Career Roadmap
AWS Solutions Architect: Zero to Hero
This roadmap guides you from AWS fundamentals to professional solutions architecture on AWS. You will design secure, resilient, high-performing, and cost-optimized architectures at enterprise scale. SAA-C03 builds the broad AWS architectural foundation. SAP-C02 builds the organizational complexity, multi-account governance, and enterprise design judgment on top of it. Both exams validate against the AWS Well-Architected Framework. The roadmap reflects the current exam domain structures for both certifications. Use ExamOS practice quizzes to track progress at every stage.
Who is this roadmap for?
This roadmap is designed for Cloud Engineers and SysOps Administrators transitioning into architecture roles who already have operational AWS experience, as well as Solutions Architects working on other platforms who want to add AWS depth. Additionally, it is tailored for DevOps Engineers designing infrastructure pipelines, as well as Technical Project Managers overseeing cloud migrations who require architectural credential validation.
Skills You'll Develop
Deploy and manage AWS resources across compute, storage, networking, and databases with SAA-C03-level depth.
Design IAM, network security, encryption, and application security architectures with least-privilege principles.
Design high availability, fault tolerance, and disaster recovery patterns aligned to RTO/RPO requirements.
Select appropriate instance families, storage tiers, and purchasing options to meet performance and cost constraints.
Design AWS Organizations, SCPs, Control Tower, and landing zone architectures for enterprise-scale environments.
Apply the Well-Architected Framework to evaluate trade-offs and make defensible architectural decisions.
Target Roles in this Roadmap
- AWS Solutions Architect: Designs enterprise-grade AWS solutions across compute, storage, networking, and security
- Cloud Solutions Architect: Designs cloud-native architectures on AWS and hybrid environments
- Infrastructure Architect: Designs AWS infrastructure, landing zones, and migration strategies
- DevOps Architect: Designs CI/CD pipelines and infrastructure as code with AWS DevOps tools
- Security Architect (AWS Focus): Designs secure AWS architectures with SCS-C03 specialization
Typical Employer Categories
- Technology & Software Firms: SaaS platforms, cloud-native companies, enterprise software vendors on AWS
- Financial Services: Banking, fintech, payment processors, and trading platforms running on AWS
- Healthcare Organizations: Patient data platforms, HIPAA-compliant workloads on AWS
- Consulting & Professional Services: AWS architecture assessments, transformation engagements, cloud advisory
- Government & Public Sector: Federal agencies, defense contractors, public sector AWS migrations
- AWS Partners: AWS Managed Service Providers (MSPs), AWS Competency Partners, and system integrators
The Certification Path
Recommended Path
| Cert | When | Why |
|---|---|---|
| AWS SAA-C03 (Solutions Architect Associate) | Month 2-5 | Broad AWS architectural foundation. Builds service depth and architectural reasoning. |
| AWS SAP-C02 (Solutions Architect Professional) | Month 6-12 | Enterprise architecture credential. Validates organizational complexity, multi-account governance, and migration strategy. |
Optional Foundation
| Cert | When | Why |
|---|---|---|
| AWS CLF-C02 (Cloud Practitioner) | Month 1 | Optional warm-up. Only needed if you are completely new to AWS and cloud concepts. |
Specialization Path
| Cert | When | Why |
|---|---|---|
| AWS DOP-C02 (DevOps Engineer Professional) | Month 12-16 | DevOps depth for architects who own delivery pipelines and infrastructure as code. |
| AWS SCS-C03 (Security Specialty) | Month 12-16 | Security architecture depth for architects moving into security-focused roles. |
| AWS ANS-C01 (Advanced Networking Specialty) | Month 12-16 | Networking depth for architects designing complex hybrid and multi-region networks. |
Milestones: Junior → Mid → Senior
| Level | Milestone | When |
|---|---|---|
| Entry Level | SAA-C03 + broad AWS architectural knowledge | Month 5-6 |
| Practitioner Level | SAP-C02 + enterprise architecture proficiency | Month 10-12 |
| Specialist Level | SAP-C02 + follow-on specialization + enterprise architecture skills | Month 16+ |
Step 0 - Cloud and IT foundations
Build the technical foundation that every AWS architecture decision depends on. These fundamentals surface constantly in both SAA-C03 and SAP-C02 scenario questions.
~1 month~1 month
Step 0 - Cloud and IT foundations
Build the technical foundation that every AWS architecture decision depends on. These fundamentals surface constantly in both SAA-C03 and SAP-C02 scenario questions.
