SAA-C03Free Study Guide

AWS Certified Solutions Architect Associate SAA-C03The Complete Beginner's Guide

Complete SAA-C03 study guide — secure architectures, resilient design, high performance, and cost optimization on AWS.

189 chapters
~79 hours total read
Free — no signup required

How to use this guide

This guide works best as a loop: read a chapter, test yourself with practice questions, look up unfamiliar terms in the glossary, then move to the next chapter.

① Read a chapter② Answer practice questions③ Review missed answers④ Repeat
Study Chapters

189 chapters covering every exam objective. Each chapter includes key concepts, exam tips, common traps, comparison tables, and a 5-question quiz at the end.

Start Chapter 1
Practice Questions

Free timed and untimed practice with instant feedback and full explanations. Pick 10–120 questions per session. Filter by domain to drill your weak areas.

Go to practice test
Glossary

Every SAA-C03term defined and searchable. Use it when a chapter mentions a concept you haven't seen before or want a quick refresher on.

Browse glossary
Exam Overview

Exam blueprint, domain weights, passing score, duration, cost, and registration links. Start here if you're new to this certification.

View exam guide

Design Cost-Optimized Architectures (20%)

29 chapters

Domain overview
1

Serverless Architecture for Cost Savings

Objective 4.3 · Cost Optimized

12m
31

EC2 Pricing: On-Demand, Reserved, Spot

Objective 4.1 · Cost Optimized

25m
32

S3 Storage Classes and Lifecycle

Objective 4.2 · Cost Optimized

25m
33

AWS Cost Explorer and Budgets

Objective 4.4 · Cost Optimized

25m
34

Rightsizing and Trusted Advisor

Objective 4.5 · Cost Optimized

25m
165

Compute and EC2 Savings Plans

Objective 4.1 · Cost Optimized

25m
166

Spot Instance Interruption Notices and Handling

Objective 4.1 · Cost Optimized

25m
167

EC2 Hibernation

Objective 4.1 · Cost Optimized

25m
168

Standard vs Convertible Reserved Instances

Objective 4.1 · Cost Optimized

25m
169

On-Demand Capacity Reservations

Objective 4.1 · Cost Optimized

25m
170

Fargate Spot for Cost Savings

Objective 4.3 · Cost Optimized

25m
171

Aurora Serverless v2 Cost vs Provisioned

Objective 4.4 · Cost Optimized

25m
172

DynamoDB On-Demand vs Provisioned Cost

Objective 4.4 · Cost Optimized

25m
173

S3 Intelligent-Tiering for Automated Cost Optimization

Objective 4.2 · Cost Optimized

25m
174

Glacier Retrieval Options and Costs

Objective 4.2 · Cost Optimized

25m
175

AWS Data Transfer Costs: Same AZ, Cross-AZ, Internet

Objective 4.4 · Cost Optimized

25m
176

VPC Gateway Endpoints for S3/DynamoDB (Free vs NAT)

Objective 4.4 · Cost Optimized

25m
177

NAT Gateway vs NAT Instance Cost

Objective 4.4 · Cost Optimized

25m
178

Lambda Cost: ARM vs x86, Memory Tuning

Objective 4.3 · Cost Optimized

25m
179

Cost Allocation Tags for Chargeback

Objective 4.4 · Cost Optimized

25m
180

AWS Budgets Actions

Objective 4.4 · Cost Optimized

25m
181

AWS Compute Optimizer

Objective 4.5 · Cost Optimized

25m
182

Cost Anomaly Detection

Objective 4.4 · Cost Optimized

25m
183

CloudFront Pricing Tiers and Price Classes

Objective 4.4 · Cost Optimized

25m
184

CloudWatch Cost: Logs Ingestion and Custom Metrics

Objective 4.4 · Cost Optimized

25m
185

Step Functions Express vs Standard Workflows Cost

Objective 4.3 · Cost Optimized

25m
186

AWS Organizations Consolidated Billing

Objective 4.4 · Cost Optimized

25m
187

ElastiCache Reserved Nodes

Objective 4.4 · Cost Optimized

25m
188

Redshift Reserved Nodes and Concurrency Scaling

Objective 4.4 · Cost Optimized

25m

Design Secure Architectures (30%)

