AWS • SAA-C03
Validates the ability to design and implement distributed systems on AWS, covering secure architectures, resilient architectures, high-performing architectures, and cost-optimized architectures.
Questions
600
Duration
130 minutes
Passing Score
720/1000
Difficulty
AssociateLast Updated
Jan 2025
The AWS Certified Solutions Architect – Associate (SAA-C03) is an intermediate-level credential that validates a candidate's ability to design well-architected cloud solutions on Amazon Web Services. The exam covers the four pillars of the AWS Well-Architected Framework as they apply to solution design: security, resiliency, high performance, and cost optimization. Candidates are tested on their ability to select appropriate AWS services and configurations to meet both current business requirements and future projected needs across a wide range of architectures—from simple single-tier applications to complex, distributed, multi-account environments.
The SAA-C03 version of the exam was introduced in 2022 and reflects the current AWS service landscape, including modern serverless, container-based, and hybrid cloud patterns. It does not require deep hands-on coding experience but does expect familiarity with core AWS services such as EC2, S3, RDS, VPC, IAM, Lambda, CloudFront, Route 53, and many others. The certification is valid for three years and can be renewed by retaking the exam or by earning the AWS Certified Solutions Architect – Professional, which automatically recertifies this associate-level credential.
This certification is designed for individuals who work in or aspire to a solutions architect role, typically with at least one year of hands-on experience designing cloud solutions using AWS services. It is well-suited for cloud engineers, systems architects, DevOps engineers, and infrastructure professionals who regularly make decisions about AWS service selection, architecture patterns, and deployment strategies.
Candidates with 1–3 years of general IT experience (networking, systems administration, or software development) who are transitioning into cloud roles also pursue this certification as a foundational cloud credential. Those with no prior IT experience are generally advised to first complete the AWS Certified Cloud Practitioner exam before attempting the SAA-C03.
AWS does not enforce any formal prerequisites for the SAA-C03 exam, but strongly recommends at least one year of hands-on experience designing distributed systems on AWS. Candidates should be comfortable navigating the AWS Management Console and AWS CLI, and should have practical familiarity with core service categories including compute (EC2, Lambda), storage (S3, EBS, EFS), databases (RDS, DynamoDB), networking (VPC, Route 53, CloudFront), and identity and access management (IAM).
A working understanding of general IT concepts—such as DNS, TCP/IP networking, relational vs. NoSQL databases, and load balancing—is also important. Candidates who are new to AWS should consider completing AWS Skill Builder's foundational courses or the AWS Cloud Practitioner certification before sitting for this exam. Basic familiarity with programming concepts is helpful but not required.
The SAA-C03 exam consists of 65 questions delivered in 130 minutes, of which 50 are scored and 15 are unscored pilot questions used by AWS to evaluate future exam content. The unscored questions are not identified during the exam, so all questions should be treated equally. Question types include single-response multiple choice (one correct answer from four options) and multiple-response questions (two or more correct answers from five or more options).
The exam is available through Pearson VUE, either at a physical testing center or via online proctoring. It is offered in ten languages: English, French (France), Italian, Japanese, Korean, Portuguese (Brazil), Spanish (Latin America), Spanish (Spain), Simplified Chinese, and Traditional Chinese. Scores are reported on a scale of 100–1,000 using a compensatory scoring model, meaning candidates do not need to achieve a passing score in each individual domain. The minimum passing score is 720. The exam fee is $150 USD.
The AWS Certified Solutions Architect – Associate is consistently ranked among the highest-value IT certifications globally. It is the most widely held AWS credential, with approximately 54% of AWS professionals holding it according to Jefferson Frank's annual survey. Common job titles pursued by SAA-C03 holders include Cloud Solutions Architect, Cloud Engineer, DevOps Engineer, and Cloud Infrastructure Engineer. In the United States, professionals with this certification report average salaries ranging from approximately $125,000 to over $155,000 per year depending on experience, geography, and employer, with some senior roles reaching $175,000 or more.
The certification is recognized across industries including financial services, healthcare, government, and technology, and is frequently listed as a preferred or required qualification in cloud job postings. It serves as a strong foundation for advancing to more specialized AWS certifications such as the Solutions Architect – Professional, DevOps Engineer – Professional, or specialty-level exams in areas like security, networking, or machine learning. Relative to comparable cloud credentials from Microsoft (AZ-104) and Google (Professional Cloud Architect), the SAA-C03 is broadly considered the most recognized associate-level cloud architecture certification in the market.