- Networking fundamentals: TCP/IP, IP addressing, subnets, CIDR notation, DNS, routing, load balancing, firewalls, NAT
- Compute concepts: virtual machines, containers, serverless, scaling patterns, stateless versus stateful applications
- Storage types: block storage, file storage, object storage, their characteristics and appropriate workload fit
- Database fundamentals: relational versus non-relational, ACID properties, eventual versus strong consistency, replication patterns
- Security principles: CIA triad, authentication, authorization, least privilege, defense in depth, shared responsibility
- Business continuity concepts: RTO, RPO, high availability, fault tolerance, disaster recovery patterns
- Architecture patterns: monolithic versus microservices, synchronous versus asynchronous, event-driven design, decoupling
Certifications
💡 RTO and RPO values appear as concrete numbers in SAP-C02 scenario questions and determine the correct architecture. Understanding what these numbers mean before studying AWS-specific services makes the more complex questions significantly more approachable.
💡 CLF-C02 (AWS Cloud Practitioner) is optional. If you are completely new to AWS, take it as a warm-up (2-3 weeks). If you already have any cloud or IT experience, skip it and go directly to SAA-C03.
🏁 Entry Level Checkpoint: You understand networking, compute, storage, and database fundamentals. You can explain RTO and RPO in business terms.
🛠 Project Ideas
- ▸Design a simple three-tier application architecture. Identify the RTO and RPO requirements you would set for each tier.
- ▸Compare Amazon RDS with DynamoDB for a retail application. Document the trade-offs for consistency, scalability, and cost.
Step 1 - AWS solutions architect associate (SAA-C03)
Build the broad AWS architectural foundation required to earn SAA-C03. The exam covers four domains - Secure Architectures (30%), Resilient Architectures (26%), High-Performing Architectures (24%), and Cost-Optimized Architectures (20%).
~4-6 months~4-6 months
Step 1 - AWS solutions architect associate (SAA-C03)
Build the broad AWS architectural foundation required to earn SAA-C03. The exam covers four domains - Secure Architectures (30%), Resilient Architectures (26%), High-Performing Architectures (24%), and Cost-Optimized Architectures (20%).
- Secure Architectures (30%): IAM policies, cross-account access, Cognito, KMS, Security Groups vs NACLs, WAF/Shield, VPC endpoints, encryption at rest, secure application patterns
- Resilient Architectures (26%): Multi-AZ, Auto Scaling, ELB (ALB/NLB/GWL), Route 53 routing policies, RDS Multi-AZ vs Read Replicas, Aurora, DynamoDB, disaster recovery patterns, S3 replication
- High-Performing Architectures (24%): EC2 instance families, purchasing options, Lambda, ECS/EKS/Fargate, S3 performance, EBS volume types, CloudFront, ElastiCache, Kinesis, Global Accelerator, API Gateway
- Cost-Optimized Architectures (20%): S3 lifecycle policies, right-sizing, Reserved Instances/Savings Plans, Spot Instances, data transfer costs, NAT Gateway vs NAT Instance, RDS cost optimization
Certifications
💡 Secure Architectures at 30% is the highest SAA-C03 domain. Candidates who allocate preparation time proportionally often find this domain disproportionately impacts their final score.
💡 RDS Multi-AZ versus Read Replicas is the most exploited concept in resilience scenarios. Multi-AZ is for high availability through automatic failover—the standby cannot serve reads. Read Replicas are for read scaling through asynchronous replication—they do not provide automatic failover.
💡 Cost optimization questions on SAA-C03 are often combined with other constraints. A scenario might require a cost-optimized solution that still meets a specific availability requirement.
🏁 Entry Level Checkpoint: You have passed SAA-C03. You can design secure, resilient, high-performing, and cost-optimized AWS architectures.
🛠 Project Ideas
- ▸Deploy a highly available web application with ALB, Auto Scaling, RDS Multi-AZ, and S3 static assets. Implement a disaster recovery plan with cross-region replication.
- ▸Design a multi-tier architecture with private subnets, NAT Gateway, bastion host, and Session Manager. Implement IAM least-privilege roles for each tier.
- ▸Compare different storage and compute options for a workload with specific performance and cost requirements. Document your selection and justification.
Step 2 - Architecture thinking and the Well-Architected Framework
Make the transition from Associate-level service knowledge to Professional-level organizational design judgment. The Well-Architected Framework is the lens through which both exams evaluate every design decision.
