The AWS Solutions Architect Associate (SAA-C03) tests whether you can design secure, resilient, high-performing and cost-effective systems on AWS. It rewards judgement about trade-offs, not memorisation. The fastest route to passing is to learn each service in a free-tier account and view everything through the lens of the AWS Well-Architected Framework. This guide is study guidance only, with no real or simulated exam questions.
The four domains, and how to study each
1. Design Secure Architectures (30%)
The largest domain. IAM (users, roles, policies, least privilege), data protection (encryption at rest and in transit, KMS), and secure network design (security groups, NACLs, private subnets). Always ask “who can access this, and is it least privilege?“
2. Design Resilient Architectures (26%)
Multi-AZ and multi-region designs, decoupling with SQS and SNS, Auto Scaling, and backups. The recurring theme is surviving failure gracefully.
3. Design High-Performing Architectures (24%)
Choosing the right compute (EC2, Lambda, containers), storage (S3, EBS, EFS) and databases (RDS, DynamoDB, ElastiCache), plus caching and content delivery (CloudFront). Match the workload to the service.
4. Design Cost-Optimized Architectures (20%)
Right-sizing, storage classes and lifecycle policies, pricing models (On-Demand, Reserved, Savings Plans, Spot), and avoiding waste. Easy marks once you know the pricing levers.
Use the Well-Architected Framework as your compass
For any scenario, the “best” answer usually satisfies the Well-Architected pillars: secure, reliable, performant, cost-effective and operationally sound. Practising in a free-tier account makes these trade-offs intuitive. Avoid “exam dump” sites — they breach AWS policy and copyright and can void your certification.