AWS Solutions Architect Associate
Design scalable, resilient AWS architectures
Independent exam preparation. Not affiliated with, sponsored by or endorsed by Amazon Web Services (AWS).
📖 About This Certification
Comprehensive AWS Solutions Architect Associate preparation covering compute, storage, networking, databases, security, and high availability. Master the skills to design cost-effective, scalable cloud solutions on Amazon Web Services.
This preparation material contains 44 course lessons, a practice test drawn from a bank of 125 questions and a timed exam simulator.
🎯 Exam Domains
- Design Secure Architectures (30%)
- Design Resilient Architectures (26%)
- Design High-Performing Architectures (24%)
- Design Cost-Optimized Architectures (20%)
Four content domains and weights (percent of scored content) from the AWS Solutions Architect – Associate (SAA-C03) exam guide. Check AWS for current details.
✨ What's Included
- 44 course lessons
- Practice test drawn from a bank of 125 questions
- Exam simulator with timed practice
- Progress page for your practice-test results
- Mobile-friendly access for studying anywhere
How the practice material is organised
- 1. Select Domain In the exam simulator, practise one SAA-C03 domain at a time: secure, resilient, high-performing or cost-optimized architectures
- 2. Practice Scenarios Work through real-world architecture challenges
- 3. Review Solutions Learn AWS best practices and cost optimization
- 4. Review Your Results See your score by domain at the end of every simulator session
Preparation tips
- Understand the shared responsibility model thoroughly
- Know when to use each storage service and their use cases
- Master VPC design including subnets, NAT, and security groups
- Focus on cost optimization strategies and billing
What the AWS Solutions Architect practice questions exercise
AWS groups SAA-C03 into four content domains - secure, resilient, high-performing and cost-optimized architectures - and the same service families recur inside every one of them: compute, storage and databases, networking, and security and access. Compute questions ask you to choose between instance families, managed runtimes and container services on the basis of how the workload behaves, not on the basis of which service name looks most familiar. Storage and database questions ask you to match a durability, access-pattern or cost requirement to a service, which is a different skill from recalling what a service does.
Networking questions are the ones most candidates find hardest, because a wrong answer is usually wrong for a structural reason: a subnet that cannot hold the hosts it needs, a route that cannot reach a private service, an endpoint placed on the wrong side of a boundary. Security and access questions then test whether you can express a permission precisely - who may do what, to which resource, under which condition - rather than whether you remember that a policy exists.
- Compute (a service family, not an exam domain): choosing a service from a workload's behaviour
- Storage and databases: matching durability, access pattern and cost
- Networking: subnet, route and endpoint placement decisions
- Security and access: expressing permissions precisely
How to use the AWS practice material
Working in one domain at a time is the fastest way to find the area that is actually weak, because a mixed set hides it: a strong score in secure architectures can carry a weak score in cost-optimized architectures to a respectable total. In the exam simulator, set the session to one of the four SAA-C03 domains, take the whole set once, and read the explanations for every question - including the ones you answered correctly. A question answered correctly for the wrong reason is the expensive kind: the reasoning behind it was never exercised, so the explanation is where the work is.
- Take a mixed session first, purely to establish where you are. Do not expect it to be accurate; its purpose is orientation.
- Pick the weakest domain and take it alone. Read every explanation, including explanations for questions you got right.
- Write down the reasoning that distinguishes the correct option from the most attractive wrong one. That distinction is what the question is testing.
- Return to a mixed session and compare the domain profile against the first attempt. Progress in one domain should show as a change in that domain, not as a better mood.
The simulator adds the constraint the practice set cannot: a session that ends whether or not you are finished. Use it sparingly and deliberately. Its value is not the score - it is finding out which decisions you rush when the remaining time stops feeling comfortable.
Where candidates lose marks on architecture questions
Three failures account for most lost marks, and none of them is a knowledge gap. The first is answering the question that was asked last time: a scenario introduces an operational or cost constraint and the candidate answers the availability question they were expecting. The second is choosing the service that would work over the service the constraint points to - both solve the problem, only one satisfies the requirement that was actually stated.
The third is treating the managed option as the safe default. Managed services remove operational burden, which is often what the scenario is asking for, but they also remove control, which is sometimes what the scenario forbids. Read the constraint sentence twice, decide which of the two it is rewarding, and only then look at the options.
