AWS Certification

How to Pass the AWS Solutions Architect Associate (SAA-C03) in 30 Days

A realistic, week-by-week study plan for the most popular AWS certification — including what to focus on, what to skip, and how to pass on your first attempt.

CertifySphere Team
March 10, 2026
14 min read

The AWS Certified Solutions Architect – Associate (SAA-C03) is the most popular cloud certification in the world. Over a million people hold it. Thousands attempt it every month. And a significant number fail — not because the exam is impossibly hard, but because they study the wrong things in the wrong order.

This guide gives you a realistic 30-day plan based on what the exam actually tests, with an honest assessment of where candidates typically lose points.

What the SAA-C03 Actually Tests

The exam has four scored domains:

Secure Architectures30%
Resilient Architectures26%
High-Performing Architectures24%
Cost-Optimized Architectures20%

Notice that Secure Architectures is 30% of the exam — the largest single domain. Most candidates underweight security because they assume it's abstract. It's not. You will be asked very specific questions about IAM policies, encryption at rest vs. in transit, VPC security groups vs. NACLs, and the Shared Responsibility Model.

The 30-Day Study Plan

Week 1: Foundations (Days 1–7)

Spend the first week building your mental model of AWS's core services. Do not try to memorize everything — focus on understanding relationships.

  • Days 1–2: IAM and Security. Understand users, groups, roles, and policies. Practice writing simple IAM policies. Learn the Shared Responsibility Model inside out — it comes up repeatedly. Study KMS, Secrets Manager, and SSM Parameter Store.
  • Days 3–4: Compute. EC2 instance types (don't memorize specs, just categories), Auto Scaling Groups, and Elastic Load Balancers. Understand the three ELB types and when each is appropriate.
  • Days 5–6: Storage. S3 storage classes and when to use each. EBS volume types. EFS vs. FSx. The key question: which storage service fits which use case?
  • Day 7: Review. Do 30 practice questions on Week 1 topics. Note every wrong answer and read the explanation.
Advertisement

Week 2: Networking and Databases (Days 8–14)

Networking is where most candidates lose the most points. It is the most conceptually dense topic and rewards people who spend real time with it.

  • Days 8–9: VPC. Build a VPC from scratch in the AWS console. Create public and private subnets, a NAT gateway, route tables, security groups, and NACLs. Do this hands-on — you will not retain it from reading alone. Understand VPC peering, Transit Gateway, and PrivateLink.
  • Days 10–11: Databases. RDS (Multi-AZ vs. Read Replicas — this distinction appears in many questions), Aurora (serverless vs. provisioned), DynamoDB (partition keys, GSIs), ElastiCache, and Redshift. For each service, ask: what problem does it solve that no other service solves as well?
  • Days 12–13: Advanced networking. Route 53 routing policies (simple, weighted, latency, failover, geolocation, geoproximity). CloudFront distributions and cache behaviors. Global Accelerator vs. CloudFront — candidates commonly confuse these.
  • Day 14: Practice exam. Take a full 65-question timed practice exam. Your score doesn't matter yet — use it to identify weak areas for Week 3.

Week 3: Architecture Patterns (Days 15–21)

The SAA-C03 is fundamentally an architecture judgment exam. Questions give you a scenario and ask you to choose the most appropriate design. You cannot pass by memorizing service facts alone.

  • Days 15–16: High availability and fault tolerance. Active-active vs. active-passive. Multi-AZ vs. Multi-Region. Understand RPO and RTO and the four disaster recovery strategies (backup/restore, pilot light, warm standby, multi-site active-active).
  • Days 17–18: Serverless and decoupling. Lambda (concurrency limits, cold starts, layers), SQS (standard vs. FIFO, visibility timeout, dead letter queues), SNS, EventBridge, and Step Functions. Understand when to decouple with a queue vs. when direct invocation makes sense.
  • Days 19–20: Cost optimization. On-Demand vs. Reserved Instances vs. Spot vs. Savings Plans — know the trade-offs precisely. S3 Intelligent-Tiering, Lifecycle Policies, and S3 Glacier. Compute Optimizer and Cost Explorer as tools.
  • Day 21: Architecture review. Draw 5 common architectures from memory: a three-tier web application, a serverless API, a data pipeline, a DR setup, and a multi-account organization. If you can draw these, you understand the services.

Week 4: Consolidation and Exam Prep (Days 22–30)

  • Days 22–24: Fill gaps. By now you know which areas are weak. Spend these days on targeted review — not re-reading everything, but going deep on your specific weak domains.
  • Days 25–27: Practice exams. Take three full 65-question timed practice exams on different days. Aim for 80%+ before sitting the real exam. If you score below 75%, do not book the exam yet.
  • Days 28–29: Review wrong answers. Do not practice new questions. Only review answers you got wrong in your practice exams. Build a personal cheat sheet of concepts you keep missing.
  • Day 30: Light review. Scan your cheat sheet. Rest. Do not cram.

The Services That Appear Most Frequently

Based on the official exam guide, these services appear in the most questions. Prioritize them:

EC2 + Auto Scaling
S3 + Glacier
RDS + Aurora
VPC (all components)
IAM + SCP
Lambda + SQS
CloudFront + Route 53
ELB (ALB/NLB/GLB)
DynamoDB
KMS + Secrets Manager
EBS + EFS + FSx
CloudWatch + CloudTrail

Common Mistakes That Cause Failures

Studying service features instead of use cases

For every service, ask 'what scenario makes this the right choice?' not 'what does this service do?'

Ignoring security questions

Security is 30% of the exam. Practice IAM policy logic, KMS key policies, and VPC security controls explicitly.

Confusing similar services

Make a comparison table for pairs that commonly trip people up: SQS vs. SNS, CloudFront vs. Global Accelerator, RDS Multi-AZ vs. Read Replicas.

Not reading all answer options

SAA-C03 answers are often 'all technically correct but one is more cost-effective/resilient/simple.' Read every option before choosing.

Booking before scoring 80% in practice

If you can't consistently score 80% in timed practice, you're not ready. An extra week of study costs less than a retake fee.

Free Study Resources

  • AWS Skill Builder — the official free learning platform. Use the SAA-C03 exam prep path. The digital classroom courses are thorough.
  • AWS Whitepapers — the Well-Architected Framework whitepaper and the Storage Best Practices whitepaper are worth reading in full.
  • AWS re:Invent talks on YouTube — Architecture best practices talks are free and go deeper than any course on real-world design patterns.
  • CertifySphere free mock exams — take timed practice exams on the AWS Solutions Architect practice page to test yourself under realistic conditions.

On Exam Day

A few tactical points that make a material difference:

  • You have 130 minutes for 65 questions — exactly 2 minutes per question. Budget carefully.
  • Flag difficult questions and come back. Do not spend 8 minutes on a single question on the first pass.
  • Eliminate obviously wrong answers first. On most scenario questions, two options are clearly wrong; the real choice is between two plausible ones.
  • The exam uses "MOST" and "LEAST" frequently. Read the qualifier carefully before answering.
  • When a question asks for the "most cost-effective" solution, prefer managed services and pay-per-use over always-on resources.

Ready to practice?

Take a free, timed AWS Solutions Architect mock exam on CertifySphere. Questions are explained in full so you learn from every attempt.

Start free mock exam →