Skip to main content
Exam Guides 🇺🇸 · 8 min read

AWS Solutions Architect Associate (SAA-C03) 15-Day Study Plan 2026: Beat the Exam with This Coach Roadmap

A detailed 15-day study plan for the AWS Solutions Architect Associate SAA-C03 exam, updated for 2026. Covers all four domains, day-by-day tasks, the 2026 exam updates including Amazon Bedrock and Capacity Blocks, and a practice-question strategy to reach 720+.

The AWS Certified Solutions Architect - Associate (SAA-C03) is the most sought-after cloud certification in the industry. It validates your ability to design secure, resilient, high-performing, and cost-optimized architectures on AWS — the skills that hiring managers look for in mid-level cloud engineers and architects. Whether you are coming from the Cloud Practitioner or jumping in with hands-on experience, this 15-day coach roadmap will take you from "studying" to "passing" with a structured, no-guesswork approach.

This plan is updated for 2026 and accounts for the latest exam content changes, including Amazon Bedrock for generative AI, Capacity Blocks for ML, and the Reserved Instance policy change from June 2025.

Exam Overview and 2026 Updates

Detail Value
Exam Code SAA-C03
Total Questions 65 (50 scored, 15 unscored)
Time Limit 130 minutes
Passing Score 720 out of 1000 (scaled)
Exam Cost $150 USD
Delivery Pearson VUE (testing center or online proctored)
Question Types Multiple choice (1 correct) and multiple response (2+ correct)
Validity 3 years
Recommended Experience 1+ year hands-on with AWS

What Changed in 2026

AWS continuously updates the question pool for SAA-C03. Based on 2025-2026 candidate reports, these are the notable changes:

  • Amazon Bedrock now appears in exam questions. You need to know how to architect private access to foundation models using VPC endpoints, and when to recommend Bedrock vs SageMaker AI.
  • Capacity Blocks for ML (launched late 2023, now mainstream) appear in questions about reserving GPU instances for machine learning training. Know that Capacity Blocks are different from standard Reserved Instances.
  • Reserved Instance policy change (June 2025): AWS restricted RI purchases to a single customer — you can no longer resell unused RIs on the RI Marketplace to other customers. This affects cost optimization questions.
  • Increased weight on serverless and event-driven architectures: Lambda, EventBridge, Step Functions, and API Gateway appear more frequently than in early 2024.
  • S3 Express One Zone: A new storage class for single-digit millisecond latency. Relevant for data lake and analytics scenarios.

The Four Exam Domains

Domain Weight Key Topics
1. Design Secure Architectures 30% IAM, S3 security, VPC security, encryption (KMS), cross-account access, AWS Verified Access
2. Design Resilient Architectures 26% Multi-AZ, multi-Region, DR strategies, decoupling, Auto Scaling, Route 53 routing
3. Design High-Performing Architectures 24% Compute selection, caching, database optimization, networking (CloudFront, Global Accelerator), data lakes
4. Design Cost-Optimized Architectures 20% Pricing models, right-sizing, S3 lifecycle, storage tiering, serverless cost benefits

Domain 1 (Secure) is the largest at 30%, followed closely by Domain 2 (Resilient) at 26%. Together they make up 56% of the exam. Security and resilience should be your primary study focus, but do not neglect Domains 3 and 4 — the cost optimization questions are where many candidates lose critical points.

15-Day Coach Study Plan

This plan assumes 3 to 4 hours of study per day. If you have prior AWS hands-on experience, you can accelerate. If you are coming straight from the Cloud Practitioner, consider extending to 20 to 25 days.

