Career Roadmap
AWS Solutions Architect: Zero to Hero
This roadmap covers the complete path from AWS beginner to AWS Certified Solutions Architect Professional. SAA-C03 (Associate) builds the broad AWS architectural foundation. SAP-C02 (Professional) builds the organizational complexity, multi-account governance, and enterprise design judgment on top of it. Both exams validate against the AWS Well-Architected Framework. The roadmap reflects the current exam domain structures for both certifications. Use ExamOS practice quizzes at every step to make progress measurable before each exam attempt.
Embark on your career roadmap by setting a target and staying accountable
Set targetStep 0 - Cloud and IT foundations
Build the technical foundation that every AWS architecture decision depends on. These fundamentals surface constantly in both SAA-C03 and SAP-C02 scenario questions and in real architectural work.
2-3 weeks2-3 weeks
Step 0 - Cloud and IT foundations
Build the technical foundation that every AWS architecture decision depends on. These fundamentals surface constantly in both SAA-C03 and SAP-C02 scenario questions and in real architectural work.
- Networking fundamentals — TCP/IP, IP addressing, subnets, CIDR notation, DNS, routing, load balancing, firewalls, NAT
- Compute concepts — virtual machines, containers, serverless, scaling patterns, stateless versus stateful applications
- Storage types — block storage, file storage, object storage, their characteristics and appropriate workload fit
- Database fundamentals — relational versus non-relational, ACID properties, eventual versus strong consistency, replication patterns
- Security principles — CIA triad, authentication, authorization, least privilege, defense in depth, shared responsibility
- Business continuity concepts — RTO, RPO, high availability, fault tolerance, disaster recovery patterns
- Architecture patterns — monolithic versus microservices, synchronous versus asynchronous, event-driven design, decoupling
💡 RTO and RPO values appear as concrete numbers in SAP-C02 scenario questions and determine the correct architecture. Understanding what these numbers mean before studying AWS-specific services makes the more complex questions significantly more approachable.
💡 Candidates with existing IT or cloud experience can move through this step quickly. The important outcome is the ability to reason about architecture trade-offs before adding AWS-specific knowledge on top.
Step 1 - AWS fundamentals (CLF-C02)
Build familiarity with the AWS platform, service landscape, pricing models, and management tools before working with specific services in depth.
2-3 weeks2-3 weeks
Step 1 - AWS fundamentals (CLF-C02)
Build familiarity with the AWS platform, service landscape, pricing models, and management tools before working with specific services in depth.
- AWS global infrastructure — regions, availability zones, local zones, wavelength zones, edge locations
- AWS service categories — compute, storage, database, networking, security, AI/ML, analytics, DevOps
- AWS management interfaces — AWS Management Console, AWS CLI, AWS SDKs, CloudShell
- AWS pricing models — on-demand, reserved instances, savings plans, spot instances, free tier
- AWS shared responsibility model — AWS responsibility versus customer responsibility by service type
- AWS Well-Architected Framework introduction — six pillars (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability)
- AWS support plans and documentation resources
Certifications
💡 CLF-C02 (AWS Cloud Practitioner) is optional for candidates with existing cloud or IT backgrounds. It is valuable for candidates with no prior AWS exposure.
💡 The AWS Well-Architected Framework is the lens through which both SAA-C03 and SAP-C02 evaluate every design decision. The six pillars should feel like a natural evaluation framework by the time you sit either exam. Start building familiarity with them now.
💡 Use ExamOS quizzes to confirm AWS foundational understanding before beginning SAA-C03 preparation.
💡 If you skip CLF-C02, spend time with the Well-Architected Framework documentation directly. Its principles are non-negotiable for both exams.
Step 2 - SAA-C03 Domain 1 — Secure Architectures (30%)
Design secure access controls, application tiers, and data protection mechanisms on AWS. Security is the highest-weighted SAA-C03 domain at 30% and the area most candidates underweight in preparation.
4-5 weeks4-5 weeks
Step 2 - SAA-C03 Domain 1 — Secure Architectures (30%)
Design secure access controls, application tiers, and data protection mechanisms on AWS. Security is the highest-weighted SAA-C03 domain at 30% and the area most candidates underweight in preparation.
