AWS Solutions Architect Professional (SAP-C02) – Study Plan
A condensed 8-week plan for SAP-C02. Design enterprise-scale, multi-account, multi-region architectures on AWS with advanced networking, migration, DR, and cost-aware trade-offs.
AWSSAP-C02Passing score: 750 / 1000Senior cloud architects with 2+ years of hands-on AWS experience designing and deploying enterprise-scale architectures, ideally holding SAA-C0318-Jul-2026
1Read and architect. Start the week with AWS whitepapers and documentation, then design an architecture on paper for the scenario you just read about. SAP-C02 tests architectural judgment, so practice designing, not just reading.
2Build your judgment. For every pattern you encounter, ask: what problem does this solve, when is it the wrong choice, and what constraint in the scenario would change my answer?
3Practice with ExamOS. Use the quiz modes in the order specified in this Study Plan.
4Learn to eliminate the near-correct distractor. SAP-C02 questions almost always have two plausible answers. Train yourself to find the one specific detail in the question that makes one answer slightly better than the other. That detail is the binding constraint.
Rookie ModeChallenger ModeLegend Mode
Week-by-Week Breakdown
W1
Week 1
Self-Assessment
This week is about mapping your current knowledge against the four exam domains, reviewing SAA-C03 foundations, and understanding the depth difference between Associate and Professional level. You are not expected to master anything yet. You are building a baseline.
Topics
SAP-C02 exam guide and domain mapping
SAA-C03 knowledge gap check
AWS Well-Architected Framework review
Enterprise architecture patterns overview
Professional-level question style and depth
Activities
Read the official SAP-C02 exam guide end to end and rate your confidence for each domain.
W2
Week 2
Multi-Account Architecture and Enterprise Governance (Domain 1, 26%)
This is the first half of Domain 1 and the area where SAP-C02 diverges most from SAA-C03. Enterprise-scale AWS environments use multiple accounts for isolation, security, and billing. The exam tests whether you can design a multi-account strategy with appropriate governance controls: Organizations, SCPs, Control Tower, landing zones, and cross-account access patterns.
Topics
AWS Organizations: OU design, SCPs, consolidated billing
AWS Control Tower: guardrails, account factory, landing zone
Cross-account IAM roles and resource sharing
AWS RAM (Resource Access Manager)
Multi-account networking patterns
Tagging strategies and cost allocation at scale
W3
Week 3
Complex Networking and Hybrid Architecture (Domain 1, 26%)
The second half of Domain 1 covers enterprise networking at a depth that SAA-C03 does not. This includes Transit Gateway for hub-and-spoke connectivity, Direct Connect for hybrid connectivity, PrivateLink for private service access, and multi-region networking patterns. Questions frequently combine networking with security and compliance requirements.
Multi-region networking: global accelerator, cross-region VPC peering
VPC design at scale: CIDR planning, overlapping CIDR resolution
W4
Week 4
Advanced Architecture Patterns and Cost-Aware Design for New Solutions (Domain 2, 29%)
This is the largest domain on the current exam. It covers designing new solutions from scratch, at a professional level that means combining serverless, containers, event-driven patterns, data lakes, and ML into cohesive systems, while weighing cost as a design constraint from the start, not an afterthought. The exam tests whether you can choose the right combination of services for a described workload, justify the trade-offs, and pick the right pricing model (On-Demand, Reserved, Savings Plans, Spot) for the workload's actual usage pattern.
Topics
Serverless architectures: Lambda, API Gateway, Step Functions, EventBridge
Data lake architecture: S3, Lake Formation, Glue, Athena
Analytics at scale: Redshift, OpenSearch, EMR
ML integration: SageMaker, Bedrock, Rekognition, Comprehend
W5
Week 5
Continuous Improvement, Reliability, and Cost Optimization for Existing Solutions (Domain 3, 25%)
Domain 3 covers improving existing architectures: reliability patterns (multi-AZ, multi-region, DR), operational excellence (monitoring, automation, incident response), security improvements (encryption, access control, compliance), and optimizing the cost of workloads that are already running. The exam tests whether you can identify what is wrong or inefficient with a described architecture and recommend the right improvement.