Day Focus Area Tasks Practice Qs
Day 1 IAM Deep Dive IAM users, groups, roles, policies (identity-based vs resource-based). Permission boundaries. Cross-account roles (sts:AssumeRole). IAM Access Analyzer. AWS IAM Identity Center (SSO). 25
Day 2 S3 Security and Encryption Bucket policies vs ACLs vs IAM policies. S3 Object Lock (compliance vs governance mode). S3 encryption (SSE-S3, SSE-KMS, SSE-C, client-side). S3 Access Points. Pre-signed URLs. 25
Day 3 VPC Security and Networking VPC design (public/private subnets, NAT Gateway, Internet Gateway). Security Groups vs NACLs. VPC Peering vs Transit Gateway. VPC Endpoints (Gateway vs Interface). AWS PrivateLink. AWS Verified Access. 30
Day 4 KMS, Secrets Manager, and Compliance KMS key types (AWS managed, customer managed, AWS owned). Key rotation. Envelope encryption. Secrets Manager vs Parameter Store. AWS Certificate Manager (ACM). CloudTrail, Config, Organizations SCPs. 25
Day 5 EC2 and Auto Scaling EC2 instance types (general, compute, memory, storage, accelerated). Launch templates. Placement groups (cluster, spread, partition). Auto Scaling policies (target tracking, step, scheduled). EC2 purchase options. 25
Day 6 High Availability and Load Balancing ALB vs NLB vs GWLB (when to use each). Cross-zone load balancing. Connection draining. Health checks. Multi-AZ vs Multi-Region strategies. ELB access logs. 25
Day 7 Databases (Relational) RDS Multi-AZ (standby vs read replicas). Aurora architecture (cluster volume, reader/writer endpoints). Aurora Global Database. Aurora Serverless v2. RDS Proxy. Database Migration Service (DMS). 25
Day 8 Databases (NoSQL) and Caching DynamoDB (partition key, sort key, GSI, LSI, DAX, Global Tables, Streams, on-demand vs provisioned). ElastiCache Redis vs Memcached. Amazon MemoryDB for Redis. 25
Day 9 S3 Storage and Data Architecture S3 storage classes and lifecycle policies. S3 Replication (CRR, SRR). S3 Transfer Acceleration. S3 Multi-Region Access Points. S3 Event Notifications. S3 Select and Glacier Select. S3 Express One Zone. Data lakes with Athena, Glue, Lake Formation. 25
Day 10 Disaster Recovery and Resilience DR strategies (Backup and Restore, Pilot Light, Warm Standby, Multi-Site Active/Active). RPO vs RTO. Elastic Disaster Recovery. Route 53 failover routing. Aurora Global Database failover. 25
Day 11 Serverless and Event-Driven Lambda (triggers, concurrency, layers, destinations). API Gateway (REST vs HTTP API). EventBridge. Step Functions. SQS (Standard vs FIFO, DLQ, visibility timeout). SNS. Kinesis (Data Streams vs Firehose). 30
Day 12 Networking Performance and Content Delivery CloudFront (behaviors, origins, OAC, Lambda@Edge vs CloudFront Functions). Global Accelerator. Direct Connect. Site-to-Site VPN. Route 53 routing policies (simple, weighted, latency, failover, geolocation, geoproximity, multivalue). 25
Day 13 Cost Optimization EC2 pricing (On-Demand, Reserved, Savings Plans, Spot, Dedicated). Graviton instances for cost savings. S3 Intelligent-Tiering and lifecycle rules. Right-sizing with Compute Optimizer. Serverless cost advantages. Capacity Blocks for ML. 25
Day 14 Full Practice Exam #1 Take a timed 65-question practice exam on CertLand. Simulate real conditions (no notes, 130 min). Review every wrong answer and note recurring themes. Create a weak-area list. 65
Day 15 Full Practice Exam #2 and Final Review Take a second timed practice exam. Focus review on your weak-area list from Day 14. Re-read DR strategies, VPC networking, and cost optimization traps. Schedule exam if scoring 80%+. 65
Coach Tip: The SAA-C03 is significantly harder than the CLF-C02. Questions present complex multi-service scenarios and ask you to pick the BEST solution — not just a working one. You need to understand trade-offs between options, not just what each service does. The total across this 15-day plan is ~490 practice questions.

Top 5 Hardest Topics (Teaser)

Based on candidate feedback and CertLand performance data, these are the topics where candidates lose the most points:

  1. VPC Networking and Security Group vs NACL Scenarios — Questions describe traffic flow problems and ask you to fix them. You need to know stateful (SG) vs stateless (NACL), ephemeral ports, and the exact flow from internet to private subnet via ALB.
  2. DR Strategy Selection (RPO/RTO Requirements) — The exam gives you specific RPO and RTO targets and expects you to pick the cheapest DR strategy that meets those targets. Mixing up Pilot Light and Warm Standby is the most common error.
  3. S3 Encryption and Cross-Account Access — Multi-account scenarios where one account needs to read encrypted objects from another account's S3 bucket. Requires understanding of KMS key policies, bucket policies, and IAM roles together.
  4. Lambda@Edge vs CloudFront Functions — Both run code at the edge, but they have different capabilities, runtimes, and pricing. Knowing which supports network calls and which is fastest is critical.
  5. Cost Optimization with Graviton and Spot — When the question says "most cost-effective" but also requires reliability, the answer changes dramatically. Graviton + Savings Plans often beats x86 + Reserved for new architectures.

We cover traps 1 through 5 in detail in our companion article: SAA-C03 Exam Traps: Cost Optimization and High Performance Questions That Fool Architects.

Practice Questions on CertLand

Ready to simulate the real exam? CertLand offers 380 SAA-C03 practice questions organized by domain, with detailed explanations for every answer — including why each wrong answer is wrong. Take timed simulations (65 questions in 130 minutes) that mirror the real exam format, and track your domain-level scores to pinpoint exactly where you need more study.

The SAA-C03 rewards candidates who practice with realistic, scenario-based questions. Reading documentation alone is not enough — you need to practice selecting the best answer when multiple options could technically work. CertLand's question bank is designed specifically for this kind of discriminative practice.

Exam Day Tips for SAA-C03

  • Read the LAST sentence first. The final sentence contains the actual question (e.g., "Which solution meets these requirements with the LEAST operational overhead?"). Read it before the scenario — it tells you what to optimize for.
  • Watch for qualifiers. "Most cost-effective," "least operational overhead," "minimum RTO," and "highest availability" lead to different answers for the same scenario.
  • Eliminate managed vs unmanaged. If the question asks for "least operational overhead," eliminate any answer that requires you to manage servers, patching, or scaling manually.
  • Draw architecture diagrams. For complex questions, sketch the data flow on your scratch paper. It takes 30 seconds and prevents misreading the scenario.
  • 130 minutes is tight. Unlike the CLF-C02, the SAA-C03 gives you about 2 minutes per question. Do not spend more than 3 minutes on any single question — flag it and move on.

Follow this 15-day plan, score 80%+ on CertLand practice exams, and you will walk into the testing center ready. Good luck — the SAA-C03 is worth the effort.

Comments

Sign in to leave a comment.

No comments yet. Be the first!

Comments are reviewed before publication.