- IAM fundamentals — users, groups, roles, policies, trust policies, permission boundaries
- IAM policy evaluation logic — identity-based policies, resource-based policies, SCPs, and how they combine
- Cross-account access patterns — role assumption, resource-based policies, and when each is appropriate
- AWS Organizations and Service Control Policies (SCPs) at an associate level — what SCPs do and what they cannot do
- Amazon Cognito — User Pools versus Identity Pools, the combined authentication and authorization flow
- AWS Secrets Manager versus Parameter Store — rotation, cost, and when to choose each
- KMS and envelope encryption — how data keys work, what KMS does and does not store
- Network security controls — Security Groups (stateful) versus NACLs (stateless), when each is the right control
- AWS WAF, AWS Shield, and AWS Firewall Manager — which attack types each addresses
- VPC endpoint types — Gateway endpoints (S3, DynamoDB) versus Interface endpoints (most other services)
- Encryption at rest — SSE-S3, SSE-KMS, SSE-C and when each is appropriate
- Secure application patterns — private subnets, NAT Gateways, bastion hosts, Session Manager as an alternative
Certifications
💡 Secure Architectures at 30% is the highest SAA-C03 domain. Candidates who allocate preparation time proportionally often find this domain disproportionately impacts their final score — both positively when well-prepared and negatively when not.
💡 The distinction between identity-based and resource-based IAM policies is heavily tested. Cross-account access scenarios specifically test whether candidates understand that both sides of the trust relationship need to be configured correctly.
💡 Cognito User Pools versus Identity Pools is one of the most consistently confused concepts. User Pools handle authentication. Identity Pools vend temporary AWS credentials for direct resource access. Both are often needed together.
💡 Use ExamOS daily security scenario practice. Security questions on SAA-C03 are specifically designed to test whether you know which control belongs in which scenario, not just that the controls exist.
Step 3 - SAA-C03 Domain 2 — Resilient Architectures (26%)
Design highly available, fault-tolerant, and disaster-recoverable architectures across AWS services. The second highest-weighted domain at 26%.
3-4 weeks3-4 weeks
Step 3 - SAA-C03 Domain 2 — Resilient Architectures (26%)
Design highly available, fault-tolerant, and disaster-recoverable architectures across AWS services. The second highest-weighted domain at 26%.
- High availability patterns — Multi-AZ deployment for RDS, ElastiCache, and other services
- Auto Scaling — EC2 Auto Scaling groups, target tracking policies, scheduled scaling, predictive scaling
- Elastic Load Balancing — Application Load Balancer (Layer 7) versus Network Load Balancer (Layer 4) versus Gateway Load Balancer, target groups, health checks
- Amazon Route 53 — routing policies (Simple, Weighted, Latency, Failover, Geolocation, Geoproximity, Multi-value), health checks, private hosted zones
- RDS Multi-AZ versus Read Replicas — high availability versus read scaling, the critical distinction SAA-C03 exploits
- Aurora — storage architecture, Aurora Replicas, Aurora Serverless v2, Global Database for multi-region
- DynamoDB — partition key design, Global Tables for multi-region, DynamoDB Streams, on-demand versus provisioned capacity
- Disaster recovery patterns — backup and restore, pilot light, warm standby, multi-site active-active and their RTO/RPO profiles
- S3 — cross-region replication, versioning, MFA delete, object lock for compliance
- SQS and SNS — queue types (Standard versus FIFO), fan-out patterns, dead-letter queues, visibility timeout behavior
Certifications
💡 RDS Multi-AZ versus Read Replicas is the most exploited concept in resilience scenarios. Multi-AZ is for high availability through automatic failover — the standby cannot serve reads. Read Replicas are for read scaling through asynchronous replication — they do not provide automatic failover. Getting these confused costs multiple marks.
💡 DynamoDB Global Tables are tested in multi-region scenarios requiring low-latency reads and writes in multiple regions. Know how they differ from single-region DynamoDB with cross-region replication.
💡 SQS visibility timeout behavior specifically appears in developer-oriented scenarios on SAA-C03. A message that is not deleted within the visibility timeout becomes visible again and can be processed by another consumer — this is at-least-once delivery, not exactly-once.