5 sample questions with correct answers and explanations. Start a practice session to test yourself across all 600 questions.
1. DynamicSiteBuilder is creating a new dynamic ordering website. Key requirements include minimizing server maintenance and patching efforts. The website must be highly available and capable of rapidly scaling its read and write capacity to accommodate fluctuating user demand. Which architectural solution will best meet these combined requirements?
Explanation
This solution leverages a fully serverless architecture, which inherently minimizes server maintenance and patching responsibilities. Hosting static content in Amazon S3 and delivering it via Amazon CloudFront ensures scalability and low latency for static assets. Amazon API Gateway and AWS Lambda provide a highly scalable and resilient backend for dynamic content and business logic, automatically scaling with demand. Amazon DynamoDB with on-demand capacity mode allows the database to scale its read and write throughput automatically based on actual traffic, making it ideal for handling unpredictable and rapidly changing user demand with high availability.
2. CrossAccountDynamoRead: A retail company operates with several distinct business units, each managing its own AWS account. These accounts are part of a single parent organization in AWS Organizations. Each business unit's IT team monitors its product inventory levels in an Amazon DynamoDB table located within that team's own AWS account. The company is now deploying a central inventory reporting application into a shared, central AWS account. This central application must have the capability to read items from all the individual business unit teams' DynamoDB tables. Which authentication and authorization option will meet these cross-account read requirements MOST securely and efficiently?
Explanation
This approach utilizes IAM roles for secure cross-account access, adhering to the principle of least privilege. Each business unit account creates an IAM role (`BU_DynamoDB_ReadRole`) that grants read-only access only to its own DynamoDB table. The trust policy of this role is configured to explicitly trust a specific IAM role (`Central_App_Role`) in the central inventory application account. The central application, when running under its `Central_App_Role`, can then use the AWS Security Token Service (STS) `AssumeRole` API operation to obtain temporary security credentials for each `BU_DynamoDB_ReadRole`. These temporary credentials allow the central application to securely read data from the respective DynamoDB tables in the business unit accounts without needing to manage long-term credentials or overly permissive access.
3. CPUTarget Co. runs an application on EC2 instances across multiple Availability Zones. These instances are part of an Auto Scaling group fronted by an Application Load Balancer. The application's optimal performance is achieved when the CPU utilization of the EC2 instances is maintained at or near 40%. How can a solutions architect ensure this desired performance level is consistently maintained across all instances in the group?
Explanation
Target tracking scaling policies in AWS Auto Scaling allow you to select a specific scaling metric (such as average CPU utilization) and define a target value for that metric. The Auto Scaling group will then automatically adjust the number of EC2 instances (scaling out or in) as necessary to keep the chosen metric at, or very close to, the specified target value. Setting the target for average CPU utilization to 40% will dynamically maintain the desired performance level.
4. AppFleet Production runs a production application on EC2 instances, reading data from an SQS queue and processing messages in parallel. Message volume is unpredictable with intermittent traffic. The application must continually process messages without downtime. What is the MOST cost-effective EC2 purchasing solution?
Explanation
This hybrid approach balances cost and availability. Reserved Instances (RIs) provide significant discounts for the baseline capacity that is always needed. Spot Instances offer the largest cost savings for handling unpredictable, intermittent traffic spikes, assuming the message processing can tolerate potential interruptions (SQS allows for retries). This combination is more cost-effective than On-Demand alone or a Savings Plan that might not fully cover peak bursts.
5. CostOptimize SQSJob runs a script on an EC2 instance to poll and process messages from an SQS queue. The company aims to reduce operational costs while ensuring the system can handle a growing number of messages in the queue. What should a solutions architect recommend?
Explanation
AWS Lambda is a serverless compute service that runs code in response to events (like messages arriving in an SQS queue) and automatically manages the underlying compute resources. This eliminates the operational overhead of managing an EC2 instance. Lambda scales automatically based on the number of incoming messages, ensuring it can handle a growing workload. You pay only for the compute time consumed, which can be highly cost-effective for event-driven processing compared to a continuously running EC2 instance.
One-time access to this exam