SAA-C03 is AWS's flagship associate certification. It is a design exam: most questions describe a scenario and ask you to choose the most resilient, secure, performant, or cost-effective solution. Recognising service names is not enough; you must justify the trade-off.
The four domains
- Design secure architectures (IAM, encryption, network isolation, least privilege).
- Design resilient architectures (multi-AZ, decoupling, redundancy, disaster recovery).
- Design high-performing architectures (caching, scaling, storage selection, edge delivery).
- Design cost-optimised architectures (pricing models, right-sizing, storage tiers).
The AWS Well-Architected lens
The exam consistently rewards answers that apply the Well-Architected pillars. When two options both work, pick the one that is more resilient or more decoupled, then check whether it is also reasonable on cost.
Signal words to watch
Words like "most cost-effective", "least operational overhead", "highly available", and "decouple" tell you what to optimise for. Read the full question before looking at the answers; the constraint is usually stated in the last sentence.
Build a mental map of services
Group services by job: compute (EC2, Lambda, ECS), storage (S3, EBS, EFS), databases (RDS, Aurora, DynamoDB), networking (VPC, Route 53, CloudFront), and integration (SQS, SNS, EventBridge). Know when to reach for each.
Suggested six-week plan
- Weeks 1-2: Core services and the shared responsibility model.
- Week 3: Networking and security architecture.
- Week 4: Resilience patterns and decoupling.
- Week 5: Performance and cost optimisation.
- Week 6: Timed practice exams and a review log of every missed question.
