Skip to content
Getting Digital
AWS certificationsAWS · exam SAA-C03

AWS Certified Solutions Architect – Associate

The Solutions Architect – Associate is the AWS certificate a hiring manager is most likely to have heard of, and SAA-C03 is the exam behind it. It asks you to design for security, resilience, performance and cost across the whole catalogue rather than the corner of it you happen to use.

Pearson VUE delivers it in 130 minutes. There is no prerequisite exam and no requirement to hold Cloud Practitioner first, which is the question most candidates arrive with.

Exam facts

Exam code
SAA-C03
Level
Associate
Field
Cloud
Duration
130 minutes
Questions
65 questions (50 scored, 15 unscored), multiple choice and multiple response
Passing score
720 of 1,000 (scaled)
Languages
English, French, Spanish, Italian, Portuguese, Japanese, Korean, Chinese
Price
150 USD (read 12 September 2026)
Validity
3 years, renewable
Exam delivery
Pearson VUE (test centre or online proctored)

Prerequisites: None. AWS recommends at least a year of hands-on experience designing cloud solutions on AWS, but no prior certification is required.

Renewal: Pass the current version again (a 50 % voucher appears in your AWS certification account) or pass a higher-tier AWS exam such as Solutions Architect – Professional

Source: exam page at AWS · Price: AWS quotes exam prices in US dollars; Pearson VUE charges the local equivalent at booking using the rate AWS sets

How to prepare

  1. 1. The vendor's free learning path

    AWS publishes the exam objectives and a learning path free of charge — the authoritative source for scope and weighting. Open the learning path (opens in a new tab)

  2. 2. Online courses

    Courses and practice questions from the directory that target exactly this exam — details, price and the provider link (affiliate) are on the course page.

  3. 3. A practice test in the exam format

    MeasureUp sells a practice test for SAA-C03 with questions in the exam format, an explanation for every answer and a timed mode; the price shows in your currency on the shop page. Affiliate link.

    Practice test for SAA-C03 at MeasureUp (opens in a new tab)
  4. Book the exam

    Delivered by Pearson VUE (test centre or online proctored). Schedule with AWS (opens in a new tab)

Affiliate disclosure: the course and practice-test links above are affiliate links — buying through them may earn us a commission at no extra cost to you. The vendor's learning path and booking links carry no commission.

Scenario questions reward elimination, not recall

Almost every question describes a situation and offers four designs that would technically work. One satisfies every stated constraint; the rest fail on a detail deliberately buried in the wording. That makes the exam a reading test as much as an architecture test, and it is why candidates who know AWS well still fail it: they recognise a familiar pattern, choose it, and miss the clause that ruled it out. Fifteen of the 65 questions are unscored trial items you cannot identify, so there is no question worth skimming. At 130 minutes the clock is generous; the constraint is attention.

Where candidates actually lose marks

  • Reading past a constraint. Words like without downtime, lowest operational overhead and existing licences each eliminate options on their own.
  • Confusing managed with serverless. Both reduce work, and the question usually cares which one removes the instance you would otherwise patch.
  • Treating cost as a tiebreak. Cost-optimised design is a scored domain in its own right, and the cheapest answer that meets the constraints is frequently the intended one.
  • Learning services rather than trade-offs. Knowing what a service does is table stakes; knowing what it costs you in coupling, latency or lock-in is what the wrong answers test.
  • Never opening an account. The scenarios describe consoles and error states. They read as abstractions if you have only watched someone else configure them.
DomainShareHow it shows up in a question
Design secure architectures30 %Which identity, which boundary, and what the least-privilege answer costs in convenience
Design resilient architectures26 %What survives the loss of a zone, a region or a dependency, and at what price
Design high-performing architectures24 %Where the bottleneck is, and which change removes it without a rebuild
Design cost-optimised architectures20 %The cheapest design that still meets every constraint above

Security leads, which surprises candidates who expected a compute-and-storage exam, and it is security in the architect's sense: boundaries, identities and encryption chosen at design time rather than a firewall added afterwards. Resilience and performance are examined as trade-offs against each other and against cost, so a question rarely lives in one domain. The most reliable habit is to underline every constraint in the stem before reading the options, because the option that fails a constraint you did not underline is the one written to catch you.

What three years costs, and how the ladder pays it

The certificate runs three years. To renew you either resit whatever version is current using the discount voucher in your account, or pass the professional tier, which renews this one without a separate sitting. That second route is the better plan for anyone staying on the platform: sit this, work for two years, and let the professional exam do the renewing. Pearson VUE delivers it in eight languages, and German is not among them; a candidate whose first language is missing can request additional time, and the request has to be made before booking. No prerequisite exists, and AWS recommends a year of designing on the platform, which is closer to a description of who passes than a rule about who may sit.

One weekend on the free tier beats a second course

Build a small network with a public and a private subnet, put a database in the private one, attach a load balancer, break the security group on purpose, and read the error. Then delete it and watch the bill. That is four scored domains in a single afternoon, and the scenarios stop being abstractions the moment you have seen the console states they describe.

What a question looks like

Written by us in the exam's style. It is not a real question from any question bank, and we do not publish those.