47 chapters

Domain overview
2

AWS Network Firewall

Objective 1.3 · Secure Architectures

25m
3

Amazon Macie for S3 Data Discovery

Objective 1.4 · Secure Architectures

25m
9

AWS KMS and Encryption Strategies

Objective 1.2 · Secure Architectures

25m
10

AWS WAF and Shield

Objective 1.3 · Secure Architectures

25m
11

AWS IAM Advanced: Roles, Policies, STS

Objective 1.1 · Secure Architectures

25m
12

VPC Security: Security Groups, NACLs, Flow Logs

Objective 1.1 · Secure Architectures

25m
13

Secrets Manager vs Parameter Store

Objective 1.2 · Secure Architectures

25m
14

Service Control Policies and AWS Organizations

Objective 1.4 · Secure Architectures

25m
15

S3 Security: Bucket Policies, ACLs, Encryption

Objective 1.5 · Secure Architectures

25m
35

IAM Policy Types: Identity, Resource, Permission Boundary, SCP

Objective 1.1 · Secure Architectures

25m
36

IAM Cross-Account Role Assumptions

Objective 1.1 · Secure Architectures

25m
37

IAM Permission Boundaries

Objective 1.1 · Secure Architectures

25m
38

AWS IAM Identity Center (SSO) and SAML Federation

Objective 1.1 · Secure Architectures

25m
39

AWS Directory Service: AD Connector vs Managed AD

Objective 1.1 · Secure Architectures

25m
40

Amazon Cognito User Pools and Identity Pools

Objective 1.1 · Secure Architectures

25m
41

STS: AssumeRole, GetSessionToken, and Web Identity

Objective 1.1 · Secure Architectures

25m
42

Cross-Account S3 Access Patterns

Objective 1.5 · Secure Architectures

25m
43

S3 Pre-Signed URLs and Access Points

Objective 1.5 · Secure Architectures

25m
44

S3 Bucket Policies vs ACLs

Objective 1.5 · Secure Architectures

25m
45

S3 Encryption: SSE-S3, SSE-KMS, SSE-C, Client-Side

Objective 1.2 · Secure Architectures

25m
46

S3 Object Lock and WORM Compliance

Objective 1.5 · Secure Architectures

25m
47

KMS Key Policies and Grants

Objective 1.2 · Secure Architectures

25m
48

Customer Managed Keys vs AWS Managed Keys vs Customer Provided

Objective 1.2 · Secure Architectures

25m
49

AWS CloudHSM vs AWS KMS

Objective 1.2 · Secure Architectures

25m
50

Secrets Manager Automatic Rotation

Objective 1.2 · Secure Architectures

25m
51

Parameter Store Advanced Tiers and SecureString

Objective 1.2 · Secure Architectures

25m
52

AWS Certificate Manager (ACM)

Objective 1.3 · Secure Architectures

25m
53

AWS Shield Advanced

Objective 1.3 · Secure Architectures

25m
54

AWS WAF Rule Groups and Managed Rules

Objective 1.3 · Secure Architectures

25m
55

AWS Firewall Manager

Objective 1.3 · Secure Architectures

25m
56

VPC Endpoints: Gateway vs Interface vs GWLB

Objective 1.1 · Secure Architectures

25m
57

AWS PrivateLink for SaaS Services

Objective 1.1 · Secure Architectures

25m
58

AWS Transit Gateway

Objective 1.1 · Secure Architectures

25m
59

VPC Flow Logs for Security Analysis

Objective 1.1 · Secure Architectures

25m
60

NACLs vs Security Groups: Deep Dive

Objective 1.1 · Secure Architectures

25m
61

VPC Network Access Analyzer

Objective 1.1 · Secure Architectures

25m
62

CloudTrail Advanced: Multi-Region, Integrity, Organization Trail

Objective 1.4 · Secure Architectures

25m
63

AWS Config Rules and Conformance Packs

Objective 1.4 · Secure Architectures

25m
64

AWS Security Hub

Objective 1.4 · Secure Architectures

25m
65

Amazon GuardDuty

Objective 1.4 · Secure Architectures

25m
66

Amazon Inspector v2

Objective 1.4 · Secure Architectures

25m
67

Amazon Detective

Objective 1.4 · Secure Architectures

25m
68

AWS Resource Access Manager (RAM)

