Home › Certifications › SAA-C03 Certification Guide
AWS Certification Guide · 2026SAA-C03 Certification Guide 2026: AWS Certified Solutions Architect – Associate
Everything about the SAA-C03 exam — all four domains and weightings, why security is the largest domain on an architecture exam, the 15 questions that do not count toward your score, how AWS’s three-year validity compares with Microsoft’s annual renewal, solutions architect salary bands, and a 12-week roadmap.
Authorized Training & Technology Partners
SAA-C03 — AWS Certified Solutions Architect – Associate
The credential this guide covers
SAA-C03 (AWS Certified Solutions Architect – Associate) is the most widely recognised cloud architecture credential there is. Four domains, 65 questions in 130 minutes, and you need 720 out of 1000 on a scaled 100–1,000 range. Two facts most guides never mention: only 50 of those 65 questions are scored — 15 are unscored research items — and the largest domain on this architecture exam is security, at 30%.
AWS states the exam’s purpose plainly: it validates your ability to design solutions based on the AWS Well-Architected Framework. If that sounds familiar from our AZ-305 guide, it should — both hyperscalers now examine architecture through a named framework rather than a service catalogue. Learn the framework and a large share of the correct answers stop being guesswork.
SAA-C03 exam at a glance
| Attribute | Detail |
|---|---|
| Exam code | SAA-C03 — AWS Certified Solutions Architect – Associate |
| Level | Associate |
| Questions | 65 total — 50 scored, 15 unscored. Unscored items are not identified during the exam |
| Question types | Multiple choice (one correct of four) and multiple response (two or more correct of five or more) |
| Duration | 130 minutes |
| Scoring | Scaled 100–1,000; minimum passing score 720 |
| Cost | US$150 |
| Validity | 3 years — three times longer than every Microsoft and Anthropic credential in this series |
| Prerequisites | None enforced. AWS recommends at least 1 year of hands-on experience designing cloud solutions on AWS |
| If you are new to IT | AWS suggests earning Cloud Practitioner first; candidates with 1–3 years of IT experience can prepare for this directly |
| Framework | AWS Well-Architected Framework — named in the exam’s stated purpose |
| Exam guide version | Version 1.1, SAA-C03 |
What is the SAA-C03 certification?
AWS describes the target candidate as someone performing a solutions architect role, and lists three things the exam validates: designing solutions that incorporate AWS services to meet current business requirements and future projected needs; designing architectures that are secure, resilient, high-performing and cost-optimized; and reviewing existing solutions and determining improvements.
Those four adjectives are not decoration — they are literally the four exam domains, in order of weight. AWS has told you the blueprint in a single sentence of the introduction.
Of the 65 questions you answer, only 50 contribute to your score. The other 15 are unscored items AWS uses to evaluate future questions, and they are not marked or identifiable during the exam. Two practical consequences. First, a question that feels bizarre or unusually obscure may simply not count — do not let it rattle you. Second, you cannot afford to skip anything, because you have no way of knowing which 50 matter.
SAA-C03 domains and weightings
Four domains, and unlike most blueprints in this series these are exact percentages rather than ranges — they sum to precisely 100%.
SAA-C03 exam blueprint — share of scored content by domain
Official AWS weightings, SAA-C03 exam guide version 1.1
Source: AWS Certified Solutions Architect – Associate (SAA-C03) Exam Guide, version 1.1. Percentages are of scored content and total exactly 100%. Applied to the 50 scored questions, that is roughly 15 security, 13 resilience, 12 performance and 10 cost questions.
On an exam called Solutions Architect, the largest single domain is Design Secure Architectures at 30% — roughly 15 of your 50 scored questions. IAM, federated access, least privilege, the shared responsibility model, multi-account access control. Candidates who prepare by learning services tend to under-study exactly this, because security feels like a specialism rather than architecture. On SAA-C03 it is the architecture.
The renewal maths nobody mentions
Here is a comparison worth making before you choose which certification to chase, and one you will rarely see because most guides only cover one vendor.
