The AWS Certified Solutions Architect – Associate certification, commonly shortened to AWS SAA or referenced by its current exam code SAA-C03, is the most widely held cloud certification in the world. If you're researching how to become AWS certified, this guide covers the exam format, the four scored domains, a realistic study timeline, the AWS services you actually need to know cold, and what the credential tends to mean for your career and salary once you hold it.
What the AWS Solutions Architect Associate Certification Actually Tests
Despite the word "Associate" in the name, this is not an entry-level trivia exam. AWS designed SAA-C03 to test whether you can look at a business requirement — say, "we need a web application that can survive a full data center outage without losing customer data" — and translate that requirement into a specific, defensible architecture using real AWS services. You are not asked to define what Amazon S3 is; you are asked which storage class and replication setup fits a stated durability requirement, and why the alternatives don't.
This distinction matters for how you study. Memorizing service names gets you nowhere on exam day. Understanding the trade-offs between services that appear to solve the same problem — Amazon RDS vs. DynamoDB, an Application Load Balancer vs. a Network Load Balancer, S3 Standard-IA vs. S3 Glacier — is what the exam is actually built around.
SAA-C03 Exam Format
The current version of the exam (SAA-C03, which replaced SAA-C02) consists of 65 questions, a mix of multiple-choice (one correct answer) and multiple-response (two or more correct answers out of five or more options). You're given 130 minutes to complete it. Scoring is reported on a scaled range of 100–1000, and the passing threshold is 720. Unscored, unlabeled "pretest" questions are mixed into the exam pool for AWS's own item-calibration purposes and do not count toward or against your score, but you cannot tell which ones those are, so every question deserves full attention.
The exam is delivered either at a Pearson VUE testing center or online via remote proctoring, and pricing and exact policies are set by AWS directly — always check the official AWS Certification page before you register, since fees and formats are periodically revised.
There is no mandatory prerequisite certification. AWS's own recommendation is at least one year of hands-on experience operating AWS workloads in production, but plenty of candidates pass with several months of deliberate, hands-on lab practice instead of paid work experience, provided they actually build things rather than only watching video courses.
The Four Exam Domains
AWS publishes an official exam guide that breaks SAA-C03 into four weighted content domains. Knowing the weighting tells you where to spend your study hours.
Domain 1: Design Secure Architectures (~30%)
The largest single domain. Covers IAM users, groups, roles, and policies; the principle of least privilege; securing data at rest and in transit (KMS, S3 encryption options, ACM); VPC security constructs like security groups vs. network ACLs; and designing secure access between AWS accounts and on-premises networks (VPN, Direct Connect, resource policies).
Domain 2: Design Resilient Architectures (~26%)
Focuses on decoupling components (SQS, SNS, EventBridge), multi-AZ and multi-Region designs, choosing the right storage and database service for a durability or availability requirement, and Auto Scaling / Elastic Load Balancing patterns that keep an application running through instance or AZ failure.
Domain 3: Design High-Performing Architectures (~24%)
Storage performance options (EBS volume types, S3 Transfer Acceleration, EFS vs. FSx), compute choices (EC2 instance families, Lambda, containers on ECS/EKS/Fargate), database read replicas and caching (ElastiCache, DAX), and content delivery through CloudFront.
Domain 4: Design Cost-Optimized Architectures (~20%)
Choosing the right pricing model (On-Demand vs. Reserved vs. Spot vs. Savings Plans), right-sizing compute and storage, S3 lifecycle policies to move data to cheaper storage tiers automatically, and identifying when a managed service is actually cheaper than the equivalent self-managed infrastructure once operational overhead is accounted for.
The AWS Services You Need to Know Cold
You don't need to memorize every AWS service — there are hundreds. You need deep, comparative knowledge of a much smaller "core" set, because the exam repeatedly asks you to choose between services that sound similar:
- Compute: EC2 (instance types, purchasing options), Lambda, Auto Scaling groups, Elastic Load Balancers (ALB/NLB/CLB differences)
- Storage: S3 (storage classes, lifecycle rules, versioning), EBS (volume types: gp3, io2, st1, sc1), EFS, FSx
- Databases: RDS (Multi-AZ vs. read replicas), DynamoDB (partition keys, on-demand vs. provisioned capacity), ElastiCache, Aurora
- Networking: VPC design (subnets, route tables, NAT gateways vs. NAT instances), Route 53 routing policies, CloudFront, Direct Connect vs. Site-to-Site VPN
- Security & identity: IAM, KMS, Secrets Manager, AWS Organizations, Shield/WAF
- Messaging & integration: SQS, SNS, EventBridge, Step Functions
- Monitoring & management: CloudWatch, CloudTrail, Trusted Advisor, AWS Config
If you can explain, out loud, why you'd choose one option over another in each of these categories for a given scenario, you're studying the right way.
A Realistic Study Roadmap
Most candidates who pass on their first attempt follow some version of this sequence, adjusted for how much hands-on AWS experience they're starting with:
- Weeks 1–2 — Foundations. If you haven't already, get comfortable with core compute, storage, and networking concepts. Create a free-tier AWS account and actually launch resources — don't just read about them.
