AWS Solutions Architect Associate (SAA-C03) 15-Day Study Plan 2026: Beat the Exam with This Coach Roadmap
A detailed 15-day study plan for the AWS Solutions Architect Associate SAA-C03 exam, updated for 2026. Covers all four domains, day-by-day tasks, the 2026 exam updates including Amazon Bedrock and Capacity Blocks, and a practice-question strategy to reach 720+.
The AWS Certified Solutions Architect - Associate (SAA-C03) is the most sought-after cloud certification in the industry. It validates your ability to design secure, resilient, high-performing, and cost-optimized architectures on AWS — the skills that hiring managers look for in mid-level cloud engineers and architects. Whether you are coming from the Cloud Practitioner or jumping in with hands-on experience, this 15-day coach roadmap will take you from "studying" to "passing" with a structured, no-guesswork approach.
This plan is updated for 2026 and accounts for the latest exam content changes, including Amazon Bedrock for generative AI, Capacity Blocks for ML, and the Reserved Instance policy change from June 2025.
Exam Overview and 2026 Updates
| Detail | Value |
|---|---|
| Exam Code | SAA-C03 |
| Total Questions | 65 (50 scored, 15 unscored) |
| Time Limit | 130 minutes |
| Passing Score | 720 out of 1000 (scaled) |
| Exam Cost | $150 USD |
| Delivery | Pearson VUE (testing center or online proctored) |
| Question Types | Multiple choice (1 correct) and multiple response (2+ correct) |
| Validity | 3 years |
| Recommended Experience | 1+ year hands-on with AWS |
What Changed in 2026
AWS continuously updates the question pool for SAA-C03. Based on 2025-2026 candidate reports, these are the notable changes:
- Amazon Bedrock now appears in exam questions. You need to know how to architect private access to foundation models using VPC endpoints, and when to recommend Bedrock vs SageMaker AI.
- Capacity Blocks for ML (launched late 2023, now mainstream) appear in questions about reserving GPU instances for machine learning training. Know that Capacity Blocks are different from standard Reserved Instances.
- Reserved Instance policy change (June 2025): AWS restricted RI purchases to a single customer — you can no longer resell unused RIs on the RI Marketplace to other customers. This affects cost optimization questions.
- Increased weight on serverless and event-driven architectures: Lambda, EventBridge, Step Functions, and API Gateway appear more frequently than in early 2024.
- S3 Express One Zone: A new storage class for single-digit millisecond latency. Relevant for data lake and analytics scenarios.
The Four Exam Domains
| Domain | Weight | Key Topics |
|---|---|---|
| 1. Design Secure Architectures | 30% | IAM, S3 security, VPC security, encryption (KMS), cross-account access, AWS Verified Access |
| 2. Design Resilient Architectures | 26% | Multi-AZ, multi-Region, DR strategies, decoupling, Auto Scaling, Route 53 routing |
| 3. Design High-Performing Architectures | 24% | Compute selection, caching, database optimization, networking (CloudFront, Global Accelerator), data lakes |
| 4. Design Cost-Optimized Architectures | 20% | Pricing models, right-sizing, S3 lifecycle, storage tiering, serverless cost benefits |
Domain 1 (Secure) is the largest at 30%, followed closely by Domain 2 (Resilient) at 26%. Together they make up 56% of the exam. Security and resilience should be your primary study focus, but do not neglect Domains 3 and 4 — the cost optimization questions are where many candidates lose critical points.
15-Day Coach Study Plan
This plan assumes 3 to 4 hours of study per day. If you have prior AWS hands-on experience, you can accelerate. If you are coming straight from the Cloud Practitioner, consider extending to 20 to 25 days.
| Day | Focus Area | Tasks | Practice Qs |
|---|---|---|---|
| Day 1 | IAM Deep Dive | IAM users, groups, roles, policies (identity-based vs resource-based). Permission boundaries. Cross-account roles (sts:AssumeRole). IAM Access Analyzer. AWS IAM Identity Center (SSO). | 25 |
| Day 2 | S3 Security and Encryption | Bucket policies vs ACLs vs IAM policies. S3 Object Lock (compliance vs governance mode). S3 encryption (SSE-S3, SSE-KMS, SSE-C, client-side). S3 Access Points. Pre-signed URLs. | 25 |
| Day 3 | VPC Security and Networking | VPC design (public/private subnets, NAT Gateway, Internet Gateway). Security Groups vs NACLs. VPC Peering vs Transit Gateway. VPC Endpoints (Gateway vs Interface). AWS PrivateLink. AWS Verified Access. | 30 |
| Day 4 | KMS, Secrets Manager, and Compliance | KMS key types (AWS managed, customer managed, AWS owned). Key rotation. Envelope encryption. Secrets Manager vs Parameter Store. AWS Certificate Manager (ACM). CloudTrail, Config, Organizations SCPs. | 25 |
| Day 5 | EC2 and Auto Scaling | EC2 instance types (general, compute, memory, storage, accelerated). Launch templates. Placement groups (cluster, spread, partition). Auto Scaling policies (target tracking, step, scheduled). EC2 purchase options. | 25 |
| Day 6 | High Availability and Load Balancing | ALB vs NLB vs GWLB (when to use each). Cross-zone load balancing. Connection draining. Health checks. Multi-AZ vs Multi-Region strategies. ELB access logs. | 25 |