How long a credential lasts before you must renew
Months of validity from the date awarded, across the three issuers in this guide series
AWS certifications are valid for three years. Microsoft associate, expert and specialty certifications expire annually, renewable free via an online assessment on Microsoft Learn. Anthropic’s Claude credentials are valid 12 months. Over a six-year career window that is roughly 2 AWS renewals against 6 Microsoft ones — a real difference in ongoing effort, not just paperwork.
The four domains as flashcards
Design Secure Architectures
Secure access to AWS resources: access controls across multiple accounts, AWS IAM and IAM Identity Center, AWS global infrastructure (Availability Zones and Regions), security best practices including least privilege, and the shared responsibility model. Skills tested: applying best practices to IAM users and root users including MFA, designing a flexible authorization model spanning users, groups, roles and policies, and designing a role-based access control strategy. Secure workloads and applications, and data security controls, follow from there.
30% · largest domainDesign Resilient Architectures
Scalable and loosely coupled architectures, and highly available or fault-tolerant designs. This is where multi-AZ versus multi-Region judgement lives, along with decoupling patterns, failover behaviour, and designing to a stated RTO and RPO rather than to a preferred service. Expect scenarios that hand you an availability requirement and a budget and ask you to reconcile the two.
26% of scored contentDesign High-Performing Architectures
High-performing and elastic compute, scalable and performant storage, database and networking solutions, and scalable data ingestion and transformation. The recurring question is not which service is fastest but which scales the way the workload actually behaves — steady, spiky, or unpredictable — and what each choice costs when it scales.
24% of scored contentDesign Cost-Optimized Architectures
Cost-optimized storage, compute, database and network solutions. The smallest domain at 20%, roughly 10 scored questions — but the one that most rewards knowing pricing models rather than service names. Storage classes and lifecycle policies, purchase options, data transfer charges, and the difference between a design that is cheap to run and one that is merely cheap to start.
20% · smallest domainThe Well-Architected Framework is the answer key
AWS states the exam validates designing solutions based on the AWS Well-Architected Framework. Its pillars map almost one-to-one onto the domains: security, reliability, performance efficiency and cost optimization, with operational excellence and sustainability alongside. When two options both work, the framework is what decides which is correct. Read it properly before you read a service FAQ.
Named in the exam guideRead the appendix, not just the domains
The official exam guide carries an appendix listing in-scope technologies and concepts, in-scope AWS services and features, and — unusually helpful — out-of-scope services and features. That out-of-scope list is free marks in the form of time saved. Most candidates never open it, and study services that cannot appear.
In the official exam guideWho SAA-C03 is actually for
- Engineers with about a year on AWS — exactly the experience level AWS recommends, and the point at which the scenarios start reading as familiar rather than theoretical.
- Anyone who needs one cloud credential that recruiters recognise instantly. SAA is the most name-recognised cloud certification in the market, and it is filtered on by name in job adverts.
- Azure-certified engineers going multi-cloud. If you hold AZ-305, the architectural reasoning transfers directly — only the service names and their exact guarantees change.
- Anyone heading toward DOP-C02 — the professional-tier DevOps credential, where an associate-level foundation is assumed throughout.
Where it will not carry you
- It is Associate tier. It certifies that you can design sensibly, not that you have run a platform at scale. That claim belongs to the professional certifications.
- It will not substitute for hands-on time. AWS recommends a year of it for a reason — the scenarios assume you have made these trade-offs, not read about them.
- It is not a developer credential. You will design the architecture; writing the application belongs elsewhere.
What an AWS solutions architect earns
AWS remains the largest cloud platform by market share, and that shows up in hiring volume rather than in a premium over other clouds. The advantage of SAA-C03 is breadth of demand — more employers, in more industries, recognise it than any other cloud credential.
The architect progression
Cloud engineer
Solutions architect
Senior architect
Principal
AWS solutions architect pay by market
India and the US shown as two separate charts, because rupee and dollar bands are different measures on different scales and should never share an axis.
India — annual CTC
AWS solutions architect roles, ₹ lakh per annum
Bar length maps the upper bound of each band against a ₹75 L scale. Bands compiled from published Indian AWS and cloud solutions architect ranges. Product companies and global capability centres sit at the top of each band; service firms at the bottom.