- Weeks 3–5 — Domain-by-domain deep dive. Work through each of the four domains in turn, building a small hands-on project per domain (e.g., a highly available two-tier web app for the resilience domain; a cost comparison spreadsheet for the cost domain).
- Week 6 — The Well-Architected Framework. Read AWS's own Well-Architected Framework whitepaper. Several exam questions are effectively "which pillar of the Well-Architected Framework does this scenario violate."
- Weeks 7–8 — Practice exams and gap-filling. Take full-length timed practice exams under real conditions. Review every wrong answer until you understand why the correct option was correct and, just as importantly, why each distractor was wrong.
Use our AWS Solutions Architect Associate study roadmap for a step-by-step, ordered checklist you can follow week by week.
Is the AWS Solutions Architect Associate Certification Worth It?
For most cloud-focused careers, yes — with a caveat. The certification is valuable primarily as a structured way to build (and then prove) architectural judgment on AWS, not as an isolated credential with magic career powers. Hiring managers who know the space treat it as a strong, credible signal that you understand core AWS design trade-offs, but it rarely substitutes for demonstrable hands-on project experience — it works best alongside it, not instead of it.
It's a natural next step after the entry-level AWS Certified Cloud Practitioner, and a common prerequisite step before candidates attempt the notably harder AWS Certified Solutions Architect – Professional or a specialty certification like AWS Certified Security – Specialty. See our full AWS SAA comparison against alternative and adjacent certifications if you're deciding between paths.
Salary Impact and Career Outcomes
Compensation for AWS-certified professionals varies significantly by role (Cloud Engineer, DevOps Engineer, Solutions Architect, Platform Engineer), seniority, industry, and geography — there is no single accurate number that applies to everyone, and you should treat any site (including this one) that gives you a single confident figure with some skepticism. What's more consistently reported across salary-aggregation platforms like Glassdoor, LinkedIn Salary, and ZipRecruiter is a measurable premium for AWS-certified candidates over otherwise-similar non-certified candidates in cloud infrastructure roles, particularly at the point of a job change or promotion negotiation rather than as an automatic raise for existing employees. For detailed, regularly updated range data broken down by experience level, industry, and location, see our AWS Solutions Architect Associate salary guide.
Common Mistakes Candidates Make
A few patterns show up repeatedly among candidates who fail on their first attempt:
- Studying services in isolation instead of comparative scenarios. The exam almost never asks "what does S3 do" — it asks you to pick between three plausible-sounding architectures.
- Skipping hands-on practice and relying entirely on video courses. Passive learning doesn't build the intuition the scenario-based questions require.
- Under-preparing on cost optimization. Candidates from a pure engineering background often treat Domain 4 as an afterthought, then lose points on questions that are really about Reserved Instance strategy or S3 lifecycle rules.
- Not reading the full question. Many SAA-C03 questions bury the actual constraint (a budget limit, a compliance requirement, an RTO/RPO target) in the second half of a long scenario. Missing that constraint means the "obviously correct" answer is actually wrong.
Frequently Asked Questions
How long is the AWS Solutions Architect Associate certification valid?
AWS certifications are valid for three years from the date you pass, after which you need to recertify — either by retaking the current version of the exam or, in some cases, through AWS's recertification pathways. Always confirm current recertification policy on AWS's official certification portal, since it has changed over the years.
Do I need to know how to code to pass?
No. This is an architecture exam, not a developer exam. You don't need to write code, though basic familiarity with how applications are typically structured (web tier, application tier, database tier) helps you reason about the scenarios faster.
Can I take the exam remotely?
Yes, AWS offers online proctored exams through Pearson VUE in addition to in-person testing centers, subject to the same identity verification and environment requirements as any other remote-proctored exam.
What should I do after passing?
Most candidates either move toward the AWS Certified Solutions Architect – Professional for deeper architectural scope, or branch sideways into a specialty certification (Security, Networking, Machine Learning) aligned with the direction they want their career to take. Compare next-step options on our AWS certification comparison page.
Hands-On Labs Worth Doing, By Domain
Reading about a service and actually configuring it produce very different levels of exam readiness. Here's a concrete lab per domain that consistently maps back to real exam scenarios:
- Security domain: Create a cross-account IAM role that lets Account B assume a role in Account A with a scoped policy — this single exercise touches trust policies, permission boundaries, and the assume-role pattern that shows up repeatedly in security-domain questions.
- Resilience domain: Stand up an Auto Scaling group across two Availability Zones behind an Application Load Balancer, then manually terminate an instance and watch the group self-heal. This makes multi-AZ failover concrete instead of theoretical.
- Performance domain: Put CloudFront in front of an S3 static site, then compare load times with and without it from a location geographically far from your S3 region — the performance difference makes CDN questions intuitive rather than memorized.
- Cost domain: Configure an S3 lifecycle rule that transitions objects from Standard to Standard-IA at 30 days and Glacier at 90 days, then use AWS Cost Explorer to project the savings. Seeing the actual dollar impact makes cost-domain scenario questions far easier to reason through.
