AWS · SAA-C03
Validates the ability to design and implement distributed systems on AWS, covering secure architectures, resilient architectures, high-performing architectures, and cost-optimized architectures.
Practice Questions
600
≈ 9 practice exams
Duration
130 minutes
Passing Score
720/1000
Difficulty
AssociateLast Updated
Jan 2025
This SAA-C03 practice exam mirrors AWS's official weighting: Design Secure Architectures carries the largest share at 30 percent of scored content, followed by Design Resilient Architectures at 26 percent, Design High-Performing Architectures at 24 percent, and Design Cost-Optimized Architectures at 20 percent. With 600 questions in the bank, each domain gets proportional depth instead of an even split that would leave you under-prepared for the security-heavy real exam.
On test day you face 65 questions in 130 minutes: 50 that count toward your score and 15 unscored questions AWS uses to evaluate future exam content, mixed in without being identified. Scoring is scaled from 100 to 1,000, and you need 720 to pass. AWS uses a compensatory model, so a stronger domain can offset a weaker one as long as your overall score clears the bar, but the multiple-choice and multiple-response questions are both scenario-based, so practicing under a timer matters as much as knowing the services.
AWS recommends at least 1 year of hands-on experience designing cloud solutions before attempting SAA-C03, though there is no formal prerequisite. The certification is valid for 3 years; you recertify by retaking the current exam version, passing a higher-level AWS exam, or completing qualifying AWS Skill Builder training for a 1-year extension. Start with the 30 free questions, then work through the full 600-question bank until your accuracy holds steady across all four domains.
The AWS Certified Solutions Architect – Associate (SAA-C03) is an intermediate-level credential that validates a candidate's ability to design well-architected cloud solutions on Amazon Web Services. The exam covers the four pillars of the AWS Well-Architected Framework as they apply to solution design: security, resiliency, high performance, and cost optimization. Candidates are tested on their ability to select appropriate AWS services and configurations to meet both current business requirements and future projected needs across a wide range of architectures—from simple single-tier applications to complex, distributed, multi-account environments.
The SAA-C03 version of the exam was introduced in 2022 and reflects the current AWS service landscape, including modern serverless, container-based, and hybrid cloud patterns. It does not require deep hands-on coding experience but does expect familiarity with core AWS services such as EC2, S3, RDS, VPC, IAM, Lambda, CloudFront, Route 53, and many others. The certification is valid for three years and can be renewed by retaking the exam or by earning the AWS Certified Solutions Architect – Professional, which automatically recertifies this associate-level credential.
This certification is designed for individuals who work in or aspire to a solutions architect role, typically with at least one year of hands-on experience designing cloud solutions using AWS services. It is well-suited for cloud engineers, systems architects, DevOps engineers, and infrastructure professionals who regularly make decisions about AWS service selection, architecture patterns, and deployment strategies.
Candidates with 1–3 years of general IT experience (networking, systems administration, or software development) who are transitioning into cloud roles also pursue this certification as a foundational cloud credential. Those with no prior IT experience are generally advised to first complete the AWS Certified Cloud Practitioner exam before attempting the SAA-C03.
AWS does not enforce any formal prerequisites for the SAA-C03 exam, but strongly recommends at least one year of hands-on experience designing distributed systems on AWS. Candidates should be comfortable navigating the AWS Management Console and AWS CLI, and should have practical familiarity with core service categories including compute (EC2, Lambda), storage (S3, EBS, EFS), databases (RDS, DynamoDB), networking (VPC, Route 53, CloudFront), and identity and access management (IAM).
A working understanding of general IT concepts—such as DNS, TCP/IP networking, relational vs. NoSQL databases, and load balancing—is also important. Candidates who are new to AWS should consider completing AWS Skill Builder's foundational courses or the AWS Cloud Practitioner certification before sitting for this exam. Basic familiarity with programming concepts is helpful but not required.
The SAA-C03 exam consists of 65 questions delivered in 130 minutes, of which 50 are scored and 15 are unscored pilot questions used by AWS to evaluate future exam content. The unscored questions are not identified during the exam, so all questions should be treated equally. Question types include single-response multiple choice (one correct answer from four options) and multiple-response questions (two or more correct answers from five or more options).
The exam is available through Pearson VUE, either at a physical testing center or via online proctoring. It is offered in ten languages: English, French (France), Italian, Japanese, Korean, Portuguese (Brazil), Spanish (Latin America), Spanish (Spain), Simplified Chinese, and Traditional Chinese. Scores are reported on a scale of 100–1,000 using a compensatory scoring model, meaning candidates do not need to achieve a passing score in each individual domain. The minimum passing score is 720. The exam fee is $150 USD.
The AWS Certified Solutions Architect – Associate is consistently ranked among the highest-value IT certifications globally. It is the most widely held AWS credential, with approximately 54% of AWS professionals holding it according to Jefferson Frank's annual survey. Common job titles pursued by SAA-C03 holders include Cloud Solutions Architect, Cloud Engineer, DevOps Engineer, and Cloud Infrastructure Engineer. In the United States, professionals with this certification report average salaries ranging from approximately $125,000 to over $155,000 per year depending on experience, geography, and employer, with some senior roles reaching $175,000 or more.
The certification is recognized across industries including financial services, healthcare, government, and technology, and is frequently listed as a preferred or required qualification in cloud job postings. It serves as a strong foundation for advancing to more specialized AWS certifications such as the Solutions Architect – Professional, DevOps Engineer – Professional, or specialty-level exams in areas like security, networking, or machine learning. Relative to comparable cloud credentials from Microsoft (AZ-104) and Google (Professional Cloud Architect), the SAA-C03 is broadly considered the most recognized associate-level cloud architecture certification in the market.