Topics
High availability: multi-AZ, multi-region, active-active, active-passive
Disaster recovery: RTO/RPO mapping, backup/restore, pilot light, warm standby, multi-site
AWS Backup: cross-region, cross-account backup
Monitoring at scale: CloudWatch, CloudTrail, X-Ray, custom metrics
Incident response automation: EventBridge, Systems Manager, Lambda
Security improvements: encryption at rest/in transit, KMS, Secrets Manager
W6
Week 6
Migration and Modernization (Domain 4, 20%)
Domain 4 is now weighted higher than in earlier versions of this exam and gets its own full week. The 6 R's framework (Rehost, Replatform, Repurchase, Refactor, Retire, Retain) is tested extensively, along with the AWS migration toolset, hybrid migration networking, and modernization patterns for legacy monoliths.
SAP-C02 questions frequently span multiple domains. A single question might describe a migration scenario (Domain 4) that requires multi-account governance (Domain 1), complex networking (Domain 1), and reliability or cost trade-offs (Domain 3). This week practices those integrated scenarios.
Topics
Multi-domain architecture scenarios
Enterprise case study reasoning
Constraint identification: cost vs compliance vs performance vs operational complexity
Multi-select question technique
Weak domain targeted review
Activities
Solve at least 5 full cross-domain architecture scenarios (ExamOS case study mode).
W8
Week 8
Exam Simulation and Booking
Your final push. This week is full exam simulation mode. SAP-C02 has significant time pressure (180 minutes for 75 questions, 2.4 minutes per question) and the questions are long. You need to practice reading scenarios quickly, identifying the binding constraint, and making confident decisions.
Topics
Full syllabus review across all four domains
Time management (180 minutes for 75 questions)
Multi-select question mastery
Scenario reading and constraint identification
Activities
Take at least 3 ExamOS Legend mode full quizzes (80% hard questions, 180-minute timer).
Simulate real exam conditions at least once: no phone, no breaks, 180 minutes, same time of day you plan to actually sit the exam.
Daily Study Routine
Suggested 2–3 Hour Day
Time
Activity
15 min
Look over yesterday's wrong answers. For each one, identify the binding constraint you missed.
30 min
Read AWS whitepapers or documentation for this week's topic
30 min
Design an architecture on paper for a described scenario
30 min
Take an ExamOS quiz (Challenger or Legend mode, depending on the week)
15 min
Log missed concepts and review them the next morning
Stay consistent by setting a target date for this certification.
Design a Transit Gateway architecture connecting 5 VPCs across 2 regions with central egress.
Design a Direct Connect architecture with redundant connections and a DX Gateway for multi-region access.
Configure PrivateLink for a shared service accessed by multiple accounts without traversing the public internet.
Design a hybrid DNS resolution strategy using Route 53 Resolver for an on-premises and multi-VPC environment.
Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
Goal:Design complex, multi-region, hybrid networking architectures at enterprise scale.
Challenger Mode
Challenger Mode
API design: API Gateway, AppSync, throttling, caching
Pricing model selection at design time: On-Demand vs Reserved Instances vs Savings Plans vs Spot Instances
Activities
Design a serverless event-driven architecture for a real-time order processing system.
Design a data lake architecture on S3 with Lake Formation governance and Athena for ad-hoc queries.
Design an EKS-based microservices architecture with service mesh and observability.
Design an API architecture with API Gateway including throttling, caching, and authorization.
For each architecture you design this week, justify the pricing model (On-Demand, Reserved, Savings Plans, or Spot) you'd choose for its compute layer, and why.
Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
Goal:Select the right combination of advanced AWS services, and the right pricing model, for any described new workload.
Cost optimization for running workloads: Compute Optimizer recommendations, right-sizing, Cost Explorer, Budgets, Cost and Usage Report (CUR), Enterprise Discount Programs
Activities
Design a multi-region active-active architecture for a financial trading platform with sub-second RPO.
Design a DR strategy for a legacy three-tier application with an RTO of 4 hours and RPO of 1 hour.
Design an automated incident response pipeline: GuardDuty finding to EventBridge to Lambda to remediation.
Identify and fix three reliability anti-patterns in a described architecture (single-AZ database, no health checks, no backup).
Given a described running workload with underutilized instances, use Compute Optimizer's logic to right-size it, and design a cost allocation strategy with tags, CUR, and Cost Explorer for a multi-account enterprise.
Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
Goal:Diagnose architectural weaknesses and recommend improvements for reliability, security, operations, and cost.
Challenger Mode
Challenger Mode
Design a migration plan for a 50-application portfolio using the 6 R's framework, with justification for each strategy choice.
