examOS.
Exam CatalogueStudy PlansRoadmapsBlogs
Login

ExamOS

Credits PolicyReferral PolicyQuality StandardsPricingPrivacy PolicyTerms of UseContact UsReport a Bug

Follow us

Disclaimer: ExamOS is an independent platform, not affiliated with any certification provider, and does not use or distribute exam dumps.

Share your feedback

Checking sign-in status...

examOS.Study Plan
Disclaimer: ExamOS is an independent platform, not affiliated with any certification provider, and does not use or distribute exam dumps.
← Back to Exam Details

Study Plan

AWS Solutions Architect Associate (SAA-C03) – Study Plan

A condensed 8-week plan for SAA-C03. Design secure, resilient, high-performing, and cost-optimized architectures on AWS.

AWSSAA-C03Passing score: 720 / 1000Cloud architects and engineers with 1+ year hands-on AWS experience, familiar with core AWS services and the Well-Architected Framework18-Jul-202678 views
Start date: _______________Target exam date: _______________
8 WeeksDuration
~50 hrsTotal Study Time
4 DomainsExam Coverage

Stay consistent by setting a target date for this certification.

Set target

How to use this plan

  1. 1Read and build. Start the week with AWS documentation and hands-on labs in a Free Tier account. The exam tests practical knowledge, so hands-on time matters.
  2. 2Build your judgment. For every AWS service you work with, ask: what problem does this solve, when is it the wrong choice, and what changes in the scenario would change my answer?
  3. 3Practice with ExamOS. Use the quiz modes in the order specified in this Study Plan.
  4. 4Learn the elimination trick. Many SAA-C03 questions give you four plausible options, but two are clearly wrong and two are close. Train yourself to spot the specific constraint in the question that makes one of the two remaining options better than the other.
Rookie ModeChallenger ModeLegend Mode

Week-by-Week Breakdown


W1

Week 1

Foundation and Self-Assessment

This week is about mapping your current knowledge against the four exam domains, getting comfortable with AWS global infrastructure, and reviewing the Well-Architected Framework. You are not expected to master anything yet. You are building a baseline.

Topics

  • AWS global infrastructure and Regions
  • Shared Responsibility Model
  • IAM: users, groups, roles, policies
  • Well-Architected Framework overview
  • AWS management interfaces

Activities

  • Read the official SAA-C03 exam guide end to end and identify weak domains.
W2

Week 2

Compute Services

EC2 is the backbone of AWS compute, but the exam goes well beyond launching instances. You need to know when to use Lambda, containers, or serverless alternatives, and how to connect compute to load balancing and autoscaling.

Topics

  • EC2 instance types and purchase options
  • Auto Scaling Groups and policies
  • Elastic Load Balancing (ALB, NLB, GLB)
  • Lambda invocation and integration
  • Compute selection framework

Activities

  • Launch an EC2 instance via the console and connect using Session Manager (SSM).
W3

Week 3

Storage and Databases

Choosing the right storage or database service is one of the most frequently tested skills. The trick is not memorizing every S3 storage class. It is knowing which service fits a given set of requirements around access patterns, consistency, scale, and cost.

Topics

  • S3: classes, versioning, replication, lifecycle
  • EBS: volume types, snapshots, encryption
  • EFS and FSx: file storage options
  • RDS and Aurora: Multi-AZ, Read Replicas, Serverless
  • DynamoDB: keys, GSIs, on-demand, DAX

Activities

  • Create an S3 bucket with versioning, lifecycle rules, and cross-region replication.
W4

Week 4

Networking

VPC design is fundamental to almost every SAA-C03 scenario. The exam expects you to understand how networking works at an architectural level: subnet design, routing, security boundaries, hybrid connectivity, and DNS.

Topics

  • VPC design: CIDRs, subnets, IGW, NAT
  • Security Groups vs NACLs
  • VPC Peering and Transit Gateway
  • Hybrid connectivity: VPN, Direct Connect
  • Route 53, CloudFront, and API Gateway

Activities

  • Build a custom VPC with public and private subnets, an Internet Gateway, and a NAT Gateway.
W5

Week 5

Security, Identity, and Compliance (30%)

Security is the heaviest domain on the exam, and it shows up as a thread through questions in every other domain too. This week covers IAM depth, encryption, threat detection, and compliance monitoring. If you are weak in security, this is the week to fix it.

