AWS Solutions Architect Associate
AWS SAA-C03 Learning Path
Follow this structured learning path to prepare for the AWS Certified Solutions Architect Associate exam. This page is your main SAA-C03 study hub. Start with AWS fundamentals, the Well-Architected Framework, and the shared responsibility model, then move through IAM, networking, compute, storage, databases, high availability, serverless, monitoring, cost optimisation, comparison topics, and full practice exams.
How to Use This Learning Path
Study each topic in order. For every topic, read the deep dive first, then take the matching quiz. Review every wrong answer and return to weak areas before moving to full practice exams.
- Start with the foundation concepts.
- Read the topic deep dive.
- Understand when to choose each AWS service.
- Take the matching topic quiz.
- Review explanations for correct and incorrect answers.
- Repeat weak topics before attempting full mock exams.
Step-by-Step Study Plan
AWS Fundamentals and Exam Mindset
Before starting individual AWS services, understand the basic AWS building blocks, the Well-Architected Framework, and the shared responsibility model. These concepts appear across security, resilience, performance, cost, and operational questions.
- AWS Regions, Availability Zones, and edge locations
- AWS global infrastructure basics
- Well-Architected Framework pillars
- Shared responsibility model
- Scenario-based exam keywords
IAM and Security Foundations
Start with IAM because almost every AWS architecture question includes permissions, roles, policies, least privilege, or secure access.
- IAM users, groups, and roles
- Identity-based and resource-based policies
- Policy evaluation logic
- IAM Access Analyzer
- IAM Identity Center
VPC and Networking
Learn how AWS networking works, including public and private subnets, routing, internet access, private access, and network security.
- VPCs and subnets
- Route tables
- Internet Gateway and NAT Gateway
- Security Groups vs NACLs
- VPC endpoints
EC2 and Compute
Study EC2 because many SAA-C03 questions test compute choices, pricing models, security, scaling, and high availability.
- Instance types and AMIs
- User data and metadata
- On-Demand, Reserved, Spot, and Savings Plans
- Security groups and key pairs
- Placement groups
S3 and Storage
Learn object storage, storage classes, lifecycle policies, durability, security, encryption, and replication.
- S3 buckets and objects
- Storage classes
- Lifecycle policies
- Versioning and replication
- Bucket policies and encryption
RDS and Relational Databases
Understand managed relational databases, availability, read scaling, backups, snapshots, encryption, and Aurora basics.
- RDS engines
- Multi-AZ deployments
- Read Replicas
- Backups and snapshots
- RDS Proxy and Aurora basics
DynamoDB
Study DynamoDB for NoSQL, high-scale, low-latency, serverless database scenarios.
- Tables, items, and attributes
- Partition key and sort key
- GSI and LSI
- On-demand vs provisioned capacity
- DAX and global tables
Auto Scaling
Learn how AWS automatically adjusts compute capacity to match demand while improving availability and cost efficiency.
- Auto Scaling groups
- Launch templates
- Scaling policies
- Health checks
- Lifecycle hooks
Elastic Load Balancing
Study load balancing for highly available and fault-tolerant web applications.
- Application Load Balancer
- Network Load Balancer
- Gateway Load Balancer
- Listeners and target groups
- Health checks
Route 53
Learn DNS routing, hosted zones, routing policies, health checks, and failover patterns.
- Hosted zones
- DNS records
- Simple, weighted, latency, and failover routing
- Health checks
- DNS-based resilience
CloudFront
Study global content delivery, caching, edge locations, origins, and secure access to origins.
- Edge locations
- Origins and distributions
- Caching behavior
- Origin Access Control
- Global low-latency delivery
CloudWatch
Learn monitoring, logs, metrics, alarms, dashboards, and how CloudWatch differs from CloudTrail.
- Metrics
- Alarms
- Logs and metric filters
- Dashboards
- CloudWatch vs CloudTrail
Lambda and Serverless
Learn serverless compute, event-driven patterns, execution roles, API Gateway, and SQS integrations.
- Lambda functions
- Execution roles
- Triggers and events
- API Gateway integration
- Timeouts and concurrency
SQS and SNS
Learn application integration, decoupling, queues, publish/subscribe, fanout, retries, and dead-letter queues.
- SQS Standard and FIFO queues
- Dead-letter queues
- SNS topics and subscriptions
- SNS to SQS fanout
- Decoupled architecture
CloudFormation
Study infrastructure as code, templates, stacks, StackSets, nested stacks, and dependencies.
- Templates
- Stacks
- Parameters and outputs
- DependsOn
- StackSets and nested stacks
Security Services
Review AWS security services that often appear in architecture, encryption, governance, auditing, and compliance questions.
- KMS
- Secrets Manager
- CloudTrail
- AWS Config
- Security Hub and Macie
Cost Optimization
Learn how to choose cost-effective services, pricing models, storage tiers, scaling strategies, and monitoring tools.
- Savings Plans and Reserved Instances
- Spot Instances
- S3 lifecycle rules
- Right sizing
- Cost Explorer and Budgets
Comparison Topics
Finish with comparison topics because SAA-C03 often asks you to choose the best service from similar options.
- S3 vs EBS vs EFS
- Security Group vs NACL
- Multi-AZ vs Read Replica
- SQS vs SNS
- CloudWatch vs CloudTrail
Full Practice Exams
After completing the deep dives and topic quizzes, move to timed full practice exams.
