aws-sap

AWS Certified Solutions Architect - Professional

AWS

Validates advanced technical skills and experience in designing optimized AWS solutions based on the AWS Well-Architected Framework. Target candidate has 2+ years of experience designing and implementing cloud solutions on AWS.

exam: 75 questions · 180 min

Sign up free — practice 5 questions on this cert without a card.

AWS ArchitectMulti-account at scaleMigration & modernizationHybrid networking180 min exam75 questions (65 scored)750/1000 to pass$300 USD

Difficulty

Expert

Avg study time

120-200h

3-4 months typical for an experienced AWS engineer holding SAA-C03

Pass rate

Not published

AWS does not publish per-exam pass rates. The exam is widely considered one of AWS's harder certifications and AWS recommends 2+ years of hands-on experience before attempting it.

Market demand

Very high

Commonly required or strongly preferred for Principal/Staff Solutions Architect roles and for the AWS Partner Network Solutions Architect competencies.

Exam Domain Breakdown

Design Solutions for Organizational Complexity26%
Design for New Solutions29%
Continuous Improvement for Existing Solutions25%
Accelerate Workload Migration and Modernization20%

Difficulty by Topic

Multi-account governance (Organizations, SCPs, Control Tower, IAM Identity Center)
The spine of the exam. SCP precedence vs IAM, account vending, guardrails (preventive vs detective), permission sets, delegated administration.
Hybrid networking (Transit Gateway, Direct Connect, VPN, Cloud WAN)
Expect dense scenarios mixing DX Gateway, TGW peering, SiteLink, VPC peering, PrivateLink, and Route 53 Resolver - know what each does and when to choose which.
Migration strategies (7 R's, MGN, DMS, DataSync, Snow family)
Memorize the 7 R's (Retire/Retain/Rehost/Relocate/Repurchase/Replatform/Refactor) and which AWS service maps to each. MGN for rehost, DMS+SCT for database, DataSync for file.
Database modernization (Aurora, DynamoDB, RDS, DMS, SCT)
Aurora Global Database vs DynamoDB Global Tables, when to refactor vs lift-and-shift, heterogeneous schema conversion patterns, online vs offline migration cutover.
Identity federation at scale (IAM Identity Center, AD, SAML, OIDC)
Federating from on-premises AD vs Azure AD, IAM Identity Center permission sets, ABAC with session tags, cross-account assume-role patterns.
Disaster recovery patterns (4 strategies, multi-region)
Backup & restore / pilot light / warm standby / multi-site - know the RTO/RPO band each delivers and which AWS services enable it (Aurora Global, Route 53 failover, AWS Backup cross-region).
Cost optimization at scale (Savings Plans, Compute Optimizer, Cost Allocation Tags)
Savings Plans flexibility vs RIs, Compute Optimizer recommendations, Cost Anomaly Detection, consolidated billing benefits, tagging for chargeback/showback.
Container & serverless modernization (ECS, EKS, Fargate, Lambda, Step Functions)
When to refactor to containers vs serverless, EKS Fargate vs EC2 nodegroups, Lambda concurrency models, Step Functions vs SWF, choosing the right compute per workload.
Edge & global delivery (CloudFront, Global Accelerator, Route 53)
CloudFront vs Global Accelerator (HTTP vs TCP/UDP), Route 53 routing policies (latency/geo/geoproximity/weighted), Lambda@Edge vs CloudFront Functions.
Security controls integration (KMS, ACM, GuardDuty, Security Hub, Macie)
Cross-account KMS key sharing, central GuardDuty/Security Hub aggregation in audit account, Macie for S3 PII discovery, Config aggregator across the org.

Exam Tips

1

SAP questions read like short stories. The scenario is 4-8 sentences with embedded constraints (compliance, RTO, latency, budget) and the answer is the option that satisfies all of them. Read the final question stem first, then the scenario - it tells you what to optimize for and which constraints to ignore.