Objective 1.4 · Secure Architectures

25m
69

AWS Organizations: OUs, SCPs, and Hierarchy

Objective 1.4 · Secure Architectures

25m
70

AWS Control Tower and Landing Zone

Objective 1.4 · Secure Architectures

25m
71

AWS Audit Manager

Objective 1.4 · Secure Architectures

25m
72

ECR Image Scanning and Lifecycle Policies

Objective 1.5 · Secure Architectures

25m

Design Resilient Architectures (26%)

56 chapters

Domain overview
4

EC2 Placement Groups: Cluster, Spread, Partition

Objective 2.1 · Resilient Architectures

25m
5

RDS Cost Optimization: Multi-AZ vs Snapshot Restore

Objective 2.3 · Resilient Architectures

25m
6

Multi-Site Active-Active DR on AWS

Objective 2.6 · Resilient Architectures

25m
16

EC2 Instance Types and Placement Groups

Objective 2.1 · Resilient Architectures

25m
17

Auto Scaling Groups

Objective 2.1 · Resilient Architectures

25m
18

Elastic Load Balancing Types

Objective 2.2 · Resilient Architectures

25m
19

RDS and Aurora: Multi-AZ and Read Replicas

Objective 2.3 · Resilient Architectures

25m
20

S3 Cross-Region and Same-Region Replication

Objective 2.4 · Resilient Architectures

25m
21

Route 53 Routing Policies

Objective 2.5 · Resilient Architectures

25m
22

AWS Global Accelerator vs CloudFront

Objective 2.5 · Resilient Architectures

25m
23

Disaster Recovery Strategies on AWS

Objective 2.6 · Resilient Architectures

25m
73

EC2 Instance Type Families and Use Cases

Objective 2.1 · Resilient Architectures

25m
74

Spot Fleet Strategies: Lowest Price, Diversified, Capacity Optimized

Objective 2.1 · Resilient Architectures

25m
75

ASG Lifecycle Hooks

Objective 2.1 · Resilient Architectures

25m
76

ASG Scheduled and Predictive Scaling

Objective 2.1 · Resilient Architectures

25m
77

ASG Termination Policies

Objective 2.1 · Resilient Architectures

25m
78

EC2 Target Tracking Scaling

Objective 2.1 · Resilient Architectures

25m
79

ALB: Path-Based, Host-Based, and Header Routing

Objective 2.2 · Resilient Architectures

25m
80

NLB: Static IPs, TLS Termination, Ultra-Low Latency

Objective 2.2 · Resilient Architectures

25m
81

Gateway Load Balancer (GWLB) for Inline Security

Objective 2.2 · Resilient Architectures

25m
82

ALB Sticky Sessions and Connection Draining

Objective 2.2 · Resilient Architectures

25m
83

RDS Read Replicas: Cross-Region and Promotion

Objective 2.3 · Resilient Architectures

25m
84

RDS Multi-AZ: Synchronous Replication and Failover

Objective 2.3 · Resilient Architectures

25m
85

Amazon RDS Proxy

Objective 2.3 · Resilient Architectures

25m
86

RDS Blue/Green Deployments

Objective 2.3 · Resilient Architectures

25m
