AWS • SAA-C03
Validates the ability to design and implement distributed systems on AWS, covering secure architectures, resilient architectures, high-performing architectures, and cost-optimized architectures.
Questions
600
Duration
130 minutes
Passing Score
720/1000
Difficulty
AssociateLast Updated
Jan 2025
The AWS Certified Solutions Architect – Associate (SAA-C03) is an intermediate-level credential that validates a candidate's ability to design well-architected cloud solutions on Amazon Web Services. The exam covers the four pillars of the AWS Well-Architected Framework as they apply to solution design: security, resiliency, high performance, and cost optimization. Candidates are tested on their ability to select appropriate AWS services and configurations to meet both current business requirements and future projected needs across a wide range of architectures—from simple single-tier applications to complex, distributed, multi-account environments.
The SAA-C03 version of the exam was introduced in 2022 and reflects the current AWS service landscape, including modern serverless, container-based, and hybrid cloud patterns. It does not require deep hands-on coding experience but does expect familiarity with core AWS services such as EC2, S3, RDS, VPC, IAM, Lambda, CloudFront, Route 53, and many others. The certification is valid for three years and can be renewed by retaking the exam or by earning the AWS Certified Solutions Architect – Professional, which automatically recertifies this associate-level credential.
This certification is designed for individuals who work in or aspire to a solutions architect role, typically with at least one year of hands-on experience designing cloud solutions using AWS services. It is well-suited for cloud engineers, systems architects, DevOps engineers, and infrastructure professionals who regularly make decisions about AWS service selection, architecture patterns, and deployment strategies.
Candidates with 1–3 years of general IT experience (networking, systems administration, or software development) who are transitioning into cloud roles also pursue this certification as a foundational cloud credential. Those with no prior IT experience are generally advised to first complete the AWS Certified Cloud Practitioner exam before attempting the SAA-C03.
AWS does not enforce any formal prerequisites for the SAA-C03 exam, but strongly recommends at least one year of hands-on experience designing distributed systems on AWS. Candidates should be comfortable navigating the AWS Management Console and AWS CLI, and should have practical familiarity with core service categories including compute (EC2, Lambda), storage (S3, EBS, EFS), databases (RDS, DynamoDB), networking (VPC, Route 53, CloudFront), and identity and access management (IAM).
A working understanding of general IT concepts—such as DNS, TCP/IP networking, relational vs. NoSQL databases, and load balancing—is also important. Candidates who are new to AWS should consider completing AWS Skill Builder's foundational courses or the AWS Cloud Practitioner certification before sitting for this exam. Basic familiarity with programming concepts is helpful but not required.
The SAA-C03 exam consists of 65 questions delivered in 130 minutes, of which 50 are scored and 15 are unscored pilot questions used by AWS to evaluate future exam content. The unscored questions are not identified during the exam, so all questions should be treated equally. Question types include single-response multiple choice (one correct answer from four options) and multiple-response questions (two or more correct answers from five or more options).
The exam is available through Pearson VUE, either at a physical testing center or via online proctoring. It is offered in ten languages: English, French (France), Italian, Japanese, Korean, Portuguese (Brazil), Spanish (Latin America), Spanish (Spain), Simplified Chinese, and Traditional Chinese. Scores are reported on a scale of 100–1,000 using a compensatory scoring model, meaning candidates do not need to achieve a passing score in each individual domain. The minimum passing score is 720. The exam fee is $150 USD.
The AWS Certified Solutions Architect – Associate is consistently ranked among the highest-value IT certifications globally. It is the most widely held AWS credential, with approximately 54% of AWS professionals holding it according to Jefferson Frank's annual survey. Common job titles pursued by SAA-C03 holders include Cloud Solutions Architect, Cloud Engineer, DevOps Engineer, and Cloud Infrastructure Engineer. In the United States, professionals with this certification report average salaries ranging from approximately $125,000 to over $155,000 per year depending on experience, geography, and employer, with some senior roles reaching $175,000 or more.
The certification is recognized across industries including financial services, healthcare, government, and technology, and is frequently listed as a preferred or required qualification in cloud job postings. It serves as a strong foundation for advancing to more specialized AWS certifications such as the Solutions Architect – Professional, DevOps Engineer – Professional, or specialty-level exams in areas like security, networking, or machine learning. Relative to comparable cloud credentials from Microsoft (AZ-104) and Google (Professional Cloud Architect), the SAA-C03 is broadly considered the most recognized associate-level cloud architecture certification in the market.
1. VendorAccess SecureCo has hired an external vendor who needs to perform work in the company's AWS account. The vendor uses an automated tool hosted in their own AWS account and does not have IAM access to the company's account. How should a solutions architect grant secure, temporary access to the vendor's tool?
2. EKSDataPrivacy has deployed a Java Spring Boot application as a pod running on Amazon Elastic Kubernetes Service (Amazon EKS) within private subnets. This application is required to write data to an Amazon DynamoDB table. A solutions architect must ensure that the application can securely interact with the DynamoDB table without its traffic traversing the public internet. Which two configuration steps are essential to achieve this? (Choose TWO)
Select all that apply3. ServerlessRepoDeploy wants to allow developers to easily discover and deploy pre-approved serverless applications (e.g., Lambda functions, API Gateway configurations) within their AWS accounts. They need a centralized repository for these applications. Which AWS service facilitates this?
4. ContentShare Pro is evolving its web application, initially hosted on a single Amazon EC2 instance with user documents on an Amazon EBS volume. To enhance resilience and capacity, they've introduced a second EC2 instance and EBS volume in a separate Availability Zone, with an Application Load Balancer distributing traffic. Post-deployment, users find that refreshing the site shows only a portion of their documents at any given time. What should a solutions architect suggest to ensure users can view all their documents simultaneously?
5. CentralBackup Strategy needs to implement a backup plan for its Amazon EC2 data and multiple Amazon S3 buckets. Due to strict regulatory requirements, the company must retain all backup files for a specific, unalterable time period. During this retention period, the files must not be modified or deleted by any user or process. Which AWS backup solution will meet these stringent immutability and retention requirements?
All exams included • Cancel anytime