SAA-C03 Study Plan: Prepare for AWS Solutions Architect Associate

Why SAA-C03 rewards planning over memorization

The AWS Certified Solutions Architect – Associate (SAA-C03) exam is not a vocabulary quiz. It asks you to choose between plausible cloud architectures under constraints: security boundaries, failure modes, throughput demands, and monthly cost. If you study only service definitions, you will hit questions where every answer looks reasonable. A plan based on the [official AWS exam guide](https://aws.amazon.com/certification/certified-solutions-architect-associate/) and weighted domains is the fastest way to build the judgment the exam requires.

Start with the official exam blueprint

SAA-C03 follows four weighted domains. Use these percentages to allocate weekly study time, not to create a service checklist:

| Domain | Weight |

| --- | --- |

| Design Secure Architectures | 30% |

| Design Resilient Architectures | 26% |

| Design High-Performing Architectures | 24% |

| Design Cost-Optimized Architectures | 20% |

The exam has 65 questions, a 130-minute time limit, and a scaled passing score of 720 out of 1,000. The current version emphasizes AWS Well-Architected trade-offs more than memorizing default limits.

Assemble your study stack

Keep the stack small and feedback-rich:

**Primary reference:** [AWS Certified Solutions Architect – Associate exam guide](https://aws.amazon.com/certification/certified-solutions-architect-associate/) and the [AWS Ramp-Up Guide: Architect](https://d1.awsstatic.com/training-and-certification/ramp-up_guides/Ramp-Up_Guide_Architect.pdf)

**Framework lens:** [AWS Well-Architected Framework](https://aws.amazon.com/architecture/well-architected/) for the security, resilience, performance, and cost questions

**Hands-on environment:** AWS Free Tier plus AWS CLI or CloudShell for reproducible labs

**Practice assessment:** AWS Official Practice Question Set or a timed question bank that explains each answer

At Sapior, we favor short feedback loops: build a small environment, inspect the behavior, tear it down. The same approach works for AWS study. Watching videos without opening the console is the slowest path to architectural judgment.

The 8-week SAA-C03 study plan

This plan assumes 8–10 hours per week and some prior exposure to AWS services. If you are starting from zero, add two weeks for Cloud Practitioner concepts.

Weeks 1–2: IAM, S3, and security foundations

Study IAM policies, roles, cross-account access, and identity federation. Get hands-on with S3 bucket policies, block public access settings, encryption keys, and lifecycle rules. Write IAM policies and test them with the policy simulator.

Weeks 3–4: VPC, networking, and hybrid connectivity

Build a VPC with public and private subnets, NAT gateway, route tables, security groups, and NACLs. Practice VPC peering, endpoints, PrivateLink, Site-to-Site VPN, and Direct Connect design patterns. Focus on why security group and NACL rules are evaluated differently.

Weeks 5–6: Compute, storage, and high-performing architectures

Use EC2, Auto Scaling groups, and an Application Load Balancer to simulate scale events. Compare EBS, EFS, and instance store. Study RDS read replicas, DynamoDB capacity modes, Lambda timing, CloudFront, and Route 53 routing policies.

Week 7: Cost optimization and review

Review savings plans, reserved instances, Spot Instances, S3 storage classes, and cost allocation tags. Re-read the cost optimization pillar of the Well-Architected Framework. Write a one-page architecture decision log for each service trade-off you encountered.

Week 8: Practice exams and gap repair

Take two full-length timed practice exams. For every wrong answer, map the question to a domain and add it to an error log. Spend the remaining time in hands-on labs that target your weakest domain, not re-watching videos on topics you already know.

Hands-on checkpoints that matter

Do these labs before your first full practice exam:

Build a three-tier VPC architecture with public subnets for an ALB, private subnets for app servers, and private data subnets for RDS

Create an Auto Scaling group with a launch template and test a CPU-based scaling policy

Configure S3 lifecycle rules, versioning, and CloudFront signed URLs or cookies

Write an IAM role for a Lambda function that reads from DynamoDB and writes to CloudWatch Logs

These labs force you to make the same trade-offs the exam questions describe.

Common failure modes

In practice exams, candidates lose points in four areas:

1. **IAM policy evaluation:** remembering the order of deny-by-explicit, allow-by-explicit, and implicit deny

2. **VPC routing:** confusing NAT gateway placement, route table propagation, and security group versus NACL behavior

3. **Storage tiering:** misreading access patterns and choosing the wrong S3 storage class or EBS volume type

4. **Cost optimization:** selecting a technically correct but more expensive answer when the question asks for lowest cost

If you fail a question in these areas, recreate the scenario in a lab before moving on.

Final week checklist

Re-read the official exam guide and confirm you can explain each domain in plain language

Complete two timed practice exams and keep the error log nearby

Hands-on lab the two weakest topics from the practice exams

Review AWS service limits and how to monitor with CloudWatch

Sleep and prep your test-day environment: reliable internet, ID, and a quiet room

The Sapior take

Certification is useful, but architectural judgment comes from building and breaking systems. A disciplined SAA-C03 plan paired with real labs will do more than pass an exam: it will make you faster at choosing the right cloud architecture under constraints.