United States — annual base
AWS solutions architect roles, US$ thousands
Bar length maps each figure against a $220K scale. Bands compiled from published US AWS solutions architect ranges; base pay only, excluding bonus and equity.
These are role bands, not certification outcomes, and architect pay is driven by years of experience far more than by any credential. No published figure attaches a specific salary increase to holding SAA-C03 alone. What it reliably does is get a CV past the filter — it is the one cloud certification a non-technical recruiter is most likely to have been told to look for.
Compensation figures are compiled from independent, publicly available industry sources and are shown for role context. They are not a guarantee of pay in any specific market, company or outcome, and 360DT does not promise a salary result from any certification or programme.
Why SAA-C03 still leads the cloud credentials
1. Recognition is the whole point
Plenty of certifications are technically respectable and commercially invisible. SAA is the opposite: it has been the default cloud architecture credential long enough that recruiters filter on it by name, hiring managers use it as a baseline, and consultancies count it toward partner status. That recognition, not difficulty, is what makes it worth holding.
2. Security-first architecture is now the expectation
Thirty percent of the scored content is security, and the first task statement in the guide is designing secure access to AWS resources across multiple accounts. Multi-account strategy, federated identity and least privilege stopped being advanced topics and became the baseline of competent design — the exam simply caught up with where enterprises already are.
3. Three years of validity is a genuine cost saving
This is a small point that compounds. A Microsoft Expert credential needs renewing every year; an AWS certification needs it every three. Across a portfolio of certifications and a multi-year career, that is a materially lighter maintenance burden — and worth weighing when you choose which ecosystem to invest in.
4. It is the entry point to the professional tier
AWS does not enforce a prerequisite for its professional certifications, but DOP-C02 assumes associate-level fluency throughout. Taking SAA first is the conventional route because it builds exactly the architectural vocabulary the professional exams stop explaining.
Your 12-week SAA-C03 roadmap
Weighted to the real blueprint, which means security leads. Assume 6–8 hours per week, with an AWS free-tier account open throughout — this exam punishes pure reading.
The Well-Architected Framework, first
All six pillars, but especially security, reliability, performance efficiency and cost optimization — the four that become your exam domains. Then the shared responsibility model and AWS global infrastructure: Regions, Availability Zones, edge locations. Every later week refers back to this one.
IAM properly, not superficially
Users, groups, roles and policies, and how to design a flexible authorization model across them. Policy evaluation logic. Least privilege in practice. MFA on IAM users and the root user. Role-based access control strategy. This single week covers a large share of the exam’s biggest domain.
Multi-account and federated access
Access control across multiple accounts, AWS Organizations, and IAM Identity Center for federated access. Service control policies and where they sit relative to IAM policies. This is the part of domain 1 that separates people who administer one account from people who design for an organisation.
Securing workloads and data
Network security: VPC design, security groups versus NACLs, public and private subnets, endpoints. Then data security: encryption at rest and in transit, KMS key policies, secrets handling, and data classification. Completes the 30% domain — the largest on the exam, banked by week four.
Loose coupling and scalability
Decoupling with queues, topics and event buses. Auto Scaling groups and load balancer selection. Stateless design and where state actually goes. The exam repeatedly rewards the loosely coupled answer over the simpler tightly coupled one — learn to recognise the tell in the question.
High availability and fault tolerance
Multi-AZ versus multi-Region, and what each actually costs. Failover mechanics for compute and databases. Backup and restore against a stated RTO and RPO. Disaster recovery strategies from backup-and-restore through to active-active, and which one a given requirement implies. Completes domain 2.
Compute and storage performance
Elastic compute options and when each fits: instances, containers, serverless. Storage selection across object, block and file, plus the performance characteristics and storage classes of each. Caching layers. The recurring question is which option scales the way this workload behaves.
Databases, networking and ingestion
Relational versus non-relational selection, read replicas, caching. Networking for performance: routing, content delivery, hybrid connectivity options and their throughput and latency profiles. Then scalable data ingestion and transformation patterns. Completes domain 3.
Cost optimization
Compute purchase options and when each pays back. Storage classes and lifecycle policies. Database cost levers. Data transfer charges — consistently the cost people forget in a design, and consistently examined. Completes domain 4 and the full blueprint.