~1-2 months~1-2 months
Step 2 - Architecture thinking and the Well-Architected Framework
Make the transition from Associate-level service knowledge to Professional-level organizational design judgment. The Well-Architected Framework is the lens through which both exams evaluate every design decision.
- AWS Well-Architected Framework in depth: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability
- AWS Well-Architected Tool: workload review methodology, milestone tracking, improvement plans
- Design trade-offs: how reliability, performance, cost, and security requirements conflict and how architects prioritize them
- Architecture decision records: how to document design choices and their rationale
- Scenario reading technique: reading the entire scenario before looking at options, identifying the binding constraint first
- The difference between correct and optimal: Professional questions test whether you can identify the most defensible architecture, not just a working one
💡 The shift from Associate to Professional is a thinking shift, not just a knowledge gap. SAA-C03 tests whether you can identify the right service for a described workload. SAP-C02 tests whether you can design the right architecture for a described organization with competing priorities.
💡 SAP-C02 questions frequently describe constraints that rule out architecturally elegant solutions. Reading constraints carefully before evaluating options is the Professional-level skill the exam tests.
🏁 Practitioner Level Checkpoint 1: You can identify the binding constraint in a scenario and apply the Well-Architected Framework to evaluate design options.
🛠 Project Ideas
- ▸Take a real application you have deployed. Evaluate it against the six Well-Architected Framework pillars. Identify one improvement for each pillar.
- ▸Write an architecture decision record for a specific design choice. Include context, decision, and rationale.
Step 3 - AWS solutions architect professional (SAP-C02)
Design enterprise-grade AWS architectures across organizational complexity, new solutions, continuous improvement, and migration. SAP-C02 covers four domains - Design Solutions for Organizational Complexity (26%), Design for New Solutions (29%), Continuous Improvement for Existing Solutions (25%), and Accelerate Workload Migration and Modernization (20%).
~4-6 months~4-6 months
Step 3 - AWS solutions architect professional (SAP-C02)
Design enterprise-grade AWS architectures across organizational complexity, new solutions, continuous improvement, and migration. SAP-C02 covers four domains - Design Solutions for Organizational Complexity (26%), Design for New Solutions (29%), Continuous Improvement for Existing Solutions (25%), and Accelerate Workload Migration and Modernization (20%).
- Design Solutions for Organizational Complexity (26%): AWS Organizations, SCPs, Control Tower, landing zones, Transit Gateway, Direct Connect, multi-account security architecture, Config aggregators, cost allocation
- Design for New Solutions (29%): StackSets, Service Catalog, EKS multi-cluster, Graviton, Step Functions, EventBridge, PrivateLink, VPC Lattice, data lakes with Lake Formation, SageMaker, Macie, Detective, multi-region active-active
- Continuous Improvement for Existing Solutions (25%): Systems Manager, Compute Optimizer, Security Hub remediation, Performance Insights, Well-Architected Reviews, AWS FIS chaos engineering, X-Ray, Container Insights
- Accelerate Workload Migration and Modernization (20%): 7Rs migration strategies, Migration Hub, Application Discovery Service, MGN (Application Migration Service), DMS, SCT, DataSync, Snow family, VMware Cloud on AWS, App2Container
💡 Domain 1 (Organizational Complexity at 26%) is the domain that most clearly separates Associate from Professional preparation. You cannot pass SAP-C02 without genuine fluency in Organizations, SCPs, Control Tower, and multi-account design patterns.
💡 Design for New Solutions at 29% is the highest-weighted domain. It tests your ability to design against multiple simultaneous Well-Architected pillars. The correct answer satisfies all requirements—not just the most prominent one stated.
💡 Migration strategy selection is tested at the scenario level. The 7Rs are a framework, not a checklist. The correct strategy depends on timeline, risk tolerance, cost, and cloud-native optimization goals.
🏁 Practitioner Level Checkpoint 2: You have passed SAP-C02. You can design enterprise-grade AWS solutions across organizational complexity, new solutions, continuous improvement, and migration.
🛠 Project Ideas
- ▸Design a multi-account AWS organization with Control Tower, centralized logging, and security controls. Include SCPs that enforce encryption and prevent public S3 buckets.
- ▸Create a migration plan for moving an on-premises application to AWS. Include discovery, assessment, migration strategy, and cutover plan with the 7Rs framework.
- ▸Design a multi-region active-active architecture for a critical application. Define RTO/RPO, select appropriate services, and document failover and failback procedures.
Step 4 - Exam consolidation and follow-on paths
Consolidate SAP-C02 preparation through integrated scenario practice and identify follow-on credentials that extend your AWS architecture capability.