💡 Use ExamOS for resilience scenario practice that tests RTO/RPO mapping and service selection for described availability requirements.
Step 4 - SAA-C03 Domain 3 — High-Performing Architectures (24%)
Select and design AWS services that meet performance requirements for compute, storage, database, and networking workloads.
3-4 weeks3-4 weeks
Step 4 - SAA-C03 Domain 3 — High-Performing Architectures (24%)
Select and design AWS services that meet performance requirements for compute, storage, database, and networking workloads.
- EC2 instance families — compute optimized, memory optimized, storage optimized, GPU instances and when each fits
- EC2 purchasing options — On-Demand, Reserved (Standard versus Convertible), Savings Plans, Spot, Dedicated Hosts versus Dedicated Instances
- Lambda — concurrency (reserved versus provisioned), cold starts, execution limits, Lambda@Edge versus CloudFront Functions
- ECS versus EKS versus Fargate — when to use each and the trade-offs between managed and self-managed container orchestration
- S3 performance — multipart upload, Transfer Acceleration, S3 Select, intelligent tiering
- EBS volume types — gp3, io2 Block Express, st1, sc1 and their IOPS and throughput characteristics
- EFS versus FSx — EFS for Linux workloads, FSx for Windows (SMB), FSx for Lustre (HPC), FSx for ONTAP
- CloudFront — cache behaviors, origin groups, origin failover, Lambda@Edge, CloudFront Functions
- Amazon ElastiCache — Redis versus Memcached, use cases (session caching, database caching, leaderboards)
- Amazon Kinesis — Data Streams versus Firehose (Delivery Streams) versus Data Analytics
- AWS Global Accelerator versus CloudFront — network-layer acceleration versus content delivery
- API Gateway — REST versus HTTP versus WebSocket APIs, caching, throttling, usage plans
Certifications
💡 EC2 purchasing option scenarios test whether you can identify the correct cost model for a described workload pattern. Steady-state predictable workloads point to Reserved or Savings Plans. Interruptible batch workloads point to Spot. Short-term unpredictable workloads point to On-Demand.
💡 Kinesis Data Streams versus Firehose is consistently confused. Streams is for real-time processing where you control the consumer. Firehose is for managed delivery to destinations (S3, Redshift, OpenSearch) without custom consumer code.
💡 CloudFront versus Global Accelerator is a distinction the exam exploits. CloudFront is for content delivery with caching. Global Accelerator is for non-HTTP workloads or latency-sensitive applications that need consistent network performance without caching.
💡 Use ExamOS for performance scenario practice that tests service selection based on described workload characteristics and performance requirements.
Step 5 - SAA-C03 Domain 4 — Cost-Optimized Architectures (20%)
Design architectures that deliver required functionality at the lowest cost. The smallest SAA-C03 domain at 20% but one that appears across every other domain as a secondary constraint.
2-3 weeks2-3 weeks
Step 5 - SAA-C03 Domain 4 — Cost-Optimized Architectures (20%)
Design architectures that deliver required functionality at the lowest cost. The smallest SAA-C03 domain at 20% but one that appears across every other domain as a secondary constraint.
- Storage cost optimization — S3 Intelligent-Tiering, lifecycle policies, storage class selection by access pattern
- Compute cost optimization — right-sizing, Reserved Instance and Savings Plan strategies, Spot Instance patterns for fault-tolerant workloads
- AWS Cost Explorer, AWS Budgets, and Cost Allocation Tags — understanding spend and implementing chargeback
- Serverless cost models — when Lambda's consumption pricing is cheaper than EC2 and when it isn't
- Data transfer costs — understanding which transfers are free, which incur costs, and how architecture choices affect data transfer bills
- NAT Gateway versus NAT Instance cost trade-offs at different traffic volumes
- RDS cost optimization — Reserved Instances for RDS, right-sizing, stopping development databases
- CloudFront cost optimization — reducing origin requests, cache hit ratio optimization
Certifications
💡 Cost optimization questions on SAA-C03 are often combined with other constraints. A scenario might require a cost-optimized solution that still meets a specific availability requirement. The correct answer satisfies both the cost constraint and the functional requirement, not just one of them.