Topics

  • IAM depth: conditions, boundaries, cross-account
  • Organizations: SCPs, OU hierarchy, billing
  • KMS: CMK types, envelope encryption, rotation
  • Shield, WAF, and security monitoring
  • CloudTrail, Config, GuardDuty, Security Hub

Activities

  • Create a cross-account IAM role with a trust policy and test access.
W6

Week 6

High Availability, Disaster Recovery, and Cost Optimization

Resilience and cost optimization are closely linked. The cheapest architecture that meets your RTO and RPO is usually the right one. This week brings them together because the exam frequently tests trade-offs between availability, performance, and cost.

Topics

  • Multi-AZ and Multi-Region patterns
  • DR strategies: backup/restore, pilot light, warm standby
  • RTO and RPO mapping to AWS services
  • Cost optimization: Savings Plans, right-sizing, Trusted Advisor
  • AWS Budgets, Cost Explorer, and billing alerts

Activities

  • Design a Multi-AZ architecture for a web application with RDS and an Application Load Balancer.
W7

Week 7

Advanced Services and Integration

This week covers the services that tie architectures together: messaging for decoupling, containers for modern workloads, infrastructure as code for repeatability, and migration tools for moving workloads to AWS. These show up regularly in scenario questions.

Topics

  • Messaging: SQS, SNS, Kinesis, fan-out
  • Containers: ECS (EC2 and Fargate), EKS, ECR
  • Infrastructure as Code: CloudFormation, CDK
  • Microservices and decoupling patterns
  • Migration: Application Migration Service, DMS

Activities

  • Deploy a containerized application to ECS Fargate behind a load balancer.
W8

Week 8

Exam Simulation and Booking

Your final push. This week is full exam simulation mode: filling in remaining gaps and building the confidence to walk into the testing center ready.

Topics

  • Full syllabus review across all four domains
  • Time management (130 minutes for 65 questions)
  • Scenario reasoning and constraint identification
  • Distractor elimination techniques

Activities

  • Take the AWS official practice exam if you have not already.
  • Take at least 3 ExamOS Legend mode full quizzes (80% hard questions, 130-minute timer).

Daily Study Routine

Suggested 2–3 Hour Day

TimeActivity
15 minLook over yesterday's wrong answers. For each one, identify the principle you missed.
30 minRead AWS documentation or Well-Architected whitepapers for this week's topic
30 minHands-on lab (AWS Free Tier)
30 minTake an ExamOS quiz (Challenger or Legend mode, depending on the week)
15 minLog missed concepts and review them the next morning

Stay consistent by setting a target date for this certification.

Set target
  • Read the AWS Well-Architected Framework documentation. Note the six pillars and their key design principles.
  • Create or verify an AWS Free Tier account and enable MFA on the root account.
  • Take the AWS official practice exam or ExamOS Rookie mode quiz (30 questions).
  • Review results to find your priority study areas (any domain where you scored below 60%).
  • Goal:A clear picture of where you stand and a working understanding of AWS global infrastructure and the Well-Architected Framework.
    Rookie Mode
    Rookie Mode
  • Create a Lambda function with an API Gateway trigger and test it end to end.
  • Configure an Auto Scaling Group with target tracking scaling and verify it responds to load.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Confidently select the right compute service for any described workload and understand how autoscaling and load balancing integrate with each.
    Challenger Mode
    Challenger Mode
  • Launch an RDS instance with Multi-AZ failover and a Read Replica.
  • Design a DynamoDB table with partition key and GSI for a described high-traffic application.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Instantly identify the right storage or database service for any workload with a clear justification.
    Challenger Mode
    Challenger Mode
  • Launch EC2 instances in public and private subnets and test connectivity.
  • Configure a Route 53 failover routing policy with health checks.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Design secure and scalable VPC architectures and understand the full networking stack from subnet design to DNS to CDN.
    Challenger Mode
    Challenger Mode
  • Enable CloudTrail in your account and query logs using Athena.
  • Configure AWS Config with a managed rule (e.g., S3 bucket public read) and test remediation.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Design secure architectures with least-privilege access, encryption at rest and in transit, and compliance monitoring at scale.
    Challenger Mode
    Challenger Mode
  • Design a DR strategy with specific RTO and RPO requirements and map it to AWS services.
  • Set up a budget alert in AWS and analyze cost using Cost Explorer.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Architect resilient solutions that meet business continuity requirements while optimizing for cost.
    Challenger Mode
    Challenger Mode
  • Create an SQS queue with an SNS fan-out pattern and test the flow.
  • Write a CloudFormation template that creates a VPC, subnet, and EC2 instance.
  • Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
  • Goal:Design scalable, decoupled architectures using messaging, containers, and infrastructure as code.
    Challenger Mode
    Challenger Mode
  • Simulate real exam conditions at least once: no phone, no breaks, 130 minutes, same time of day you plan to actually sit the exam.
  • For every Legend question you miss, review the explanation and write one sentence explaining the architectural principle behind the correct answer.
  • Review the Well-Architected Framework one final time.
  • Once you are consistently hitting 80% or above on Legend mode across two or more sessions, book your exam. You are ready.
  • Goal:Consistent above 80% on Legend mode across two or more sessions. Confidence to schedule the exam.
    Legend Mode
    Legend Mode

