Thesius Code

Posted on Mar 23 • Originally published at datanest-stores.pages.dev

AWS SA Associate Study Guide: AWS Solutions Architect Associate Exam Guide SAA-C03

#cloud #certification #aws #devops

AWS Solutions Architect Associate Exam Guide (SAA-C03)

Prepare for the most popular AWS certification with this comprehensive study guide covering all four SAA-C03 exam domains. This guide walks you through designing resilient architectures, high-performing solutions, secure applications, and cost-optimized infrastructure using real-world scenarios. Each domain includes architecture decision frameworks, service comparison tables, and practice questions that match the complexity of the actual exam. Built for professionals who want a structured, no-fluff path from study to certification.

Key Features

Complete domain coverage aligned to the SAA-C03 exam guide with percentage weightings
Architecture decision trees for choosing between services (e.g., RDS vs. DynamoDB, SQS vs. Kinesis)
Well-Architected Framework integration showing how each pillar maps to exam questions
Service comparison tables covering compute, storage, database, and networking options
Cost optimization patterns including Reserved Instances, Savings Plans, and right-sizing strategies
Security design patterns for encryption, IAM, and network isolation at every layer
Hands-on CLI labs that build real infrastructure you can explore and tear down

Study Plan

Week 1-2: Secure Architectures (30% of exam)

IAM users, groups, roles, and policies with least-privilege design
VPC architecture: subnets, NACLs, security groups, VPC endpoints
Encryption at rest and in transit using KMS, ACM, and CloudHSM
AWS Organizations and multi-account security patterns

Week 3-4: Resilient Architectures (26% of exam)

Multi-AZ and multi-region deployment patterns
Decoupling with SQS, SNS, and EventBridge
Auto Scaling groups with launch templates and scaling policies
Backup strategies with AWS Backup and cross-region replication

Week 5-6: High-Performing Architectures (24% of exam)

Compute selection: EC2 instance types, Lambda, Fargate, ECS
Storage performance: EBS volume types, S3 storage classes, EFS throughput modes
Database selection: RDS engines, Aurora, DynamoDB, ElastiCache, Redshift
CloudFront distributions and Global Accelerator for edge performance

Week 7-8: Cost-Optimized Architectures (20% of exam)

EC2 pricing models: On-Demand, Reserved, Spot, Savings Plans
S3 lifecycle policies and Intelligent-Tiering
Right-sizing with Compute Optimizer and Cost Explorer
Serverless cost models and when to go serverless vs. containers

Key Topics

Domain	Weight	Focus Areas
Secure Architectures	30%	IAM, VPC, encryption, compliance
Resilient Architectures	26%	HA, DR, decoupling, scaling
High-Performing Architectures	24%	Compute, storage, DB, networking
Cost-Optimized Architectures	20%	Pricing, lifecycle, right-sizing

Practice Questions

Q1: A company hosts a web application on EC2 instances behind an Application Load Balancer. The application stores session data in memory. Users report losing their sessions when instances scale in. What is the most operationally efficient solution?

A1: Store session data in Amazon ElastiCache for Redis instead of in-memory on EC2. This externalizes session state so any instance can serve any user request. Configure the ALB to use sticky sessions as a short-term fix, but ElastiCache is the architecturally correct long-term answer.

Q2: A media company stores 500 TB of video files in S3 Standard. Analytics show that files older than 90 days are accessed less than once per month, and files older than 1 year are accessed less than once per year. How should they optimize storage costs?

A2: Create an S3 Lifecycle policy with two transitions: move objects to S3 Standard-IA after 90 days, then to S3 Glacier Flexible Retrieval after 365 days. For files that must never be deleted, add a Glacier Deep Archive transition at 730 days. This can reduce storage costs by 60-80%.

Q3: An application needs to process 10,000 messages per second with guaranteed ordering within each customer ID. Messages must be processed exactly once. Which messaging service and configuration should be used?

A3: Use Amazon SQS FIFO queues with message group IDs set to the customer ID. This guarantees ordering within each customer group while allowing parallel processing across groups. FIFO queues support up to 30,000 messages per second with batching enabled via high-throughput mode.

Q4: A development team needs a database for a new application. Requirements: millisecond read latency, automatic scaling, key-value access patterns, and no database administration. Which service fits best?

A4: Amazon DynamoDB with on-demand capacity mode. It provides single-digit millisecond latency, scales automatically, requires no server management, and is optimized for key-value and document access patterns. Enable DynamoDB Accelerator (DAX) if sub-millisecond read latency is needed.

Lab Exercises

Lab 1: Build a Resilient Three-Tier VPC

# Create VPC with CIDR block
aws ec2 create-vpc --cidr-block 10.0.0.0/16 \
  --tag-specifications 'ResourceType=vpc,Tags=[{Key=Name,Value=lab-vpc}]'

# Create public and private subnets across two AZs
aws ec2 create-subnet --vpc-id vpc-xxx --cidr-block 10.0.1.0/24 --availability-zone us-east-1a
aws ec2 create-subnet --vpc-id vpc-xxx --cidr-block 10.0.2.0/24 --availability-zone us-east-1b
aws ec2 create-subnet --vpc-id vpc-xxx --cidr-block 10.0.3.0/24 --availability-zone us-east-1a

# Create and attach Internet Gateway
aws ec2 create-internet-gateway
aws ec2 attach-internet-gateway --internet-gateway-id igw-xxx --vpc-id vpc-xxx

Lab 2: S3 Lifecycle and Replication

# Create a lifecycle configuration
aws s3api put-bucket-lifecycle-configuration \
  --bucket my-data-bucket \
  --lifecycle-configuration '{
    "Rules": [{
      "ID": "ArchiveOldData",
      "Status": "Enabled",
      "Transitions": [
        {"Days": 90, "StorageClass": "STANDARD_IA"},
        {"Days": 365, "StorageClass": "GLACIER"}
      ],
      "Filter": {"Prefix": ""}
    }]
  }'

Lab 3: Auto Scaling with Target Tracking

# Create a target tracking scaling policy
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name my-app-asg \
  --policy-name cpu-target-tracking \
  --policy-type TargetTrackingScaling \
  --target-tracking-configuration '{
    "PredefinedMetricSpecification": {
      "PredefinedMetricType": "ASGAverageCPUUtilization"
    },
    "TargetValue": 60.0
  }'

Exam Tips

Elimination strategy — most questions have two obviously wrong answers; focus on distinguishing the remaining two
"Most cost-effective" usually means serverless or Spot Instances for variable workloads
"Operationally efficient" means managed services over self-managed solutions
Multi-AZ is not multi-region — know when each is required for the given RTO/RPO
S3 storage classes appear on nearly every exam — memorize the access patterns and costs
Security is always relevant — even in non-security questions, the answer with better security posture is often correct

Resources

This is 1 of 11 resources in the Certification Prep Pro toolkit. Get the complete [AWS SA Associate Study Guide] with all files, templates, and documentation for $49.

Get the Full Kit →

Or grab the entire Certification Prep Pro bundle (11 products) for $249 — save 30%.

Get the Complete Bundle →

DEV Community