbers on the official exam page linked above.

Exam domains

The SAA-C03 is organized into four domains:

1. Design Secure Architectures — 30%. IAM, security groups, NACLs, KMS, encryption at rest and in transit, secure access to AWS services.
2. Design Resilient Architectures — 26%. Multi-AZ and multi-region designs, decoupling with SQS/SNS, Auto Scaling, fault tolerance, backup and recovery.
3. Design High-Performing Architectures — 24%. Choosing the right compute, storage and database; caching with ElastiCache and CloudFront; scaling read and write workloads.
4. Design Cost-Optimized Architectures — 20%. Right-sizing, storage tiers (S3 classes, EBS types), purchasing options (Spot, Reserved, Savings Plans).

Core services to master

• Compute: EC2, Auto Scaling, Lambda, Elastic Beanstalk, ECS/EKS basics
• Storage: S3 (storage classes, lifecycle, versioning), EBS, EFS, Storage Gateway
• Database: RDS, Aurora, DynamoDB, ElastiCache, Redshift basics
• Networking: VPC, subnets, route tables, NAT, Internet/VPC endpoints, Route 53, CloudFront
• Security: IAM roles and policies, KMS, Secrets Manager, Shield, WAF
• Integration: SQS, SNS, EventBridge, API Gateway

A 6-week study plan

• Weeks 1–2: Core compute, storage and networking. Build a VPC by hand.
• Weeks 3–4: Databases, security and decoupling patterns. Learn when to pick DynamoDB vs RDS.
• Week 5: Cost optimization and the Well-Architected Framework's five pillars.
• Week 6: Full-length practice exams. Review every wrong answer until you understand why.

Exam-day tips

• Read the last sentence of each question first — it tells you what is actually being asked (cheapest? most resilient? least operational overhead?).
• Eliminate answers that technically work but ignore the constraint (e.g. cost or latency).
• Watch for keywords: "highly available" implies Multi-AZ, "decouple" implies SQS/SNS, "serverless" implies Lambda + DynamoDB.

Practice makes the difference

The single most effective preparation is doing realistic practice questions and reviewing the explanations. Use the free SAA-C03 question bank below, then come back to the domains you score lowest on.