87

Aurora Global Database

Objective 2.3 · Resilient Architectures

25m
88

Aurora Serverless v2 Scaling

Objective 2.3 · Resilient Architectures

25m
89

Aurora Backtrack and Database Cloning

Objective 2.3 · Resilient Architectures

25m
90

Aurora Auto-Scaling Read Replicas

Objective 2.3 · Resilient Architectures

25m
91

DynamoDB Streams and Event Processing

Objective 2.3 · Resilient Architectures

25m
92

DynamoDB Global Tables

Objective 2.3 · Resilient Architectures

25m
93

DynamoDB Transactions

Objective 2.3 · Resilient Architectures

25m
94

DynamoDB Point-in-Time Recovery

Objective 2.3 · Resilient Architectures

25m
95

S3 Versioning and MFA Delete

Objective 2.4 · Resilient Architectures

25m
96

CloudFront Origin Groups and Failover

Objective 2.5 · Resilient Architectures

25m
97

CloudFront Signed URLs and Signed Cookies

Objective 2.5 · Resilient Architectures

25m
98

Route 53 Health Checks and DNS Failover

Objective 2.5 · Resilient Architectures

25m
99

Route 53 Private Hosted Zones

Objective 2.5 · Resilient Architectures

25m
100

Route 53 Resolver Endpoints for Hybrid DNS

Objective 2.5 · Resilient Architectures

25m
101

Global Accelerator vs CloudFront: When to Use Each

Objective 2.5 · Resilient Architectures

25m
102

Pilot Light DR Pattern on AWS

Objective 2.6 · Resilient Architectures

25m
103

Warm Standby DR Pattern on AWS

Objective 2.6 · Resilient Architectures

25m
104

AWS Backup Service

Objective 2.6 · Resilient Architectures

25m
105

AWS Resilience Hub

Objective 2.6 · Resilient Architectures

25m
106

ECS Fargate: Task Placement and Availability

Objective 2.1 · Resilient Architectures

25m
107

EKS Multi-AZ Node Groups

Objective 2.1 · Resilient Architectures

25m
108

Lambda Destinations and Dead Letter Queues

Objective 2.1 · Resilient Architectures

25m
109

Lambda Concurrency: Reserved and Provisioned

Objective 2.1 · Resilient Architectures

25m
110

SQS Dead Letter Queues

Objective 2.1 · Resilient Architectures

25m
111

SQS Message Visibility Timeout

Objective 2.1 · Resilient Architectures

25m
112

SQS Long Polling vs Short Polling

Objective 2.1 · Resilient Architectures

25m
113

EventBridge Rules, Event Buses, and Replay

Objective 2.1 · Resilient Architectures

25m
114

Step Functions Error Handling and Retries

Objective 2.1 · Resilient Architectures

25m
115

ElastiCache Redis Cluster Mode and Replication

Objective 2.3 · Resilient Architectures

25m
116

EFS Multi-AZ Mount Targets

Objective 2.1 · Resilient Architectures

25m
189

EC2 Launch Templates

Objective 2.1 · Resilient Architectures

25m

Design High-Performing Architectures (24%)