A retailer runs a stock-checking service on EC2 behind an Application Load Balancer in one Availability Zone. Traffic is flat for most of the year and rises sharply for six weeks. The service must survive the loss of an Availability Zone, and the team does not want to manage patching. Which design meets the requirement at the lowest operational overhead?

Three of the four options will survive the zone failure, so the discriminator is the second requirement rather than the first. Candidates who stop reading once they have found a resilient design pick a correct architecture and lose the mark. The phrase about patching is doing all the work, and it points away from anything you would have to maintain yourself.

What it costs to get and to keep

ItemAmountNote
Exam fee150 USDAWS quotes in US dollars and Pearson VUE charges the local equivalent at booking, so what leaves your account depends on the rate and your local tax (read 12 September 2026)
Retake150 USDthe full fee again, after a 14-day wait. AWS runs occasional free-retake promotions, so check before booking rather than after failing (read 12 September 2026)
Recertification every 3 yearsnot publishednot a fixed figure: you sit the then-current version at whatever it costs by then, or pass a higher exam, which renews this one for free (read 12 September 2026)

How much preparation, from where you are

You already build on AWS weekly
The gap is breadth rather than depth. You will know compute and storage and be vague on the services you have never had a reason to use, which is where the questions live. Read the exam guide as a checklist of things to go and touch once.
You administer infrastructure, but not on AWS
The concepts transfer and the vocabulary does not. Budget most of your preparation for learning which AWS service performs a job you can already describe, and open a free-tier account so the console stops being theoretical.
You are new to infrastructure entirely
This is the wrong first exam. Networking and Linux underpin nearly every scenario, and without them you will be memorising service names rather than reasoning about designs.

What passing this does not prove

  • Whether you have ever operated a production system. Nothing here is measured under load, at night, or with a customer waiting.
  • Whether you can actually build what you designed. The exam never asks you to configure anything.
  • Cost control in practice. It tests knowing the cheaper option, not noticing the forgotten instance on next month's bill.
  • Anything about other clouds. The judgement transfers; none of the specifics do.

Against the alternatives

CLF-C02AWS Certified Cloud Practitioner
Cloud Practitioner is not a prerequisite and most technical candidates should skip it. Take it first only if somebody else is paying and wants the intermediate step on record.
AZ-104Microsoft Certified: Azure Administrator Associate
The closest Microsoft equivalent by hiring weight, though it leans administrative where this one leans design. Choose by the platform your employer runs, not by which syllabus reads better.
SAP-C02AWS Certified Solutions Architect – Professional
The professional tier above this one, and a genuine step up rather than more of the same. Passing it also renews this certificate, which changes the arithmetic if you intend to climb.

SAA-C03 — quick answers

Should I take Cloud Practitioner before SAA-C03?

There is no requirement to, and for anyone with a technical background it is usually a detour. Cloud Practitioner is aimed at people who talk about the platform rather than build on it. Sit it first if an employer asks for it or you want a cheap rehearsal of the booking process, not because the ladder demands it.

How much hands-on time do I really need?

Enough that the scenarios describe things you recognise. AWS suggests a year of design experience, which is a reasonable average and a poor prescription. A better test: have you built a virtual network, attached a database, broken something and repaired it in a real account. A free-tier account is sufficient for that.

What happens if I fail?

You wait fourteen days and pay again. The score report shows performance by domain without telling you which questions you lost, so the useful move is to treat the weakest domain as a study plan rather than trying to reconstruct individual answers.

Is it available in my language?

It is offered in English, French, Italian, Japanese, Korean, Portuguese, Spanish and Chinese, and not in German. If your language is missing you can request additional time as a non-native English speaker, and you have to do that before you book rather than on the day.

Why does security carry the largest share?

Because an architect's security decisions are the ones that cannot be retrofitted cheaply. Where a boundary sits, which identity a component runs as and what is encrypted where are all chosen at design time, and the exam weights them accordingly. Candidates who prepared for a compute exam meet a paper that keeps asking who may reach what.

What comes next

Concepts this exam draws on

Glossary entries with the reason each one matters for SAA-C03.

  • Cloud Hosting

    Architect-level trade-offs between compute models are the exam's daily bread.

  • IaaS

    EC2 families, placement, storage attachments and VPC design sit in every domain.

  • Load Balancing

    ALB versus NLB, health checks and multi-AZ resilience are guaranteed questions.

  • Object Storage

    S3 as the durable tier: classes, replication, encryption, access control.

  • Serverless Computing

    Knowing when Lambda and managed services beat servers is a scoring pattern in SAA-C03.

  • Subnetting

    Virtual private cloud design starts with an address plan and the exam asks you to make one.

  • Firewall

    Security groups and network access control lists are the platform's stateful and stateless filters.

  • Least Privilege

    Secure architectures are examined through identity policies that grant only what a component needs.

  • Encryption

    At rest and in transit, with the key-management service, across the secure-architecture domain.

A vendor certificate — not a degree and not an accredited qualification. Facts are from the vendor's exam page on the date shown; prices are list prices that vary by country and tax.

Last reviewed 12 September 2026 · Getting Digital