Read the appendix, then build
Work through the exam guide’s appendix: in-scope technologies and concepts, in-scope services, and the out-of-scope list that tells you what to stop studying. Then build one small architecture end to end that is secure, multi-AZ, autoscaling and cost-conscious. Justify every choice against a Well-Architected pillar.
Timed practice, scored by domain
Full 65-question, 130-minute sittings. Score by domain rather than overall — an overall 75% concealing a 55% in security is a fail waiting to happen, because security is 30% of the marks. Any domain under 75% gets a dedicated re-study day.
Weak spots and the exam
Close the gaps the practice sittings exposed. Rehearse the multiple-response format — those questions state how many answers to select, and misreading that under time pressure costs marks you had earned. Then book.
130 minutes for 65 questions is two minutes per question. That is comfortable for recall and tight for long scenarios. Flag anything that takes more than three minutes and come back to it — and remember that 15 questions are unscored, so an item that feels impossible may genuinely not count. Never leave a question blank; there is no penalty for a wrong answer.
Learn from AWS and cloud certified trainers
Certification prep at 360DT is delivered live by AWS, Microsoft, Cisco and NVIDIA certified trainers and Anthropic Authorized Instructors — our full international faculty.
Bipeen
AWS, Microsoft, and Anthropic Certified Trainer
AI, machine learning, and cloud transformation expert with more than 25 years of experience. A renowned global corporate trainer and conference speaker known for practical, outcome driven sessions.
Florian Garcia Compte
Cisco Certified Systems Instructor (CCSI)
Partner Director at AVAANZA FORMACION, a Cisco Learning Partner based in Madrid. Certified Cisco Systems Instructor (CCSI No. 21053) specializing in Cisco Data Center (ACI/SDN), Nexus, and Wireless, delivering official Cisco certification courses including CCNA, CCNP Enterprise, and CCNP Data Center.
Shantanu Pandey
Microsoft, Google, NVIDIA and HPE Certified Trainer
Director of Engineering at Meteoros Automation, ranked in Microsoft's Top 100 Trainers of 2025, holding MCT, Google Cloud, NVIDIA and PeopleCert credentials, with 500+ trainings delivered since 2011.
Vikas Mittal
Google and Anthropic Authorized AI Instructor
Veteran technology trainer with more than 25 years of rich industry experience spanning Google, Microsoft, and emerging AI platforms. An exceptional mentor recognized for proven teaching excellence.
Deep
Anthropic Authorized Instructor and AI Cloud Specialist
Seasoned technology leader with over 20 years of experience across AI, cloud computing, and enterprise training. Known for simplifying complex ideas and delivering practical, real world learning.
Sid
Anthropic Authorized Instructor and Azure Data Engineer
Dynamic corporate trainer and consultant with more than 10 years of experience across Microsoft Fabric, Azure Data Engineering, and modern cloud platforms. Focused on clear, practical learning that sticks.
Arshad Ahmad
Microsoft Certified Trainer (MCT), Cybersecurity & Power Platform Expert
Technology Trainer with 15 years in strategic client delivery, holding MCT, Azure Solutions Architect Expert, Cybersecurity Architect Expert and Power BI Data Analyst credentials, with 200+ trainings delivered.
Sravia
NVIDIA Authorized Instructor and AI Data Specialist
Passionate AI and data evangelist with over 10 years of experience across machine learning, MLOps, and cloud native technologies. Dedicated to delivering impactful, engaging enterprise training programs.
Johan
Microsoft Business Applications MVP and Microsoft Certified Trainer
D365 Customer Service Lead – Europe at Avanade, and founder of the Power Platform School. A Microsoft Business Applications MVP and Microsoft Certified Trainer based in London, specializing in Dynamics 365 Customer Service and Power Platform.
Akim Nyamande
Microsoft, CompTIA, Juniper and Cisco Certified Trainer
IT training facilitator with over five years of experience and certifications across Microsoft, CompTIA, Juniper, and Cisco. Previously a Network Administrator before moving into technical training, now delivering hands-on courses in networking, systems administration, and cybersecurity fundamentals.