57 chapters

Domain overview
7

SNS Message Filtering and Fan-Out Pattern

Objective 3.2 · High Performance

25m
8

FSx for Windows File Server

Objective 3.5 · High Performance

25m
24

Amazon ElastiCache: Redis vs Memcached

Objective 3.1 · High Performance

25m
25

SQS vs SNS vs Kinesis

Objective 3.2 · High Performance

25m
26

Lambda Architecture Patterns

Objective 3.3 · High Performance

25m
27

CloudFront Distribution Design

Objective 3.4 · High Performance

25m
28

EFS vs FSx for Storage

Objective 3.5 · High Performance

25m
29

DynamoDB Design Patterns

Objective 3.6 · High Performance

25m
30

API Gateway Integration Patterns

Objective 3.7 · High Performance

25m
117

EC2 Enhanced Networking and SR-IOV

Objective 3.1 · High Performance

25m
118

AWS Graviton Processors

Objective 3.1 · High Performance

25m
119

EC2 Instance Store Volumes

Objective 3.1 · High Performance

25m
120

EBS Performance: IOPS, Throughput, io2 Block Express

Objective 3.1 · High Performance

25m
121

EBS Multi-Attach for io1/io2

Objective 3.1 · High Performance

25m
122

ECS Task Definitions and Container Definitions

Objective 3.3 · High Performance

25m
123

ECS Service Discovery and AWS Service Connect

Objective 3.3 · High Performance

25m
124

EKS Networking: AWS VPC CNI Plugin

Objective 3.3 · High Performance

25m
125

Lambda Performance: Memory, Cold Starts, and Init Duration

Objective 3.3 · High Performance

25m
126

Lambda Layers and Container Images

Objective 3.3 · High Performance

25m
127

Lambda@Edge vs CloudFront Functions

Objective 3.4 · High Performance

25m
128

API Gateway: REST vs HTTP vs WebSocket

Objective 3.7 · High Performance

25m
129

API Gateway Caching and Throttling

Objective 3.7 · High Performance

25m
130

API Gateway Lambda Authorizers and JWT Authorizers

Objective 3.7 · High Performance

25m
131

API Gateway VPC Link

Objective 3.7 · High Performance

25m
132

AWS AppSync for GraphQL APIs

Objective 3.7 · High Performance

25m
133

DynamoDB Capacity: On-Demand vs Provisioned

Objective 3.6 · High Performance

25m
134

DynamoDB GSI and LSI

Objective 3.6 · High Performance

25m
135

DynamoDB Partition Key Design Patterns

Objective 3.6 · High Performance

25m
136

DynamoDB PartiQL

Objective 3.6 · High Performance

25m
137

DynamoDB Accelerator (DAX)

Objective 3.6 · High Performance

25m
138

S3 Performance: Multi-Part Upload and Transfer Acceleration

Objective 3.4 · High Performance

25m
139

S3 Select and Glacier Select

Objective 3.4 · High Performance

25m
140

S3 Batch Operations

Objective 3.4 · High Performance

25m
141

CloudFront Cache Behaviors and TTL

Objective 3.4 · High Performance

25m
142

CloudFront Functions for Edge Logic

Objective 3.4 · High Performance

25m
143

Kinesis Data Streams: Shards and Consumers

Objective 3.2 · High Performance

25m
144

Kinesis Data Firehose Delivery Streams

Objective 3.2 · High Performance

25m
145

Kinesis Data Analytics (Managed Apache Flink)

Objective 3.2 · High Performance

25m
146

SQS FIFO Queues and Deduplication

Objective 3.2 · High Performance

25m
147

Amazon MSK for Apache Kafka

Objective 3.2 · High Performance

25m
148

ElastiCache Redis vs Memcached Use Cases

Objective 3.1 · High Performance

25m
149

Amazon Redshift for Data Warehousing

Objective 3.1 · High Performance

25m
150

Redshift Spectrum for S3 Queries

Objective 3.1 · High Performance

25m
151

Amazon Athena Query Optimization

Objective 3.1 · High Performance

25m
152

AWS Glue for ETL

Objective 3.1 · High Performance

25m
153

Amazon EMR for Big Data Processing

Objective 3.1 · High Performance

25m
154

Amazon OpenSearch Service

Objective 3.1 · High Performance

25m
155

AWS DataSync for Data Transfer

Objective 3.5 · High Performance

25m
156

AWS Storage Gateway: File, Volume, Tape

Objective 3.5 · High Performance

25m
157

AWS Transfer Family (SFTP/FTP/FTPS)

Objective 3.5 · High Performance

25m
158

FSx for Lustre for HPC

Objective 3.5 · High Performance

25m
159

FSx for NetApp ONTAP

Objective 3.5 · High Performance

25m
160

EFS Performance Modes and Throughput Modes

Objective 3.5 · High Performance

25m
161

Aurora Machine Learning Integration

Objective 3.6 · High Performance

25m
162

RDS Performance Insights

Objective 3.6 · High Performance

25m
163

AWS Wavelength and Local Zones

Objective 3.1 · High Performance

25m
164

Elastic Fabric Adapter (EFA) for HPC

Objective 3.1 · High Performance

25m

Ready to test your knowledge?

Free SAA-C03 practice questions with full explanations. Test what you learn chapter by chapter.

SAA-C03 Practice Questions