💡 S3 storage class selection questions require matching the described access pattern to the correct tier. Know the retrieval times and costs for Glacier Instant Retrieval, Glacier Flexible Retrieval, and Glacier Deep Archive — they appear in scenarios where retrieval time is a stated constraint.
💡 Use ExamOS for cost optimization practice that presents scenarios where cost is the primary constraint alongside functional requirements.
Step 6 - AWS Well-Architected Framework deep dive and SAA-C03 exam readiness
Consolidate SAA-C03 preparation through the Well-Architected Framework lens, integrated scenario practice, and targeted gap closure before the Associate exam.
2-3 weeks2-3 weeks
Step 6 - AWS Well-Architected Framework deep dive and SAA-C03 exam readiness
Consolidate SAA-C03 preparation through the Well-Architected Framework lens, integrated scenario practice, and targeted gap closure before the Associate exam.
- AWS Well-Architected Framework in depth — all six pillars, the design principles within each, and how they interact in trade-off scenarios
- AWS Well-Architected Tool — workload review methodology, milestone tracking, improvement plans
- VPC peering versus Transit Gateway — scale is the deciding factor, non-transitivity of VPC peering
- AWS networking advanced topics — VPC sharing, PrivateLink, Direct Connect versus Site-to-Site VPN
- Service selection trade-off practice — for each service pair the exam exploits, articulating when each is correct
- Timed full-length scenario practice — 65 questions, 130 minutes, no interruptions
Certifications
💡 SAA-C03 passing score is 720/1000. 65 questions, 130 minutes, approximately $150 USD. No prerequisites required. One year hands-on experience recommended.
💡 Consistent performance above 80% on Legend mode across five or more consecutive ExamOS sessions is the clearest SAA-C03 readiness signal. Stable scores across varied question sets matter more than a single strong performance.
💡 VPC peering non-transitivity is the most exploited networking concept. Internalize it completely. Any scenario describing connectivity between three or more VPCs where traffic should flow indirectly is testing this.
Step 7 - The Associate-to-Professional mindset shift
Make the explicit transition from Associate-level service knowledge to Professional-level organizational design judgment. This step has no dedicated certification but is the single most important preparation for SAP-C02.
2-3 weeks2-3 weeks
Step 7 - The Associate-to-Professional mindset shift
Make the explicit transition from Associate-level service knowledge to Professional-level organizational design judgment. This step has no dedicated certification but is the single most important preparation for SAP-C02.
- What changes at the Professional level — longer scenarios, organizational context, competing constraints, no clean answers
- AWS Organizations in depth — organization units, SCPs, consolidated billing, delegated administrator accounts
- Multi-account strategy design — account vending, AWS Control Tower, landing zone design for enterprises
- The difference between correct and optimal — Professional questions test whether you can identify the most defensible architecture, not just a working one
- Well-Architected Framework at organizational scale — applying the six pillars across multiple accounts, teams, and workloads simultaneously
- How SAP-C02 scenario language works — "most operationally efficient," "least operational overhead," "most cost-effective solution that meets all requirements"
💡 The shift from Associate to Professional is a thinking shift, not just a knowledge gap. SAA-C03 tests whether you can identify the right service for a described workload. SAP-C02 tests whether you can design the right architecture for a described organization with competing priorities, constraints, and existing infrastructure.
💡 AWS Organizations and multi-account architecture is where most Associate-level candidates have the weakest preparation. You cannot pass SAP-C02 without genuine fluency in Organizations, SCPs, Control Tower, and multi-account design patterns.
💡 SAP-C02 questions frequently describe constraints that rule out architecturally elegant solutions. "The solution must minimize code changes" rules out a refactoring recommendation. "The company has a 2-week timeline" rules out solutions requiring significant infrastructure rebuilds. Reading constraints carefully before evaluating options is the Professional-level skill the exam tests.
Step 8 - SAP-C02 Domain 1 — Design Solutions for Organizational Complexity (26%)
Design network connectivity, security controls, reliable architectures, multi-account environments, and cost visibility strategies for large, complex organizations.