A Cost-Optimization Walkthrough
One of the most commonly misunderstood exam topics is when Reserved Instances or Savings Plans actually make sense versus On-Demand or Spot pricing. A simplified way to think about it: On-Demand suits unpredictable, short-lived workloads where you can't commit to usage; Reserved Instances and Savings Plans suit steady-state workloads you know will run continuously for a year or three (with a meaningful discount, often 30-60% off On-Demand, in exchange for that commitment); Spot Instances suit fault-tolerant, interruptible workloads like batch processing or CI/CD runners, where the discount can exceed 70% but AWS can reclaim the capacity with short notice. Exam scenarios almost always give you a clue about workload predictability and fault tolerance — that's the signal that tells you which pricing model the "correct" answer wants.
How Long Prep Actually Takes, By Starting Point
Generic advice like "6-8 weeks" ignores that candidates start from very different places. A more honest breakdown:
- Career changer with no cloud background: Realistically 10-14 weeks, front-loaded with foundational networking and Linux basics before AWS-specific content makes sense.
- On-prem sysadmin or network engineer: 6-8 weeks — your networking and security instincts transfer directly, but AWS's specific service names and managed-service trade-offs still need dedicated study.
- Working developer with some AWS exposure (deployed an app, used S3/EC2 casually): 4-6 weeks, mostly filling gaps in services you haven't touched yet — VPC internals, IAM policy structure, and the storage/database comparison questions tend to be the weak spots even for people who use AWS daily.
Using the AWS Free Tier Without Blowing Your Study Budget
AWS's free tier covers most of what you need for hands-on practice — 750 hours/month of a t2.micro or t3.micro EC2 instance, 5GB of S3 storage, and a free-tier-eligible RDS instance, all for 12 months on a new account. The practical risk isn't the free tier itself; it's forgetting to tear down resources like NAT Gateways (which are not free-tier eligible and bill hourly regardless of usage) or leaving a load balancer running after a lab session. Setting a billing alarm at $5 in AWS Budgets on day one is a small step that prevents an unpleasant surprise mid-study.
AWS SAA vs. the Azure and Google Cloud Equivalents
If you're choosing a cloud platform rather than committed to AWS already, it's worth knowing how the associate-level architecture certifications compare. Microsoft's closest equivalent is Azure Administrator Associate (AZ-104), though it's arguably narrower and more operations-focused than architecture-focused compared to SAA-C03. Google Cloud's closest equivalent, Professional Cloud Architect, is actually pitched at a higher difficulty level than AWS SAA — closer to AWS's Professional-tier exam than its Associate tier. In practice, AWS's market share advantage means SAA tends to have the broadest job-posting recognition of the three, but if your target employer or industry already standardizes on Azure or GCP, matching the certification to that platform matters more than chasing the "most recognized" credential in the abstract.
A Worked Example: How to Read a Scenario Question
Here's the kind of reasoning the exam actually rewards, walked through explicitly. Imagine a scenario describing a company running a batch image-processing job that takes 6 hours, can tolerate interruption and resumption, and needs to minimize cost above all else — with four answer options offering On-Demand, Reserved Instances, Spot Instances, and Dedicated Hosts.
The keywords doing the work here are "can tolerate interruption" and "minimize cost." Dedicated Hosts solve compliance/licensing problems, not cost problems — eliminated. Reserved Instances assume steady-state, continuous usage over a 1-3 year term — this is a batch job, not continuous, so the commitment doesn't fit — eliminated. On-Demand technically works but doesn't minimize cost given interruption tolerance is explicitly available to exploit. That leaves Spot Instances as the answer: interruption tolerance is precisely the condition that unlocks Spot's steep discount, and the question told you that condition applies. This is the pattern worth internalizing — SAA-C03 scenario questions almost always contain one or two specific words that eliminate half the options immediately, and the "right" answer is usually the option that best matches the specific constraint mentioned, not the generically best-practice option.
If You Don't Pass the First Time
AWS's retake policy requires a 14-day wait before your second attempt, and you pay full price again — there's no discounted retake fee. After a second failure, the wait extends to 14 days again, but after a third failure within a 12-month rolling window, the wait becomes 180 days. This is worth internalizing before you register: rushing into an exam attempt "just to see the real thing" is a genuinely expensive way to gather intel, both in dollars and in the mandatory wait before you can try again. If your practice exam scores are consistently below roughly 75-80%, it's usually cheaper in total time and money to delay your registration than to bank on a lucky pass.
Final Thoughts
The AWS Solutions Architect Associate certification rewards candidates who build things, not just candidates who watch things. If you spend your study hours actually standing up VPCs, load balancers, and multi-AZ databases in a free-tier account — and force yourself to explain, in scenario form, why you chose one service over a similar-looking alternative — the exam stops feeling like memorization and starts feeling like a test of judgment you've already developed. That's also, not coincidentally, exactly the judgment the certification is meant to signal to an employer in the first place.
Ready to plan your study path? Start with the full AWS SAA certification overview, follow the week-by-week roadmap, and check current salary benchmark data before you commit your study hours.