Ali El Khatib
Cisco Certified Systems Instructor (CCSI) and Microsoft Certified Trainer
Infrastructure Engineer at RHUH with 13 years in the training field, holding CCSI, MCSE, CCNP Routing and Switching, CCNP Security, CompTIA and Microsoft Azure certifications.
AWS DevOps + Solutions Architect Program
The 360DT AWS DevOps + Solutions Architect Program covers the full SAA-C03 blueprint — secure multi-account architecture and IAM design, resilient multi-AZ and multi-Region patterns, performance and storage selection, and cost optimisation — then carries straight on into DOP-C02 for the professional-tier DevOps half. One programme, both credentials, associate through professional.
Explore the AWS Program
SAA-C03 frequently asked questions
What is the SAA-C03 passing score?
720 out of 1000 on a scaled 100–1,000 range. Because it is scaled, it is not a straight 72% of questions answered correctly. You answer 65 questions in 130 minutes, but only 50 are scored — the other 15 are unscored items AWS uses to trial future questions, and they are not identified during the exam.
Are really only 50 of the 65 questions scored?
Yes. The official exam guide states the exam includes 50 scored questions plus 15 unscored ones that do not affect your score. AWS uses them to evaluate questions for future exams. They are not marked, so treat every question as if it counts — but take some comfort that an unusually strange question may simply be one of the fifteen.
Which is the biggest domain on SAA-C03?
Design Secure Architectures, at 30% of scored content — roughly 15 of your 50 scored questions. That surprises people on an architecture exam, and it is the most common preparation gap: candidates study services and under-study IAM, multi-account access, least privilege and the shared responsibility model.
Do I need AWS Cloud Practitioner before SAA-C03?
No — there is no enforced prerequisite. AWS recommends Cloud Practitioner first only if you have no IT work experience at all; candidates with 1–3 years of IT experience can prepare for SAA-C03 directly. What AWS does recommend is at least one year of hands-on experience designing cloud solutions on AWS.
How long is an AWS certification valid?
Three years — notably longer than the annual renewal Microsoft requires for its associate, expert and specialty certifications, and longer than the 12-month validity of Anthropic’s Claude credentials. Across a six-year window that is two AWS renewals against six Microsoft ones, which is worth factoring into which ecosystem you invest in.
How long does it take to prepare for SAA-C03?
Around twelve weeks at 6–8 hours per week for someone with roughly a year of AWS exposure — the roadmap on this page, which front-loads security because it is 30% of the marks. Engineers already working on AWS daily often compress it to six or eight weeks; people new to cloud should allow longer and start with fundamentals.
SAA-C03 or AZ-305 — which should I take?
Whichever cloud your employer actually runs. Beyond that: SAA-C03 is Associate tier with no enforced prerequisite and three-year validity, while AZ-305 is Expert tier, requires you to already hold AZ-104, and renews annually. SAA is the easier credential to obtain and maintain; AZ-305 is the stronger seniority signal. The architectural thinking transfers between them almost completely.
Should I take SAA-C03 before DOP-C02?
Usually yes. AWS does not enforce it, but DOP-C02 is professional tier and assumes associate-level fluency in AWS services and architecture without stopping to explain it. Our programme runs them in that order for exactly that reason.
Sources and further reading
- AWS — AWS Certified Solutions Architect – Associate (SAA-C03) Exam Guide, version 1.1 (exam purpose and Well-Architected Framework basis, target candidate description, response types, four domains with exact weightings, 50 scored plus 15 unscored questions, scaled 100–1,000 scoring with a 720 minimum passing score, and the appendix of in-scope and out-of-scope services)
- AWS Certification — SAA-C03 exam details page (65 questions, 130 minutes, US$150, three-year validity, recommended one year of hands-on AWS experience)
- Microsoft Learn — certification renewal policy, used for the validity comparison (associate, expert and specialty certifications expire annually)
- Published Anthropic Claude credential validity of 12 months, used for the same comparison
- Published Indian and US AWS solutions architect and cloud architect compensation ranges, used for role context only
360DT is an independent training provider. AWS certification exams are administered by AWS through its authorised testing providers and are not included in programme tuition. Exam details are accurate as of 20 August 2026; always confirm current format, pricing, validity and exam guide version with AWS before booking.