certslothcertsloth
← All certifications

AWS / Associate / SAA-C03

Solutions Architect Associate

Design secure, resilient and cost-effective systems. Learn the requirement that makes one architecture the right choice.

29 focused topics145 recall promptsReviewed 2026-10-10

THE REVISION PATH

Your topics, in order.

Read. Recall. Explain the alternative.

01

Getting Started with AWS

Choose the geography first, separate failure domains next, and bring eligible content closer to users at the edge.

5 min ↗
02

IAM & AWS CLI

Identify who is calling, how they authenticated, and which policies authorize the exact request.

5 min ↗
03

EC2 Fundamentals

Match the machine to the bottleneck, the purchase model to the commitment, and access to a temporary role.

5 min ↗
04

EC2 SAA Level

Preserve the right identity, separate the right failure domains, and distinguish resuming a machine from recovering an application.

5 min ↗
05

EC2 Instance Storage

Choose block, file or local scratch first, then check its failure boundary, performance and recovery behavior.

5 min ↗
06

ELB & Auto Scaling

A load balancer chooses a destination; an Auto Scaling group maintains capacity; application state must survive either decision.

5 min ↗
07

RDS, Aurora & ElastiCache

Replicas add read capacity, failover preserves service, backups recover history, proxies manage connections, and caches avoid repeated work.

7 min ↗
08

Route 53

DNS chooses an answer that clients may cache; it does not inspect or balance every application request.

7 min ↗
09

Classic Solutions Architectures

Make compute replaceable by putting necessary state in services with deliberately chosen durability, access and failure behavior.

5 min ↗
10

S3 Introduction

A key names an object, versioning preserves history, and replication places eligible copies elsewhere.

5 min ↗
11

Advanced S3

Measure access, choose an economical storage class, automate aging, and make event consumers tolerate retries.

5 min ↗
12

S3 security

Encryption protects stored bytes, policies authorize callers, and browser rules do neither job for you.

5 min ↗
13

CloudFront and Global Accelerator

CloudFront caches HTTP content, Global Accelerator routes network connections, and replication creates durable regional copies.

5 min ↗
14

Storage extras

Choose the application's storage protocol first, then decide whether you need persistent access, hybrid access or data movement.

5 min ↗
15

SQS, SNS, Kinesis and Amazon MQ

Queue work for competing workers, fan out events to independent consumers, and retain streams when replay matters.

5 min ↗
16

Containers on AWS

Separate the container image, application task, compute capacity and permissions before choosing an orchestrator.

5 min ↗
17

Serverless services

Separate execution limits, data access patterns, API authorization and workflow state instead of treating serverless as unlimited capacity.

7 min ↗
18

Serverless solution architectures

Authenticate the caller, authorize the operation, keep durable state outside functions, and cache only responses safe to share.

6 min ↗
19

Choosing an AWS database

Start with the required queries and consistency, then choose the data model, resilience and operating model.

6 min ↗
20

Data and analytics

Separate ingestion, storage, metadata, permissions, computation and visualization so each requirement has a clear owner.

7 min ↗
21

Machine Learning

Identify the input and the required output before choosing an AI service.

5 min ↗
22

Monitoring & Audit

Metrics show symptoms, logs explain events, traces follow requests, and audit records identify changes.

5 min ↗
23

IAM Advanced

First identify the caller, then find its grants, its permission ceilings and every applicable explicit deny.

6 min ↗
24

Security & Encryption

Protect the connection, the stored data, the permission to use it and the evidence of misuse separately.

6 min ↗
25

Networking: VPC

A working connection needs the right address, a forward route, permission and a return path.

7 min ↗
26

Disaster Recovery & Migrations

RPO limits how much data may be lost; RTO limits how long useful service may be unavailable.

6 min ↗
27

More Solution Architectures

Choose the delivery, state and failure behavior first, then select services that preserve those decisions.

6 min ↗
28

Other Services

Separate deployment, administration, cost evidence and application delivery before choosing a tool.

6 min ↗
29

Whitepapers & Architectures

Start with the workload's requirements, then explain what the design protects, what it costs and how you know it works.

6 min ↗

How this guide is organised

The existing 29-topic study pack is preserved. Familiar course-style topics organise original explanations; all 14 official task objectives map to the notes.

Revision material supports preparation; it does not guarantee every possible exam question. Check the exam version and official objectives before booking.

Search across every published topic.