Design a database migration from on-premises Oracle to Aurora PostgreSQL using DMS, including schema conversion.
Design a hybrid migration using MGN for EC2 rehosting with cutover strategy.
Design a large-scale offline data transfer strategy using the Snow Family for a customer with limited network bandwidth.
Take the ExamOS Challenger quiz. Repeat until you pass 2 times in a row.
Goal:Design migration and modernization strategies using the 6 R's at enterprise scale.
Challenger Mode
Challenger Mode
For each scenario, identify the binding constraint before evaluating answer options.
Take 3 full-domain ExamOS Challenger quizzes. Review every incorrect answer.
Take targeted Challenger quizzes on your weakest domain until 3 consecutive passes above 75%.
Repeat full-domain Challenger until 3 consecutive passes above 70%.
Goal:Consistent above 70% on full-domain Challenger with no domain below 60%.
Challenger Mode
Challenger Mode
For every Legend question you miss, review the explanation and write one sentence identifying the architectural principle or constraint you missed.
Once you are consistently hitting 80% or above on Legend mode across two or more sessions, book your exam. You are ready.
Goal:Consistent above 80% on Legend mode across two or more sessions.
Legend Mode
Legend Mode
Overview
The AWS Solutions Architect Professional is widely considered the most challenging AWS certification. It validates your ability to design and deploy dynamically scalable, highly available, fault-tolerant, and reliable applications on AWS, and to select the right AWS service for a given requirement based on compute, data, or security requirements. Where SAA-C03 asks you to recommend a service, SAP-C02 asks you to design an entire enterprise architecture across multiple accounts, regions, and hybrid environments.
This is a professional-level exam. The questions describe complex, multi-service scenarios with competing constraints. You must identify the binding constraint (cost, compliance, latency, operational complexity) and choose the architecture that best satisfies it. There are rarely clearly wrong answers. There are usually two plausible options, and the exam tests whether you can identify the specific detail that makes one better than the other.
Domain
Weight
Design Solutions for Organizational Complexity
26%
Design for New Solutions
29%
Continuous Improvement for Existing Solutions
25%
Accelerate Workload Migration and Modernization
20%
Domain 1 (26%) and Domain 2 (29%) together represent over half the exam. Domain 1 covers multi-account governance, complex networking, and hybrid connectivity. Domain 2 covers designing new solutions from scratch, including the cost trade-offs you weigh at design time. Domain 3 covers reliability, DR, security improvements, operational excellence, and cost optimization for existing workloads. These are the domains where SAA-C03 knowledge is insufficient and professional-level depth is required.
Note: AWS restructured this exam's domain content at some point after SAP-C02 originally launched. It now has four domains rather than five, and cost optimization is no longer a standalone domain, it's been folded into "Design for New Solutions" and "Continuous Improvement for Existing Solutions." This plan reflects the current four-domain structure. If you find older material online listing a separate ~12% cost domain, that's the outdated structure.
Recommended experience: 2+ years of hands-on experience designing and deploying cloud architecture on AWS. SAA-C03 or equivalent knowledge is strongly recommended. Familiarity with multi-account strategies, hybrid networking, migration, and enterprise governance.
A note on SAA-C03 as a foundation: SAP-C02 assumes you know everything in SAA-C03 at a deep level. If you do not have SAA-C03 or equivalent experience, the networking, security, and migration questions will be extremely difficult. Consider completing SAA-C03 first if you are not already certified.
Frequently Asked Questions
Do I need SAA-C03 before SAP-C02?
There are no formal prerequisites. However, SAP-C02 assumes you know everything in SAA-C03 at a deep level. If you do not have SAA-C03 or equivalent experience, the networking, security, and migration questions will be extremely difficult. SAA-C03 is strongly recommended as a foundation.
Why is this plan 8 weeks?
Because SAP-C02 candidates are expected to have 2+ years of hands-on AWS experience and SAA-C03-level knowledge. Domain 1 (organizational complexity, 26%) gets two weeks because multi-account governance and complex networking are the areas with the biggest depth gap from SAA-C03. Domain 2 (Design for New Solutions, 29%) is the single largest domain and includes cost-aware design decisions. Domain 4 (migration, 20%) now gets its own dedicated week given its increased weight. Same ground, tighter structure.
How does SAP-C02 differ from SAA-C03?