5 sample questions with answers and explanations. The full bank has 600 questions, enough for 9 full-length practice exams.
Preview — answers shown1. How can a solutions architect ensure that all objects uploaded to a specific Amazon S3 bucket are encrypted by default using server-side encryption?
Explanation
Amazon S3 supports default encryption at the bucket level. By enabling this feature in the bucket properties, you can specify that all new objects uploaded to the bucket (if not otherwise encrypted by the client) will be automatically encrypted using either Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3) or Server-Side Encryption with AWS Key Management Service (SSE-KMS). This ensures all objects are encrypted at rest without requiring changes to the uploading application.
2. SecureVault Inc. stores critical data in an Amazon S3 bucket and needs to protect this data from accidental deletion by any user. Which combination of S3 features should a solutions architect implement to meet these requirements? (Choose TWO)
Multiple correct answersExplanation
S3 Versioning keeps multiple versions of an object in the same bucket, so if an object is deleted or overwritten, previous versions can be recovered. MFA Delete adds an extra layer of security by requiring a Multi-Factor Authentication code for an object version to be permanently deleted or for versioning to be suspended, protecting against accidental or unauthorized deletions.
3. EKSClusterScaling Inc. runs its containerized applications using Amazon Elastic Kubernetes Service (Amazon EKS). The workload for these applications is not consistent throughout the day, experiencing periods of high demand and periods of low activity. The company needs a solution that allows the Amazon EKS cluster (both the number of pods and the number of worker nodes) to scale in and out dynamically according to the fluctuating workload, with the LEAST amount of operational overhead. Which combination of Kubernetes and AWS features should be implemented? (Choose TWO)
Multiple correct answersExplanation
B) The Kubernetes Horizontal Pod Autoscaler (HPA) is a standard Kubernetes component that automatically scales the number of pods in a deployment, replication controller, replica set, or stateful set based on observed CPU utilization or custom metrics. This allows the application itself (the pods) to scale in and out based on demand. C) The Kubernetes Cluster Autoscaler is a component that works with cloud providers like AWS to automatically adjust the size of your Kubernetes cluster (the number of worker nodes). When HPA scales up pods and there aren't enough nodes to run them, the Cluster Autoscaler provisions new nodes. Conversely, when nodes are underutilized and their pods can be consolidated onto other nodes, the Cluster Autoscaler terminates the unneeded nodes. This combination provides comprehensive autoscaling for both pods and nodes in an EKS cluster with minimal operational overhead, as these are standard, well-supported autoscaling mechanisms.
4. CSVSys Corp has an application placing hundreds of 1 GB .csv files into an S3 bucket hourly. Each time a file is uploaded, it needs conversion to Apache Parquet and the output stored in another S3 bucket. What's the LEAST operationally burdensome solution?
Explanation
This combines serverless components for efficiency. An S3 PUT event can trigger an AWS Lambda function. This Lambda function can then programmatically start an AWS Glue ETL job. The Glue job itself, being fully managed, can read the .csv file from S3, convert it to Parquet, and write the output to the target S3 bucket. This approach minimizes infrastructure management and scales well with the number of incoming files.
5. SecureDB Corp. is developing a two-tier web application on AWS. The application, deployed on an EC2 instance, connects directly to a backend Amazon RDS database. They must avoid hardcoding database credentials in the application and need a solution for automatic, regular credential rotation. Which approach offers the LEAST operational overhead?
Explanation
AWS Secrets Manager is specifically designed for managing secrets like database credentials. It integrates natively with Amazon RDS for automatic credential rotation, which significantly reduces operational overhead. The application on the EC2 instance can retrieve these credentials at runtime by using its IAM role, avoiding hardcoded credentials.
65 questions in 130 minutes: 50 scored multiple-choice or multiple-response questions plus 15 unscored questions AWS uses to evaluate future exam content. You are not told which is which.
720 on AWS’s scaled score of 100 to 1,000. AWS uses a compensatory scoring model, so you only need to clear the overall bar rather than pass every domain individually.
$150 USD, though the exact price varies by the country or region where you sit the exam.
Design Secure Architectures (30%), Design Resilient Architectures (26%), Design High-Performing Architectures (24%), and Design Cost-Optimized Architectures (20%).
No formal prerequisites, but AWS recommends at least 1 year of hands-on experience designing cloud solutions on AWS before attempting it.
Yes, after 3 years. You can recertify by retaking the current SAA-C03 exam, passing a higher-level AWS role-based exam, or completing qualifying AWS Skill Builder training for a 1-year extension.
Two types: multiple choice, with one correct answer and three distractors, and multiple response, with two or more correct answers among five or more options. Both use scenario-based wording rather than direct recall.
AWS does not publish a pass rate. The exam is scenario- and trade-off-heavy rather than fact-recall, so candidates who have only read documentation without hands-on practice tend to struggle most on Design Secure Architectures, the largest single weighting at 30%.
AWS Certified Machine Learning Engineer - Associate (MLA-C01)
MLA-C01 · 582 questions
AWS Certified Machine Learning - Specialty (MLS-C01)
MLS-C01 · 860 questions
AWS Certified Security - Specialty (SCS-C03)
SCS-C03 · 2069 questions
AWS Certified Solutions Architect - Professional (SAP-C02)
SAP-C02 · 592 questions
AWS Certified SysOps Administrator - Associate (SOA-C02)
SOA-C02 · 2141 questions
AWS Certified Advanced Networking - Specialty (ANS-C01)
ANS-C01 · 1453 questions
$17.99
One-time access to this exam