SAA-C03 exam domains
The SAA-C03 exam is weighted across 4 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.
| Exam domain | Exam weight | Practice |
|---|---|---|
| Design Secure Architectures | 30% | Practice this topic → |
| Design Resilient Architectures | 26% | Practice this topic → |
| Design High-Performing Architectures | 24% | Practice this topic → |
| Design Cost-Optimized Architectures | 20% | Practice this topic → |
Sample SAA-C03 questions
A sample of the SAA-C03 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.
- A company hosts a public web application behind an Application Load Balancer. The security team imported a third-party TLS certificate into AWS Certif…View question →
- A financial services company runs a web application behind an Application Load Balancer (ALB) in a public subnet, with EC2 instances in private subnet…View question →
- A retail company runs three microservices (product catalog, shopping cart, and user profile) as separate Amazon ECS services behind a single public en…View question →
- A gaming company runs a real-time multiplayer backend on Amazon ECS. The workload communicates over raw TCP, requires the ability to handle millions o…View question →
- A company runs a public e-commerce web application behind an Application Load Balancer (ALB) in a VPC. Recently, security logs revealed repeated SQL i…View question →
- A company runs a serverless REST API using Amazon API Gateway backed by AWS Lambda functions that write to a small Amazon RDS for PostgreSQL Multi-AZ…View question →
- A company exposes a public REST API through Amazon API Gateway to several partner organizations. Each partner has purchased a different subscription t…View question →
- A company runs a stateless web application on EC2 instances behind an Application Load Balancer. All instances currently launch in a single Availabili…View question →
- A media company runs a stateless web application on Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group. Traffic is unpr…View question →
- A company runs a production Aurora MySQL cluster. To meet an internal policy, the team set the automated backup retention period to the maximum 35 day…View question →
Key SAA-C03 terms
Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the SAA-C03 exam.
SAA-C03 frequently asked questions
What is the SAA-C03 certification?+
AWS positions the Solutions Architect - Associate as proof that you can design solutions on AWS using the pillars of the Well-Architected Framework. The exam is scenario-driven: most questions describe a workload and ask which combination of services best meets a stated requirement such as fault tolerance, least cost, or lowest latency.
It expects a working familiarity with the core AWS building blocks — compute, storage, databases, and networking — plus the security and cost tools that surround them. AWS suggests around one year of hands-on experience with AWS before attempting it, though focused study on the service families and their use cases is what the exam actually rewards.
What topics are on the SAA-C03 exam?+
The SAA-C03 exam is organised into four weighted domains. The percentages below are each domain’s share of scored content, so bias your study time toward the heavier domains — Design Secure Architectures and Design Resilient Architectures together make up more than half of your score.
Design Secure Architectures (30%)
The heaviest domain. It covers designing secure access to AWS resources with IAM users, groups, roles, and policies, federation and multi-account strategies (AWS Organizations, Control Tower, service control policies), securing workloads inside a VPC with security groups, network ACLs, and subnet segmentation, and data-security controls such as encryption at rest with AWS KMS, encryption in transit with ACM and TLS, and key rotation.
Design Resilient Architectures (26%)
Focuses on building systems that stay available and recover from failure. It spans loosely coupled, scalable designs using SQS, SNS, and event-driven patterns, multi-AZ and multi-Region architectures, Auto Scaling and load balancing, and disaster-recovery strategies (backup-and-restore, pilot light, warm standby, multi-site) with an understanding of RTO and RPO and Route 53 failover.
Design High-Performing Architectures (24%)
Centres on selecting the highest-performing option for a workload. It covers scalable storage (S3 classes, EBS volume types, EFS, FSx), elastic compute (EC2 sizing, Auto Scaling, Lambda, containers), high-performing databases (RDS, Aurora, DynamoDB, caching with ElastiCache), scalable networking (CloudFront, Global Accelerator, Transit Gateway), and data ingestion and transformation with services such as Kinesis and Glue.
Design Cost-Optimized Architectures (20%)
The cost-awareness domain. It covers cost-optimized storage (S3 lifecycle policies, Intelligent-Tiering), compute pricing models (On-Demand, Reserved Instances, Savings Plans, and Spot), right-sizing databases and using serverless capacity modes, and reducing network cost through Region and AZ placement, VPC endpoints, and CloudFront.
Is the SAA-C03 hard?+
SAA-C03 is a clear step up from the Cloud Practitioner. It is an associate-level, scenario-based exam, so questions rarely have a single obvious answer — several options are technically valid and you must pick the best fit for the stated priority, whether that is cost, resilience, or performance.