SAA-C03 tests service selection for individual workloads. SAP-C02 tests enterprise architecture design across multiple accounts, regions, and hybrid environments. Key differences:
Multi-account strategies: Organizations, SCPs, Control Tower, landing zones. Not tested on SAA-C03.
Complex networking: Transit Gateway, Direct Connect, PrivateLink at professional depth. SAA-C03 covers these at surface level.
Migration strategies: The 6 R's, DMS, MGN. Tested at design depth on SAP-C02.
DR patterns at depth: RTO/RPO mapping to specific architecture patterns. SAP-C02 tests the design, not just the concept.
Cost optimization woven into design and operations: Savings Plans, Reserved Instances, Compute Optimizer, CUR analysis, enterprise discount programs, tested as part of Domains 2 and 3 rather than as a separate topic. Far deeper than SAA-C03.
Multi-select questions: SAP-C02 has more questions requiring 2-3 correct answers, increasing difficulty.
How many practice questions should I aim for?
At least 800 unique questions across all domains. Focus on questions that explain why each answer is right and why the others are wrong. For SAP-C02, the explanation matters more than the question itself because the exam tests architectural reasoning.
When should I book the exam?
Once you are consistently hitting 80% or above on Legend mode across two or more sessions, and you feel confident designing enterprise architectures for complex scenarios, you are ready. Trust your preparation.
How long is the exam?
180 minutes (3 hours) for 75 questions (65 scored, 10 unscored pilot questions). That is 2.4 minutes per question on average. SAP-C02 questions are long (often a full paragraph describing a scenario), so reading speed matters. Budget your time and do not spend more than 4 minutes on any single question. Flag and move on.
What is the passing score?
750 out of 1000. AWS uses scaled scoring. The raw number of correct answers needed varies slightly between exam versions. Do not try to calculate how many questions you can afford to miss.
I am a non-native English speaker. Can I get extra time?
Yes. AWS offers an additional 30 minutes for candidates whose primary language is not the language of the exam. Request this accommodation when scheduling through Pearson VUE.
Can I use reference materials during the exam?
No. SAP-C02 is closed-book. You cannot access documentation, websites, or any external resources during the test. All questions are designed to be answerable from your knowledge of AWS services, architecture patterns, and best practices.
What are the most common ways people fail?
Choosing the most feature-rich solution instead of the simplest one that meets requirements. The exam rewards right-sized solutions. If a simpler architecture meets the requirements at lower cost and operational complexity, it is the correct answer.
Not understanding multi-account governance. SCPs, Organizations, Control Tower, and cross-account access patterns are tested heavily. If you only understand single-account architectures, you will lose marks across Domain 1.
Confusing migration strategies. The 6 R's are tested constantly. Rehost (lift-and-shift), Replatform (lift-and-optimize), and Refactor (re-architect) are the most commonly confused. Know when each is appropriate.
Not knowing Direct Connect and Transit Gateway at depth. DX Gateway, VIFs (private and public), Transit Gateway route tables, and hybrid DNS resolution are professional-level topics that SAA-C03 does not cover.
Treating cost optimization as a footnote. Cost trade-offs are now woven into both Domain 2 (design-time pricing model choice) and Domain 3 (optimizing running workloads). Savings Plans vs Reserved Instances, Compute Optimizer recommendations, and CUR analysis appear regularly throughout the exam, not in one isolated section.
Spending too much time on long questions. SAP-C02 questions are long. Candidates who read every word of every question run out of time. Practice reading scenarios efficiently: identify the requirement, the constraint, and the current state, then evaluate options.
What are the three biggest preparation mistakes?
Treating SAP-C02 as a harder SAA-C03. The question style is different. SAA-C03 asks "which service?" SAP-C02 asks "which architecture?" If you are answering SAP-C02 questions by picking individual services instead of evaluating complete architectures, you are answering the wrong question.
Not studying multi-account and hybrid patterns. These are the areas with the biggest depth gap from SAA-C03 and represent a significant portion of Domain 1. Candidates who skip these topics consistently underperform.
Not practicing time management. 75 questions in 180 minutes with long scenario descriptions is tight. Candidates who do not practice timed quizzes consistently run out of time. Start timed practice by Week 5.
Is there a renewal option?
Yes. SAP-C02 is valid for 3 years. To renew, retake the current version of the exam. AWS also offers recertification pathways through their certification portal. Check the AWS Certification portal for the most current renewal options.