- Answering an expected question instead of the stated one
- Choosing a service that works over the one the constraint selects
- Assuming the managed option is always the intended answer
- Skipping the explanation for a question answered correctly by luck
Planning the preparation time
Architecture material rewards spacing rather than volume, because the decisions in it depend on recognising a constraint pattern, and recognition comes from meeting an example again after an interval rather than from repeating it while it is still fresh. Take the mixed session first, then give each single-domain session its own sitting so the explanations have to be reconstructed rather than remembered.
- Start with the mixed session; it shows which domains to work on next.
- Give each single-domain session its own sitting rather than stacking them.
- Keep the simulator session for last, when the domain material has stopped changing.
- Repeat the mixed session at the end and compare the domain profile, not the total.
Try 3 original practice questions (free, no account)
Written by Job Tests Portal for practice and mapped to domains in the AWS Solutions Architect – Associate (SAA-C03) exam guide. They are not actual exam items, and they do not predict an exam result.
Original practice question, not an actual exam item
SAA-C03 Domain 2: Design Resilient Architectures
Question 1. A company runs a production MySQL database on a single-AZ Amazon RDS DB instance. The database must keep running, with automatic failover, if the instance's Availability Zone becomes unavailable, and the application should keep using the same database endpoint. Which solution meets these requirements?
Show answer and explanation
Correct answer: A. Modify the DB instance to a Multi-AZ DB instance deployment.
In a Multi-AZ DB instance deployment, Amazon RDS keeps a synchronous standby replica in a different Availability Zone and fails over to it automatically. The failover changes the DB instance's DNS record to point to the standby, so the application keeps the same endpoint; existing connections must reconnect. A read replica is updated asynchronously and has to be promoted, and a replica in the same Availability Zone is affected by the same zone outage. Restoring from a backup is a manual recovery step, not automatic failover. A larger instance class still runs in one Availability Zone.
Original practice question, not an actual exam item
SAA-C03 Domain 1: Design Secure Architectures
Question 2. An application running on Amazon EC2 instances must read objects from one Amazon S3 bucket. The security team does not allow long-term access keys to be stored on the instances. What is the MOST secure way to give the application access?
Show answer and explanation
Correct answer: B. Attach an IAM role to the instances through an instance profile, with a policy that allows read access to that bucket only.
An IAM role attached through an instance profile gives the application temporary credentials from the instance metadata, and those credentials are updated automatically before they expire, so no long-term keys are stored on the instance. Limiting the role's policy to read access on the one bucket follows the principle of least privilege. IAM user access keys and root user access keys are long-term credentials, which the requirement rules out, and a public bucket would let anyone read the objects.
Original practice question, not an actual exam item
SAA-C03 Domain 4: Design Cost-Optimized Architectures
Question 3. A company stores application log files as 10 MB objects in Amazon S3. The logs are read often during the first 30 days and almost never after that, but they must be kept for 7 years. When an old log is needed, a typical restore time of about 12 hours is acceptable; there is no strict retrieval deadline. Which solution is the MOST cost-effective?
Show answer and explanation
Correct answer: B. Add an S3 Lifecycle rule that transitions the logs to S3 Glacier Deep Archive 30 days after creation.
S3 Glacier Deep Archive is intended for long-lived archive data that is rarely accessed. The 10 MB log objects exceed the default 128 KB minimum for Lifecycle transitions. Standard retrievals typically finish within 12 hours, and completion times can vary. The 7-year retention period is far beyond the 180-day minimum storage duration. A Lifecycle rule moves the objects automatically. S3 Standard, S3 Standard-IA and S3 One Zone-IA all keep millisecond access that these logs do not need, and S3 One Zone-IA is also not resilient to the loss of an Availability Zone.
❓ Frequently Asked Questions
What is the current exam code for AWS Solutions Architect – Associate?
SAA-C03. The AWS exam guide lists four content domains: Design Secure Architectures (30% of scored content), Design Resilient Architectures (26%), Design High-Performing Architectures (24%) and Design Cost-Optimized Architectures (20%). Check AWS for current details.
How long is the exam and what is the passing score?
AWS lists 65 questions, either multiple choice or multiple response, in 130 minutes; 50 of them affect your score and 15 are unscored. Results are reported as a scaled score of 100–1,000, and the minimum passing score is 720. Check AWS for current details.
Are there hands-on labs?
There is no live AWS environment. The paid preparation includes scenario labs: written case studies with a step checklist that you mark as done yourself, alongside the practice test and the exam simulator.
Can I try sample questions for free?
Yes. Three original practice questions with explanations are on this page, free and without an account. They are not actual exam items.