The difficulty comes from breadth combined with judgment: you need a mental map of dozens of services and, more importantly, the instinct for when to use each one. The most effective preparation is heavy practice on scenario questions so that the trade-offs between, say, Aurora and DynamoDB, or a NAT gateway and a VPC endpoint, become second nature.
How many questions are on the SAA-C03 exam and how long is it?+
The live SAA-C03 exam contains 65 questions to be answered in 130 minutes, delivered as multiple-choice (one correct answer) and multiple-response (two or more correct answers) items. A subset are unscored questions AWS uses to trial future content, but you cannot tell which, so answer every question with equal care.
You can sit the exam at a Pearson VUE test centre or through online proctoring from home. Our full-length practice mock mirrors this format with a 65-question, 130-minute timer so you can rehearse pacing — about two minutes per question — before test day.
What score do you need to pass the SAA-C03?+
AWS scores SAA-C03 on a scaled range of 100 to 1,000, and you need 720 to pass. The score is scaled rather than a simple percentage because question difficulty varies, and AWS does not publish per-domain pass marks — you need an overall 720, so a weaker domain can be offset by a stronger one. Our practice mock flags a pass at 72% to give you a comparable target.
How much does the SAA-C03 exam cost?+
The SAA-C03 exam costs 150 USD (prices vary slightly by region and currency), and the certification is valid for three years before it needs recertification. Everything on this hub — questions, mock exams, glossary, and domain guides — is completely free, so you can prepare thoroughly before paying to sit the exam.
Who should take the SAA-C03?+
The Solutions Architect - Associate is aimed at people in or moving toward a solutions-architect, cloud-engineer, or similar design-focused role. AWS recommends around a year of hands-on experience designing on AWS, but it is also a common goal for developers and administrators who want to formalise and broaden their architecture knowledge.
It is a natural progression from the Cloud Practitioner for those heading into engineering, and it establishes the design vocabulary and service depth that the professional-tier certifications later assume.
What jobs and salaries can the SAA-C03 lead to?+
The certification is relevant to roles such as cloud solutions architect, cloud engineer, and infrastructure or platform engineer, where designing on AWS is part of the job.
How much any certification moves compensation depends heavily on geography, seniority, and hands-on experience, so treat any single salary figure with caution. SAA-C03 is best viewed as a way to demonstrate architecture knowledge rather than a guaranteed raise on its own.
How long does it take to study for the SAA-C03?+
Candidates with solid AWS exposure often need four to eight weeks; those newer to AWS should plan for two to three months at roughly an hour a day. The most efficient path is to learn the service families domain by domain, then shift the majority of your time to timed scenario practice so you get used to how AWS frames trade-off questions.
A proven rhythm is to study one domain at a time and drill its topic quiz immediately, then move to mixed, full-length timed mocks in the final stretch — reviewing every explanation, including for questions you answered correctly, because SAA-C03 distractors are built from plausible but sub-optimal designs. Use the per-domain results here to find your weakest area and drill it again before booking your seat.
How should you prepare for the SAA-C03?+
Start by reading each domain above so you know where the marks are, then work the practice questions domain by domain. Every question on MockAPI reveals a full explanation and tells you why each wrong answer is wrong — that second part is where most of the learning happens on a scenario-based exam built from close alternatives.
When you can answer topic drills comfortably, move to a full-length timed mock to rehearse pacing and stamina, and use the glossary to close any gaps in terminology. Aim to score consistently above the pass mark on mocks before you book the real thing.
Can you take the SAA-C03 exam online?+
Yes. You can sit SAA-C03 either at a Pearson VUE testing centre or online from home with OnVUE remote proctoring. For the online option you need a quiet, private room, a stable internet connection, a webcam, and government-issued photo ID; a proctor monitors the session, and you will be asked to show your surroundings before you begin.
If you do not pass, AWS lets you retake the exam after a 14-day waiting period, with no limit on attempts, though each attempt requires a new paid registration. Results are typically available within a few business days in your AWS Certification account, where you can also download your certificate and digital badge once you pass.
What certification should you take after the SAA-C03?+
The Solutions Architect - Associate is a strong base for the rest of the AWS ladder. Many candidates go on to the other associate exams — Developer - Associate (DVA-C02) and SysOps Administrator - Associate — to round out their skills, or move up to the Solutions Architect - Professional (SAP-C02).
From there you can branch into the professional and specialty credentials in areas such as security, networking, machine learning, and data. Pairing any of these with real hands-on project experience is what turns a certificate into a career.