- Mixed-domain questions
- Timed exam practice
- Review weak topics
- Retake until consistent
- Build exam confidence
Recommended Study Order
- Start with AWS fundamentals, the Well-Architected Framework, and the shared responsibility model.
- Learn IAM, security, encryption, access control, and least privilege design.
- Study VPC networking, subnets, route tables, gateways, endpoints, and security controls.
- Understand compute, storage, and database service selection for real architecture scenarios.
- Move into high availability, scaling, load balancing, DNS, monitoring, and global content delivery.
- Study serverless, messaging, infrastructure as code, cost optimisation, and comparison topics.
- Read each topic deep dive from the Learning Path page.
- Practise topic quizzes for each major AWS service.
- Complete full mock exams under timed conditions.
- Review wrong answers and revise weak topics before attempting the next test.
Suggested 4-Week Study Plan
- Week 1: AWS fundamentals, IAM, VPC, EC2, and S3.
- Week 2: RDS, DynamoDB, Auto Scaling, and ELB.
- Week 3: Route 53, CloudFront, CloudWatch, Lambda, SQS, and SNS.
- Week 4: CloudFormation, Security Services, Cost Optimisation, and Comparison Topics.
- Final Review: Take full practice exams and revise weak areas.
What Makes This Exam Different?
The SAA-C03 exam is not only about remembering service names. It tests whether you can choose the best architecture for a scenario. Pay attention to words like highly available, fault tolerant, cost-effective, serverless, least operational overhead, secure, durable, scalable, and low latency.
When Are You Ready for Practice Exams?
- You understand when to choose Multi-AZ instead of Read replicas.
- You know the difference between Security Groups and Network ACLs.
- You can choose between S3, EBS, and EFS.
- You understand when to use SQS, SNS, Lambda, and API Gateway.
- You can identify cost, security, availability, and low operational overhead keywords.
Quick Service Selection Tips
Many SAA-C03 questions are about choosing the best AWS service for a scenario. Use these quick rules when reviewing questions and explanations.
- Choose IAM roles instead of long-term access keys when AWS services need permissions.
- Choose NAT Gateway when private subnet resources need outbound internet access.
- Choose VPC endpoints when private resources need private access to supported AWS services.
- Choose Multi-AZ when the question asks for high availability or automatic failover.
- Choose Read Replicas when the question asks for read scaling.
- Choose S3 lifecycle policies when the question asks for automatic storage cost reduction.
- Choose ALB for HTTP/HTTPS routing, path-based routing, and web applications.
- Choose NLB for very high-performance TCP, UDP, or TLS traffic.
- Choose SQS when the question asks for message buffering, retries, or decoupling.
- Choose SNS when the question asks for publish/subscribe notifications or fanout.
- Choose Lambda when the question asks for event-driven compute with low operational overhead.
- Choose DynamoDB when the question asks for low-latency NoSQL at scale.
- Choose CloudFront when the question asks for global low-latency content delivery.
- Choose Route 53 when the question asks for DNS routing, failover, or latency-based routing.
- Choose CloudFormation when the question asks for infrastructure as code.
- Choose KMS when the question asks for managed encryption keys.
Common Exam Mistakes to Avoid
These are common traps in AWS Solutions Architect Associate questions. Review them before taking full practice exams.
- Confusing Security Groups with Network ACLs.
- Using NAT Gateway for inbound internet traffic.
- Choosing Multi-AZ when the question asks for read scaling.
- Choosing Read Replicas when the question asks for automatic failover.
- Making databases public instead of placing them in private subnets.
- Using long-term access keys when IAM roles are the better answer.
- Ignoring cost keywords such as infrequently accessed, archive, predictable, or interruptible.
- Choosing SNS when the question needs message buffering with retries.
- Choosing SQS when the question needs fanout to many subscribers.
- Forgetting that CloudFront improves global performance through edge caching.
- Forgetting that CloudTrail is for auditing API activity, while CloudWatch is for metrics, logs, and alarms.
- Choosing a complex solution when the question asks for the least operational overhead.
How to Review Practice Exam Results
Do not only check your score after a practice exam. The most important part is reviewing why each answer was correct or incorrect, then returning to the matching topic.
- If you miss permission questions, review IAM and Security Services.
- If you miss subnet, routing, or access questions, review VPC and networking.
- If you miss high availability questions, review ELB, Auto Scaling, Route 53, and RDS Multi-AZ.
- If you miss storage questions, review S3, EBS, EFS, lifecycle policies, and encryption.
- If you miss database questions, review RDS, Aurora, DynamoDB, Multi-AZ, and Read Replicas.
- If you miss serverless questions, review Lambda, API Gateway, SQS, and SNS.
- If you miss monitoring questions, review CloudWatch, CloudTrail, AWS Config, and EventBridge.
- If you miss cost questions, review savings plans, reserved instances, spot instances, and S3 storage classes.
A good target is not only a high score but also understanding why the wrong options were wrong. That is how you improve faster before the real exam.
Ready to practise?
Start with topic quizzes first. After you complete the main learning path, take full, timed practice exams and use your results to revise weak areas.
Go to Practice Exams
0 Comments