4-5 weeks4-5 weeks
Step 8 - SAP-C02 Domain 1 — Design Solutions for Organizational Complexity (26%)
Design network connectivity, security controls, reliable architectures, multi-account environments, and cost visibility strategies for large, complex organizations.
- Multi-account network architecture — AWS Transit Gateway at scale, network segmentation across accounts, centralized egress and inspection
- Hybrid connectivity design — Direct Connect redundancy patterns, Direct Connect Gateway, Site-to-Site VPN as backup
- Complex Route 53 scenarios — split-horizon DNS, Resolver endpoints for hybrid DNS, private hosted zones across accounts
- Multi-account security architecture — Security Hub aggregation, GuardDuty Organizations, centralized CloudTrail
- SCPs design — preventive controls that apply regardless of IAM permissions, SCP inheritance, and testing
- AWS Control Tower — landing zone design, guardrails (preventive versus detective), account factory, customizations
- AWS Config at scale — aggregators, conformance packs, multi-account multi-region deployment
- Cost allocation at organizational scale — cost allocation tags, AWS Cost Explorer organizational views, chargeback models
- AWS License Manager — bring-your-own-license scenarios, license tracking at scale
💡 Domain 1 at 26% is the domain that most clearly separates Associate from Professional preparation. The scenarios describe enterprise organizations with dozens of accounts, complex network topologies, and governance requirements that span organizational units. Associate-level knowledge of individual services is necessary but not sufficient here.
💡 SCPs are tested at a design level that goes beyond knowing what they are. Know what SCPs can and cannot block (they cannot block the root user, they cannot grant permissions, they evaluate before IAM policies), and how to design SCP hierarchies that enforce consistent controls across an organization without breaking individual account workflows.
💡 Control Tower landing zone design scenarios test whether you understand the account structure (management account, log archive account, audit account) and why it is designed that way.
💡 Use ExamOS for organizational complexity scenario practice that tests multi-account design decisions and SCP interaction with IAM policies.
Step 9 - SAP-C02 Domain 2 — Design for New Solutions (29%)
Design new AWS architectures from scratch that optimize for security, reliability, performance, and cost simultaneously. The highest-weighted SAP-C02 domain at 29%.
4-5 weeks4-5 weeks
Step 9 - SAP-C02 Domain 2 — Design for New Solutions (29%)
Design new AWS architectures from scratch that optimize for security, reliability, performance, and cost simultaneously. The highest-weighted SAP-C02 domain at 29%.
- Deployment strategy design — CloudFormation StackSets across accounts, Service Catalog for self-service provisioning
- Advanced compute design — EKS multi-cluster strategies, Fargate versus EC2 node groups, Graviton instance selection
- Serverless architecture patterns — Step Functions for complex workflows, EventBridge for event-driven decoupling, Lambda power tuning
- Advanced networking — AWS PrivateLink for service sharing, VPC Lattice for service-to-service communication
- Data architecture design — data lake on S3 with Lake Formation governance, Redshift for analytics, EMR for processing
- Machine learning infrastructure — SageMaker architecture patterns, model deployment strategies
- Advanced security design — Macie for data discovery, Security Hub for aggregated findings, Detective for investigation
- IoT and edge architectures — Greengrass, IoT Core for device connectivity, edge computing patterns
- Multi-region active-active design — DynamoDB Global Tables, Aurora Global Database, Route 53 latency routing combined
💡 Design for New Solutions at 29% tests your ability to design against multiple simultaneous Well-Architected pillars. A scenario might require an architecture that is simultaneously cost-optimized, highly available, and minimizes operational overhead. The correct answer satisfies all three — not just the most prominent one stated.
💡 AWS Lake Formation and data governance scenarios have increased in recent SAP-C02 exam reports. Know how Lake Formation permissions work alongside S3 and Glue permissions and what the administrative benefits are.
💡 Step Functions orchestration versus EventBridge event-driven patterns is tested at a design level. Know when a workflow benefit from centralized orchestration (Step Functions) versus decentralized choreography (EventBridge) and what the operational trade-offs are.
💡 Use ExamOS for new solution design scenario practice that presents multi-constraint requirements and tests whether you can select the architecture that satisfies all of them.