| Day 7 | Databases (Relational) | RDS Multi-AZ (standby vs read replicas). Aurora architecture (cluster volume, reader/writer endpoints). Aurora Global Database. Aurora Serverless v2. RDS Proxy. Database Migration Service (DMS). | 25 |
| Day 8 | Databases (NoSQL) and Caching | DynamoDB (partition key, sort key, GSI, LSI, DAX, Global Tables, Streams, on-demand vs provisioned). ElastiCache Redis vs Memcached. Amazon MemoryDB for Redis. | 25 |
| Day 9 | S3 Storage and Data Architecture | S3 storage classes and lifecycle policies. S3 Replication (CRR, SRR). S3 Transfer Acceleration. S3 Multi-Region Access Points. S3 Event Notifications. S3 Select and Glacier Select. S3 Express One Zone. Data lakes with Athena, Glue, Lake Formation. | 25 |
| Day 10 | Disaster Recovery and Resilience | DR strategies (Backup and Restore, Pilot Light, Warm Standby, Multi-Site Active/Active). RPO vs RTO. Elastic Disaster Recovery. Route 53 failover routing. Aurora Global Database failover. | 25 |
| Day 11 | Serverless and Event-Driven | Lambda (triggers, concurrency, layers, destinations). API Gateway (REST vs HTTP API). EventBridge. Step Functions. SQS (Standard vs FIFO, DLQ, visibility timeout). SNS. Kinesis (Data Streams vs Firehose). | 30 |
| Day 12 | Networking Performance and Content Delivery | CloudFront (behaviors, origins, OAC, Lambda@Edge vs CloudFront Functions). Global Accelerator. Direct Connect. Site-to-Site VPN. Route 53 routing policies (simple, weighted, latency, failover, geolocation, geoproximity, multivalue). | 25 |
| Day 13 | Cost Optimization | EC2 pricing (On-Demand, Reserved, Savings Plans, Spot, Dedicated). Graviton instances for cost savings. S3 Intelligent-Tiering and lifecycle rules. Right-sizing with Compute Optimizer. Serverless cost advantages. Capacity Blocks for ML. | 25 |
| Day 14 | Full Practice Exam #1 | Take a timed 65-question practice exam on CertLand. Simulate real conditions (no notes, 130 min). Review every wrong answer and note recurring themes. Create a weak-area list. | 65 |
| Day 15 | Full Practice Exam #2 and Final Review | Take a second timed practice exam. Focus review on your weak-area list from Day 14. Re-read DR strategies, VPC networking, and cost optimization traps. Schedule exam if scoring 80%+. | 65 |
Top 5 Hardest Topics (Teaser)
Based on candidate feedback and CertLand performance data, these are the topics where candidates lose the most points:
- VPC Networking and Security Group vs NACL Scenarios — Questions describe traffic flow problems and ask you to fix them. You need to know stateful (SG) vs stateless (NACL), ephemeral ports, and the exact flow from internet to private subnet via ALB.
- DR Strategy Selection (RPO/RTO Requirements) — The exam gives you specific RPO and RTO targets and expects you to pick the cheapest DR strategy that meets those targets. Mixing up Pilot Light and Warm Standby is the most common error.
- S3 Encryption and Cross-Account Access — Multi-account scenarios where one account needs to read encrypted objects from another account's S3 bucket. Requires understanding of KMS key policies, bucket policies, and IAM roles together.
- Lambda@Edge vs CloudFront Functions — Both run code at the edge, but they have different capabilities, runtimes, and pricing. Knowing which supports network calls and which is fastest is critical.
- Cost Optimization with Graviton and Spot — When the question says "most cost-effective" but also requires reliability, the answer changes dramatically. Graviton + Savings Plans often beats x86 + Reserved for new architectures.
We cover traps 1 through 5 in detail in our companion article: SAA-C03 Exam Traps: Cost Optimization and High Performance Questions That Fool Architects.
Practice Questions on CertLand
The SAA-C03 rewards candidates who practice with realistic, scenario-based questions. Reading documentation alone is not enough — you need to practice selecting the best answer when multiple options could technically work. CertLand's question bank is designed specifically for this kind of discriminative practice.
Exam Day Tips for SAA-C03
- Read the LAST sentence first. The final sentence contains the actual question (e.g., "Which solution meets these requirements with the LEAST operational overhead?"). Read it before the scenario — it tells you what to optimize for.
- Watch for qualifiers. "Most cost-effective," "least operational overhead," "minimum RTO," and "highest availability" lead to different answers for the same scenario.
- Eliminate managed vs unmanaged. If the question asks for "least operational overhead," eliminate any answer that requires you to manage servers, patching, or scaling manually.
- Draw architecture diagrams. For complex questions, sketch the data flow on your scratch paper. It takes 30 seconds and prevents misreading the scenario.
- 130 minutes is tight. Unlike the CLF-C02, the SAA-C03 gives you about 2 minutes per question. Do not spend more than 3 minutes on any single question — flag it and move on.
Follow this 15-day plan, score 80%+ on CertLand practice exams, and you will walk into the testing center ready. Good luck — the SAA-C03 is worth the effort.
Comments
No comments yet. Be the first!
Comments are reviewed before publication.