Skip to content
GKgkml.dev
← All learning tracks

Learn AWS SAA-C03

6 lessons · ~56 minutes of reading

SAA-C03 does not test whether you can recall what a service does. It tests whether you can pick the right one when four plausible options are on screen and the requirement is buried in a sentence about compliance or cost.

That is a different skill from knowing AWS, and it is trainable. Most questions are decided by one or two words in the stem — 'without managing servers', 'lowest operational overhead', 'must survive a Region failure' — and each of those words eliminates specific options.

This track covers the exam's structure, the domain content in the weighting the blueprint gives it, and the reading technique that turns a 65-question exam into a series of two-option decisions.

Assumes: Work through the AWS track first. This one assumes you know the services and focuses on choosing between them under exam conditions.

The lessons

  1. 1

    What the exam actually asks

    The format, the domain weighting, and the scoring rules that determine how to spend your time.

    7 minPractise: Easy
  2. 2

    Domain 1 — Design secure architectures

    The 30% domain: identity, encryption, network isolation and the least-privilege patterns the exam rewards.

    11 minPractise: Medium
  3. 3

    Domain 2 — Design resilient architectures

    The 26% domain: availability targets, decoupling, and matching a recovery strategy to RTO and RPO.

    11 minPractise: Medium
  4. 4

    Domain 3 — Design high-performing architectures

    The 24% domain: matching workloads to the right compute, storage, database and caching layer.

    10 minPractise: Medium
  5. 5

    Domain 4 — Design cost-optimized architectures

    The 20% domain: purchasing models, storage lifecycle, and the data transfer charges the exam loves.

    9 minPractise: Hard
  6. 6

    Reading a scenario question

    The mechanical process that turns four plausible options into one defensible answer.

    8 minPractise: Hard

What the practice bank covers

The lessons above are written against this syllabus, so anything in the question bank has been taught before you meet it.

  • Domain 1 — Design Secure Architectures (30%)
  • IAM, roles, federation, least privilege, boundaries
  • Encryption at rest and in transit, KMS, secrets
  • Domain 2 — Design Resilient Architectures (26%)
  • Multi-AZ and multi-Region, decoupling, fault isolation
  • RTO/RPO and the four disaster-recovery strategies
  • Domain 3 — Design High-Performing Architectures (24%)
  • Storage, compute, database and network selection
  • Caching: CloudFront, ElastiCache, DAX, Global Accelerator
  • Domain 4 — Design Cost-Optimized Architectures (20%)
  • Purchase options, storage classes, data transfer, right-sizing
  • Answering the qualifier: cost vs overhead vs availability