Step 10 - SAP-C02 Domain 3 — Continuous Improvement for Existing Solutions (25%)
Improve operational excellence, security posture, performance, and cost efficiency in existing AWS environments. The brownfield architecture domain at 25%.
3-4 weeks3-4 weeks
Step 10 - SAP-C02 Domain 3 — Continuous Improvement for Existing Solutions (25%)
Improve operational excellence, security posture, performance, and cost efficiency in existing AWS environments. The brownfield architecture domain at 25%.
- Operational improvement — AWS Systems Manager at scale, OpsCenter for operational issues, Automation runbooks
- Cost improvement — Compute Optimizer recommendations, right-sizing campaigns, Reserved Instance portfolio management
- Security improvement — findings from Security Hub, GuardDuty remediation patterns, automated response with EventBridge
- Performance improvement — CloudFront cache optimization, database query optimization with Performance Insights
- Architecture modernization — refactoring monoliths to microservices, strangler fig pattern implementation on AWS
- Well-Architected Review — conducting reviews, prioritizing improvements, documenting decisions
- Chaos engineering — AWS Fault Injection Simulator experiment design, steady-state hypothesis definition
- Observability improvement — X-Ray distributed tracing at scale, CloudWatch Container Insights, Synthetics canaries
💡 Continuous improvement scenarios describe existing architectures with specific problems and ask for the most operationally efficient solution. "Most operationally efficient" on SAP-C02 usually means the solution that requires the least ongoing human intervention — automated solutions consistently score over manual ones.
💡 AWS Compute Optimizer appears in right-sizing scenarios. Know what data it analyzes and what recommendations it produces for EC2, Lambda, EBS, ECS, and Auto Scaling groups.
💡 Chaos engineering with AWS FIS is tested at a design level — know what a steady-state hypothesis is, how to define success criteria, and what stop conditions prevent uncontrolled failures.
💡 Use ExamOS for continuous improvement scenario practice that tests recognizing improvement opportunities in described architectures and selecting the most operationally efficient remediation.
Step 11 - SAP-C02 Domain 4 — Accelerate Workload Migration and Modernization (20%)
Design migration strategies and modernization approaches for moving workloads to AWS at enterprise scale. The smallest SAP-C02 domain at 20% but one with specific tooling knowledge requirements.
3-4 weeks3-4 weeks
Step 11 - SAP-C02 Domain 4 — Accelerate Workload Migration and Modernization (20%)
Design migration strategies and modernization approaches for moving workloads to AWS at enterprise scale. The smallest SAP-C02 domain at 20% but one with specific tooling knowledge requirements.
- Migration strategy framework — the 7Rs (Retire, Retain, Rehost, Relocate, Replatform, Repurchase, Refactor) and when each is appropriate
- AWS Migration Hub — centralized migration tracking, integration with discovery and migration tools
- AWS Application Discovery Service — agentless versus agent-based discovery, dependency mapping
- AWS Server Migration Service versus AWS Application Migration Service — know that MGN (Application Migration Service) is the current recommended tool
- AWS Database Migration Service — homogeneous versus heterogeneous migrations, continuous replication
- AWS Schema Conversion Tool — when schema conversion is required, what it handles automatically
- Large-scale data transfer — AWS DataSync for network transfer, AWS Snow family for offline transfer, Snow device selection by data volume
- VMware Cloud on AWS — use cases, when it is the right migration approach
- Container modernization — migrating from VMs to containers, App2Container for lifting and shifting into ECS or EKS
- Mainframe modernization — AWS Mainframe Modernization service patterns
💡 SAP-C02 passing score is 750/1000. 75 questions, 180 minutes, $300 USD. No formal prerequisites — AWS recommends SAA-C03 plus 2+ years of hands-on experience. Valid for 3 years.
💡 Migration strategy selection is tested at the scenario level. The 7Rs are a framework, not a checklist. The correct strategy for a described workload depends on timeline constraints, risk tolerance, cost, and how much the organization wants to optimize for cloud-native benefits.
