SA Pro Exam Readiness: A Pragmatic SAP-C02 Checklist

The difference between knowing AWS and passing the AWS Certified Solutions Architect Professional exam (SAP-C02) is rarely a knowledge gap. It is a decision-speed gap under scenario pressure. This guide gives you a concrete readiness scorecard, a 14-day pre-exam plan, and the signals that tell you whether to schedule or keep studying.

Readiness means decision speed, not service recall

SAP-C02 tests whether you can design and improve AWS architectures under scenario pressure. If you hesitate to choose between Transit Gateway and Direct Connect Gateway, or cannot explain why an SCP alone will not block an S3 presigned URL, you are not ready. Readiness is observable.

Scorecard: the four domains that matter

Use this scorecard as a test. For each row, rate yourself from 1 (cannot explain) to 5 (can defend trade-offs in a whiteboard session).

1. Design Solutions for Organizational Complexity

Multi-account AWS Organizations, SCPs, RAM, CloudFormation StackSets, Control Tower

Hybrid DNS resolution with Route 53 Resolver endpoints

Identity federation, permission boundaries, delegated administration

Cost controls and chargeback at scale

2. Design for New Solutions

Event-driven architectures on EventBridge, Step Functions, SQS, Kinesis

Container and serverless deployment strategies

Data ingestion and analytics pipelines

Multi-region, disaster recovery, and high availability patterns

3. Continuous Improvement for Existing Solutions

Observability with CloudWatch, X-Ray, and centralized logging

Backup and restore strategies

Remediation automation and incident response

Rightsizing and cost optimization

4. Accelerate Workload Migration and Modernization

AWS Migration Hub, Application Migration Service, Database Migration Service

Data transfer with Snow Family, Storage Gateway, DataSync, Transfer Family

Hybrid connectivity: Site-to-Site VPN, Direct Connect, Transit Gateway

Legacy modernization patterns

If you score 4 or higher in every row, schedule the exam. If not, use the 14-day plan below.

The 14-day SAP-C02 readiness plan

Use this plan after you have completed broad study, not as your first exposure to AWS services.

Days 1–3: Diagnose, do not guess

Take a full-length, timed practice exam from a reputable source such as Tutorials Dojo or AWS Skill Builder. Review every answer, especially ones you got correct by elimination. Map incorrect questions to the official AWS exam guide. Identify three weak domains.

Days 4–8: Deep review of high-leverage areas

Spend 60–90 minutes per day on the topics that cause most failures:

Hybrid networking: Direct Connect with VPN backup, BGP routing, Transit Gateway route tables, Route 53 Resolver rules

Multi-account governance: SCPs, RAM, IAM permission boundaries, Organizations structure

Migration: MGN, DMS, DataSync, Snowball Edge, cutover planning

Cost and resilience tradeoffs: Pilot Light, Warm Standby, Multi-Site Active/Active

Read the AWS Well-Architected Framework and re:Invent talks on networking and migrations. Do not just watch. Rewrite each architecture in your own words.

Days 9–11: Build small proof architectures

Use a sandbox account:

Build a multi-account landing zone with Control Tower or CloudFormation StackSets

Deploy a Transit Gateway with shared services VPC and spoke VPCs

Simulate a failover using Route 53 health checks and cross-region read replicas

Write an SCP that blocks public S3 bucket creation and verify it works

Keep a decision journal with patterns: When is PrivateLink better than VPC peering? When is DMS better than SCT? When is a VPN enough instead of Direct Connect?

Days 12–13: Timed practice and decision cards

Take two more full practice exams. Target 80% or higher. Create decision cards for repeated patterns:

Multi-account logging: use centralized logging account with KMS and S3 bucket policies

On-premises to AWS migration: prefer Application Migration Service for lift-and-shift; DMS for database migration

Cross-account VPC connectivity: use VPC peering or Transit Gateway, not PrivateLink for VPC-to-VPC traffic

Day 14: Stop learning

Review your decision cards, then stop. Sleep and schedule the exam for the time of day when your focus is highest.

Signals you are not ready

Avoid scheduling if these are true:

You have completed a video course but have not taken a timed practice exam

You cannot explain why an SCP does not apply to service-linked roles

You cannot choose between a NAT gateway and VPC endpoints in a cost-sensitive architecture

You memorize service limits instead of design tradeoffs

Test-day decision filters

SAP-C02 questions are long. Most distractors fail on one of four constraints:

1. Operational overhead — does the answer add moving parts without resilience benefit?

2. Cost — does the answer over-provision or ignore the cheapest compliant option?

3. Security — does the answer grant excessive permissions or ignore encryption?

4. Failure mode — does the answer hide a single point of failure?

Eliminate answers that violate the question constraints first. This is faster than evaluating every technical feature.

Resources

[AWS Certified Solutions Architect Professional Exam Guide](https://aws.amazon.com/certification/certified-solutions-architect-professional/)

[AWS Skill Builder SA Pro courses](https://skillbuilder.aws/)

[AWS Well-Architected Framework](https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html)

[Tutorials Dojo SA Pro practice exams](https://tutorialsdojo.com/aws-certified-solutions-architect-professional/)

This is the same readiness framework we use at Sapior for architect-level cloud hires.