~1 month~1 month
Step 4 - Exam consolidation and follow-on paths
Consolidate SAP-C02 preparation through integrated scenario practice and identify follow-on credentials that extend your AWS architecture capability.
- Full-length timed practice: 75 questions, 180 minutes, exam conditions
- Domain-weighted gap analysis: identifying which of the four domains needs the most remaining preparation
- Scenario reading technique: reading the entire scenario before looking at options, identifying the binding constraint first
- Follow-on paths: DOP-C02 (DevOps Engineer Professional) for pipeline depth, SCS-C03 (Security Specialty) for security depth, ANS-C01 (Advanced Networking Specialty) for networking depth
Certifications
💡 Consistent performance above 80% on Legend mode across five consecutive ExamOS sessions is the clearest readiness signal for SAP-C02. Given the higher difficulty and time pressure, this threshold represents more genuine readiness than the same score on SAA-C03.
💡 The most common SAP-C02 failure pattern is knowing what services exist without being able to reason through which is correct for a described organizational scenario with multiple plausible alternatives.
💡 DOP-C02 (DevOps Engineer Professional) is the most natural immediate follow-on for architects who own delivery pipelines.
💡 SCS-C03 (Security Specialty) is the natural follow-on for architects moving into security-focused roles.
💡 ANS-C01 (Advanced Networking Specialty) is the natural follow-on for architects designing complex hybrid and multi-region networks.
🏁 Specialist Level Checkpoint: You have passed SAP-C02. You can design enterprise-grade AWS solutions at an architectural level.
Final Step - What this path actually builds
This roadmap moves you from AWS fundamentals to professional solutions architecture. SAA-C03 validates that you understand AWS services and can design secure, resilient, high-performing, and cost-optimized architectures. SAP-C02 validates that you can design enterprise-grade architectures across organizational complexity, new solutions, continuous improvement, and migration. The combination signals genuine depth—broad service knowledge plus enterprise design judgment—which is why the AWS Solutions Architect Professional is one of the most respected cloud credentials in the market. The certification opens senior architect, cloud consulting, and technical leadership opportunities. The architectural judgment you build preparing for it is what makes those roles sustainable. Before booking SAP-C02, ensure your SAA-C03 foundation is genuinely solid and your organizational complexity knowledge covers AWS Organizations, SCPs, and Control Tower in depth. Build real architectures. Measure your readiness with ExamOS. Book when your reasoning is sharp and your design decisions are defensible.
Final Step - What this path actually builds
This roadmap moves you from AWS fundamentals to professional solutions architecture. SAA-C03 validates that you understand AWS services and can design secure, resilient, high-performing, and cost-optimized architectures. SAP-C02 validates that you can design enterprise-grade architectures across organizational complexity, new solutions, continuous improvement, and migration. The combination signals genuine depth—broad service knowledge plus enterprise design judgment—which is why the AWS Solutions Architect Professional is one of the most respected cloud credentials in the market. The certification opens senior architect, cloud consulting, and technical leadership opportunities. The architectural judgment you build preparing for it is what makes those roles sustainable. Before booking SAP-C02, ensure your SAA-C03 foundation is genuinely solid and your organizational complexity knowledge covers AWS Organizations, SCPs, and Control Tower in depth. Build real architectures. Measure your readiness with ExamOS. Book when your reasoning is sharp and your design decisions are defensible.
Certifications
Final Thoughts
💡 Total: 8-14 months at 2 hours/day (6-10 months at 3-4 hours/day)
💡 CLF-C02: Adds 2-3 weeks for complete beginners (optional).
💡 SAA-C03: Typically takes 6-10 weeks for candidates with general IT experience.
💡 Architecture thinking transition: 4-6 weeks to shift from Associate to Professional mindset.
💡 SAP-C02: Typically takes 10-16 weeks of preparation after SAA-C03 is solid.
💡 **Domains 1 (26%) and 2 (29%) together represent 55% of SAP-C02—allocate proportionally more time.
💡 Readiness: Consistent 80%+ on Legend mode across five sessions is your signal to book.
Honest Timeline
| Path | Minimum Study Pace | More Realistic Pace |
|---|---|---|
| CLF-C02 only (optional) | ~2 weeks | ~1 month |
| SAA-C03 only | ~2 months | ~4 months |
| SAA-C03 + SAP-C02 | ~6 months | ~10 months |
| SAA-C03 + SAP-C02 + Specialization | ~8 months | ~14 months |