💡 AWS Snow family device selection — Snowcone (small), Snowball Edge (medium), Snowmobile (petabyte scale) — appears in scenarios where network bandwidth makes online transfer impractical. Know the approximate thresholds where each makes sense.
💡 Use ExamOS for migration scenario practice that tests strategy selection under described organizational constraints and timeline requirements.
Step 12 - SAP-C02 exam readiness and follow-on paths
Consolidate SAP-C02 preparation, build exam-condition readiness, and plan the specialization path that follows the Professional certification.
2-3 weeks2-3 weeks
Step 12 - SAP-C02 exam readiness and follow-on paths
Consolidate SAP-C02 preparation, build exam-condition readiness, and plan the specialization path that follows the Professional certification.
- Full-length timed practice — 75 questions, 180 minutes, exam conditions
- Domain-weighted gap analysis — identifying which of the four domains needs the most remaining preparation
- Scenario reading technique — reading the entire scenario before looking at options, identifying the binding constraint first
- Follow-on specialization paths — AWS DevOps Engineer Professional, AWS Security Specialty, AWS Advanced Networking Specialty, AWS Machine Learning Specialty
💡 SAP-C02 scenario questions are substantially longer than SAA-C03. Some scenarios run 150-200 words before the question. Practicing reading efficiency — identifying constraints and requirements quickly without re-reading — is a specific skill worth building before exam day.
💡 Consistent performance above 80% on Legend mode across five or more ExamOS sessions is the clearest SAP-C02 readiness signal. Given the higher difficulty and time pressure of SAP-C02, this threshold represents more genuine readiness than the same score on SAA-C03.
💡 After SAP-C02, the highest-leverage follow-on specializations are AWS Security Specialty (SCS-C02) for security-focused architects, AWS Advanced Networking Specialty (ANS-C01) for networking-focused architects, and AWS DevOps Engineer Professional (DOP-C02) for architects who also own delivery pipelines.
Final step - Certification, validation, and what the credential actually means
The AWS Solutions Architect Professional is one of the most respected cloud credentials in the market. It requires genuine breadth and depth across AWS services, organizational design patterns, migration strategy, and enterprise governance — not just service knowledge. Before booking SAA-C03, ensure stable performance above 80% on timed scenario practice across multiple sessions. Before booking SAP-C02, ensure your SAA-C03 foundation is genuinely solid and your organizational complexity knowledge covers AWS Organizations, SCPs, and Control Tower in depth. Use ExamOS practice across both exams to track progress objectively. The credential opens senior architect, cloud consulting, and technical leadership opportunities. The architectural judgment you build preparing for it is what makes those roles sustainable.
Final step - Certification, validation, and what the credential actually means
The AWS Solutions Architect Professional is one of the most respected cloud credentials in the market. It requires genuine breadth and depth across AWS services, organizational design patterns, migration strategy, and enterprise governance — not just service knowledge. Before booking SAA-C03, ensure stable performance above 80% on timed scenario practice across multiple sessions. Before booking SAP-C02, ensure your SAA-C03 foundation is genuinely solid and your organizational complexity knowledge covers AWS Organizations, SCPs, and Control Tower in depth. Use ExamOS practice across both exams to track progress objectively. The credential opens senior architect, cloud consulting, and technical leadership opportunities. The architectural judgment you build preparing for it is what makes those roles sustainable.
Certifications
Realistic timeline
- 2 hours per day: approximately 8-12 months for the complete path including both SAA-C03 and SAP-C02
- 3-4 hours per day: approximately 5-7 months
- Candidates who already hold SAA-C03: approximately 3-5 months to SAP-C02 readiness depending on hands-on experience
- SAA-C03 alone typically requires 6-10 weeks for candidates with general IT experience
- SAP-C02 typically requires 10-20 weeks after SAA-C03 depending on depth of organizational and multi-account experience
- Steps 8-9 (Domains 1 and 2) together represent 55% of SAP-C02 — allocate proportionally more preparation time here
- Hands-on AWS experience building real architectures across multiple services compounds throughout both exams and cannot be substituted by study alone
- Daily consistent scenario practice produces better outcomes than periodic marathon sessions for both exams
Embark on your career roadmap by setting a target and staying accountable
Set target