    Overview

    The AWS Solutions Architect Associate validates your ability to design secure, resilient, high-performing, and cost-optimized architectures on AWS. It is one of the most widely recognized cloud certifications in the industry, and it is also one of the most practical. The questions are grounded in real-world scenarios that mirror what architects deal with daily: choosing between similar services, designing for failure, controlling costs, and securing workloads at scale.

    This exam tests architectural judgment across four domains. You will not be asked to configure services from memory. You will be asked to recommend the right service, the right architecture pattern, and the right trade-off for a given business requirement. That is the skill this plan builds.

    Domain Weight
    Design Secure Architectures 30%
    Design Resilient Architectures 26%
    Design High-Performing Architectures 24%
    Design Cost-Optimized Architectures 20%

    Security is the single heaviest domain at 30%. Combined with resilience (26%), over half the exam is about building architectures that protect data and survive failures. These two domains are where many candidates lose the most marks.

    Recommended experience: 1+ year of hands-on experience with AWS. Familiarity with compute, networking, storage, and database services. Understanding of the AWS Well-Architected Framework.

    A note on prerequisites: There are no formal prerequisites for SAA-C03. AWS Cloud Practitioner is not required, but if you are completely new to AWS, it is a worthwhile starting point.

    Frequently Asked Questions

    Do I need AWS Cloud Practitioner before SAA-C03?

    There are no formal prerequisites. If you have 1+ year of hands-on AWS experience, you can go straight to SAA-C03. If AWS is new to you, Cloud Practitioner builds a useful foundation first.

    How many practice questions should I aim for?

    Aim for at least 800 unique questions across all domains, ensuring you prioritize quality over quantity. ExamOS provides over 3,000 high quality practice questions covering all domains and designed to explain the rationale behind both correct and incorrect answers.

    When should I book the exam?

    Once you are consistently hitting 80% or above on Legend mode across two or more sessions, and you feel comfortable explaining architecture decisions for realistic scenarios, you are ready. Trust your preparation.

    How long is the exam?

    130 minutes for 65 questions. That averages to 2 minutes per question. Some scenario questions may take longer, so keep an eye on the clock. The 15 unscored questions are indistinguishable from the 50 scored ones, so answer every question as if it counts.

    What is the passing score?

    720 out of 1000. AWS uses scaled scoring, so the raw number of correct answers needed varies slightly between exam versions. Do not try to calculate how many questions you can afford to miss.

    I am a non-native English speaker. Can I get extra time?

    Yes, under certain conditions. AWS offers an additional 30 minutes for candidates whose primary language is not the language of the exam. If you are taking the exam in English but English is not your primary language, you can request this accommodation:

    1. When scheduling your exam through Pearson VUE, select the option for additional time for non-native English speakers.
    2. This is available for exams delivered in English, Japanese, Korean, Simplified Chinese, Traditional Chinese, Spanish, French, German, Italian, Portuguese, and Indonesian.
    3. If the exam is available in your primary language, you can still take it in English with the extra time, as long as you meet the non-native speaker criteria.

    Request this accommodation when scheduling. It is a straightforward process through the registration system.

    Can I use reference materials during the exam?

    No. The AWS SAA-C03 exam is closed-book. You cannot access documentation, websites, or any external resources during the test. All questions are designed to be answerable from your knowledge of AWS services, architecture patterns, and the Well-Architected Framework.

    What is the most important domain to study?