2

Multiple options will technically work. The right answer is the one with the lowest operational overhead while meeting every stated requirement. 'Use a Lambda function and EventBridge' beats 'Run a cron job on EC2' nine times out of ten - if both meet the requirements, choose managed.

3

Multi-account architecture is the largest single theme. Master AWS Organizations (OUs, SCPs, account vending), Control Tower (preventive vs detective guardrails), IAM Identity Center (permission sets, delegated admin), and the security/log archive/audit account pattern. Many questions hinge on 'which account does X belong in'.

4

Hybrid networking is the highest-leverage study topic. Know Transit Gateway attachments (VPC, VPN, DX Gateway, peering), Direct Connect resilience tiers (single, high, maximum), Cloud WAN vs TGW, PrivateLink vs VPC peering, and how Route 53 Resolver endpoints bridge on-prem DNS with VPC DNS. Draw the diagrams until the patterns are muscle memory.

5

Migration questions test the 7 R's by name. Memorize which AWS service is the canonical answer for each: MGN (Rehost), DMS + SCT (Database), DataSync (File), App2Container (Replatform to containers), AWS Migration Hub (orchestration), Snow family (offline at scale). 'Refactor' often means re-architecting for serverless or containers - those questions surface here, not in the deployment domain.

6

Disaster recovery questions almost always include explicit RTO/RPO numbers. Map them to the four strategies: Backup & Restore (hours-to-days RTO), Pilot Light (tens of minutes), Warm Standby (minutes), Multi-site Active-Active (seconds, near-zero RPO). Aurora Global Database, DynamoDB Global Tables, and Route 53 failover are the building blocks for the higher tiers.

7

Cost optimization at SAP scale is more than RIs. Expect Savings Plans (Compute vs EC2 Instance, 1-year vs 3-year, payment options), Compute Optimizer right-sizing recommendations, Cost Allocation Tags for chargeback, Cost Anomaly Detection, AWS Budgets actions, and Trusted Advisor checks. Consolidated billing volume discounts and shared RI/SP coverage across the org are common distractors.

8

Database questions often hide the right answer in the access pattern, not the data shape. Single-digit-millisecond key-value at any scale → DynamoDB. Complex joins or transactions → Aurora. Heterogeneous source-to-target migration → DMS + SCT. Online cutover with minimal downtime → DMS with CDC. The vendor-specific source DB (Oracle, SQL Server) usually maps to Aurora PostgreSQL or MySQL via SCT.

9

Watch for keyword traps in the stem: 'most cost-effective' weighs cost over performance, 'least operational overhead' favors managed/serverless, 'highest availability' implies multi-AZ minimum (often multi-region), 'real-time' means streaming (Kinesis/MSK) not batch, 'eventually consistent is acceptable' opens the door to S3, DynamoDB defaults, and async replication.

10

Time budget: 75 questions in 180 minutes is 2.4 min average, but multi-response questions and long scenarios run 4-5 min. Sweep the exam in two passes - answer everything you're sure about, flag the long ones, return after the quick wins are banked. The 10 unscored questions are sprinkled in; you cannot identify them, so answer every question.

Study Resources

Who It's Best Suited For

Senior cloud architects designing multi-account AWS environments

Direct match. Validates the day-to-day expertise required to design landing zones, hybrid networking, and migration programs at organizational scale.

Solutions architects targeting Principal / Staff roles

SAP is the ceiling cert in the AWS Architect track and a common requirement on senior solutions architect job descriptions. Pairs strongly with DOP-C02 for staff-level cloud platform roles.

AWS consultants and partners

Required or strongly preferred for AWS Partner Network competencies (Migration, Well-Architected). The credential most consulting clients look for when validating delivery teams.

Not ideal for AWS beginners

SAP assumes 2+ years of hands-on AWS experience and SAA-C03-level fluency across IAM, VPC, EC2, and S3. Start with SAA-C03 first - this exam will not teach you AWS, only how to architect at scale on it.

Certification Path

SAA-C03 (Solutions Architect Associate)
DOP-C02 (DevOps Engineer Professional)