SAP-C02 cheat sheet

Exam at a glance

Domain weightings

How much of the exam each domain covers. Spend your study time in proportion — the heavier the domain, the more questions you'll see.

Key terms

AWS Organizations

AWS Organizations is a service for centrally managing and governing multiple AWS accounts, including consolidated billing and service control policies. SAP-C02 relies on it for organizational-complexity designs and multi-account governance.

Service Control Policy

A service control policy (SCP) is an AWS Organizations guardrail that sets the maximum permissions available to accounts in an organization. SAP-C02 covers SCPs for enforcing governance boundaries across many accounts.

AWS Control Tower

AWS Control Tower is a service that sets up and governs a secure, multi-account AWS landing zone using best-practice guardrails. SAP-C02 covers it for standing up and governing organizational environments.

Transit Gateway

AWS Transit Gateway is a network hub that connects VPCs and on-premises networks through a central point, simplifying large-scale connectivity. SAP-C02 covers it for cross-account and hybrid network architectures.

AWS PrivateLink

AWS PrivateLink provides private connectivity between VPCs and AWS or partner services without traversing the public internet, using interface endpoints. SAP-C02 covers it for securely exposing services across accounts.

IAM Identity Center

AWS IAM Identity Center (formerly AWS SSO) provides centralized workforce identity and single sign-on across multiple AWS accounts and applications. SAP-C02 covers it for federated, centralized identity in complex organizations.

Disaster Recovery

Disaster recovery is the set of strategies — backup-and-restore, pilot light, warm standby, and multi-site active/active — for restoring workloads after failure. SAP-C02 covers choosing a DR strategy to meet RTO and RPO targets.

RTO and RPO

RTO (recovery time objective) and RPO (recovery point objective) are the targets for how quickly a workload must recover and how much data loss is acceptable. SAP-C02 uses them to select the right disaster-recovery and backup design.

Migration Strategy

A migration strategy is one of the 7 Rs — rehost, replatform, refactor, repurchase, relocate, retain, retire — for moving a workload to AWS. SAP-C02 covers selecting a strategy and the AWS tooling for each.

AWS DMS

AWS Database Migration Service (DMS) is a service that migrates and replicates databases to AWS with minimal downtime, including change data capture. SAP-C02 covers it as core tooling for the migration domain.

AWS DataSync

AWS DataSync is a service that automates and accelerates moving large amounts of file and object data to and from AWS. SAP-C02 covers it alongside DMS and Snow devices for large-scale data migration.

Landing Zone

A landing zone is a well-architected, multi-account AWS environment baseline with identity, governance, networking, and logging preconfigured. SAP-C02 covers designing landing zones, often via Control Tower, for organizational scale.

Well-Architected Framework

The AWS Well-Architected Framework is a set of pillars — operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability — for evaluating architectures. SAP-C02 uses it to justify professional-level design trade-offs.