    Design Secure Architectures (30%) is the heaviest domain, but all four carry enough weight that skipping one is risky. Security also shows up as a thread through questions in every other domain. The biggest trap is over-studying the services you use daily at work and under-studying the domains you rarely touch.

    What is the Well-Architected Framework?

    The AWS Well-Architected Framework is a set of best practices organized around six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability. It underpins many SAA-C03 design decisions. Review it in Week 1 and refer back to it throughout the plan.

    What are the most common ways people fail?

    • Confusing Security Groups with NACLs. Security Groups are stateful and operate at the instance level. NACLs are stateless and operate at the subnet level. This distinction appears in questions constantly.
    • Not knowing the difference between S3 storage classes. Intelligent-Tiering, Standard-IA, Glacier Instant Retrieval, and Glacier Deep Archive have different retrieval times and costs. The exam tests whether you can match access patterns to the right tier.
    • Confusing VPC Peering with Transit Gateway. VPC Peering is point-to-point and not transitive. Transit Gateway is a hub that connects many VPCs. Know when each is the right choice.
    • Ignoring the Shared Responsibility Model. Questions frequently test whether you understand what AWS manages and what you manage, especially for services like RDS, Lambda, and ECS.
    • Choosing the most feature-rich service instead of the simplest one that meets the requirements. The exam rewards right-sized solutions. If SQS Standard meets the requirements, do not pick Kinesis.
    • Not understanding RTO and RPO. Being able to define them is not enough. You must map them to specific AWS architecture patterns (backup/restore, pilot light, warm standby, multi-site).

    What are the three biggest preparation mistakes?

    1. Studying service features without studying architecture patterns. SAA-C03 tests judgment. Knowing that Aurora supports Global Database is table stakes. Knowing when to use it versus RDS Read Replicas for a specific DR requirement is what the exam measures.
    2. Not practicing hands-on. The exam tests practical knowledge. Reading documentation alone is not enough. Build a VPC, launch instances, configure load balancers, set up replication. The experience sticks in a way that reading never does.
    3. Ignoring cost optimization. At 20% of the exam, cost optimization is not a small topic. Questions frequently test whether you know the trade-offs between On-Demand, Reserved, Spot, and Savings Plans, and whether you can right-size resources for a described workload.

    Is there a renewal option?

    Yes. SAA-C03 is valid for 3 years. To renew, you can retake the current version of the exam or advance to a higher-level certification (such as AWS Solutions Architect Professional), which automatically recerts your Associate-level credential. AWS also offers a recertification pathway through their digital badge program. Check the AWS Certification portal for the most current renewal options.


    Quick-Reference: What Is on the Exam

    For the full, always-current list, visit the official SAA-C03 exam guide.

    Domain Key Skills
    Design Secure Architectures (30%) IAM policies, roles, permission boundaries, cross-account access, AWS Organizations and SCPs, KMS encryption (CMKs, envelope encryption, key rotation), Secrets Manager vs Parameter Store, Shield (Standard and Advanced), WAF (Web ACLs, rule groups), CloudTrail, Config, GuardDuty, Security Hub, VPC security (Security Groups, NACLs, flow logs)
    Design Resilient Architectures (26%) Multi-AZ and Multi-Region patterns, Auto Scaling Groups and policies, Elastic Load Balancing (ALB, NLB, GLB), Route 53 routing policies (failover, weighted, latency, geolocation), DR strategies (backup/restore, pilot light, warm standby, multi-site), RTO/RPO mapping, S3 replication, Aurora Global Database, AWS Backup
    Design High-Performing Architectures (24%) EC2 instance selection and placement, EBS volume types and optimization, S3 performance (multipart upload, Transfer Acceleration, replication), RDS and Aurora Read Replicas, DynamoDB (partition keys, GSIs, DAX, global tables), ElastiCache (Redis, Memcached), CloudFront (caching behaviors, origin groups), Kinesis, Lambda performance tuning
    Design Cost-Optimized Architectures (20%) EC2 purchase options (On-Demand, Reserved, Spot, Savings Plans, Dedicated Hosts), compute right-sizing, S3 storage classes and Intelligent-Tiering, EBS volume cost optimization, RDS and Aurora cost management, DynamoDB capacity modes (on-demand vs provisioned), AWS Budgets, Cost Explorer, Trusted Advisor, tagging for cost allocation