How to Pass AWS Solutions Architect Associate SAA-C03 (2026): Study Plan & Domain Strategy

The AWS Certified Solutions Architect – Associate is the most popular associate-level cloud cert for a reason: it's the one that proves you can design real systems, not just recall service names. It's also a scenario exam — almost every question is a paragraph with constraints, and your job is to pick the best architecture, not merely a working one. This is a plan for passing SAA-C03 (still the current version in 2026 — ignore any "SAA-C04" rumors) efficiently.

If you're still weighing whether you're ready to attempt it, read Is the AWS Solutions Architect Associate Hard? first. This post is the how-to-pass roadmap.

Start from the exam's weighting

SAA-C03 has four domains, and they are not equal. Design your study time around them:

| # | Domain | Exam weight | What it rewards |
|---|--------|:---:|---|
| 1 | Design Secure Architectures | 30% | IAM, encryption, network isolation, least privilege |
| 2 | Design Resilient Architectures | 26% | Decoupling, multi-AZ/region, fault tolerance, recovery |
| 3 | Design High-Performing Architectures | 24% | Right-sizing compute/storage/DB, caching, scaling |
| 4 | Design Cost-Optimized Architectures | 20% | Choosing the cheapest option that still meets the requirement |

Security (30%) is the single biggest domain, and resilience (26%) is close behind — together they're more than half the exam. But the four domains overlap heavily in practice: a single question often tests security and cost and resilience at once. So while you weight your time toward domains 1 and 2, you're really learning to reason across all four simultaneously.

The 5-week plan

Assumes ~8–12 hours a week and some hands-on time in a free-tier AWS account. Compress or stretch based on your background — the sequence matters more than the weeks.

Week 1 — Core building blocks.
The services that appear in nearly every scenario: VPC (subnets, route tables, security groups vs. NACLs, NAT, VPC endpoints), EC2 (instance families, purchasing options), S3 (storage classes, lifecycle, encryption, static hosting), and IAM (roles vs. users, policies, cross-account access). You cannot answer resilient or secure-design questions without fluency here.

Week 2 — Security by design (Domain 1, 30%).
IAM deeply (roles for services, resource policies, permission boundaries), encryption everywhere (KMS, SSE-S3/SSE-KMS, in-transit), network isolation (private subnets, security-group chaining, VPC endpoints to avoid the public internet), and secrets management. Learn the difference between "works" and "least privilege" — the exam always rewards the latter.

Week 3 — Resilience and decoupling (Domain 2, 26%).
Multi-AZ vs. multi-region, Auto Scaling + ELB, decoupling with SQS/SNS/EventBridge, RDS Multi-AZ vs. read replicas, DynamoDB global tables, Route 53 routing policies and failover, backup/DR strategies (backup-restore → pilot light → warm standby → active-active) and their RTO/RPO trade-offs.

Week 4 — Performance and cost (Domains 3 + 4, 44% combined).
Performance: caching (CloudFront, ElastiCache), read replicas, right-sizing, S3 Transfer Acceleration, storage/throughput choices (gp3, io2, EFS vs. FSx). Cost: Spot vs. Reserved vs. Savings Plans vs. On-Demand, S3 storage-class economics, data-transfer costs (the hidden exam favorite), and picking the cheapest service that still meets the stated requirement.

Week 5 — Full-length timed practice + review.
Stop learning new services; start taking timed, full-length exams across all four domains and reviewing every miss until you understand why the other options are wrong. This is where scores climb.

How SAA-C03 questions actually work

• 65 questions in 130 minutes — about two minutes each, which is generous. The challenge isn't time; it's discrimination between plausible answers.
• 50 questions are scored, 15 are unscored pretest items you can't identify — so answer everything with equal care.
• Formats are multiple choice (one of four) and multiple response (pick two or more). No penalty for guessing; never leave a blank.
• Nearly every question is a best-answer scenario: two or three options will "work," but one best fits the stated constraint (most secure, most cost-effective, least operational overhead). Underline the constraint before you read the options.

The practice-test loop is where it's won

You can watch every course on the platform and still fail if you haven't trained the best-answer judgment under time. The loop:

1. Take a timed set of scenario questions on the domain you're studying.
2. Review every question — read why each distractor is wrong, not just why the key is right.
3. Repeat until you're consistently scoring 80%+ on fresh questions across all four domains. The 720/1000 pass bar leaves less margin than it looks; aim comfortably above it.

That's what CertBase's AWS Solutions Architect Associate bank is built for: 500 scenario-based questions written to the SAA-C03 objectives, each with quantified constraints that force a single best answer, and a detailed explanation of the correct choice and every distractor. Rebuilt and independently verified in July 2026, one-time purchase with lifetime access, free samples on the exam page, and a 30-day money-back guarantee — against a $150 exam fee per attempt, cheap insurance against a re-sit.

Exam-day tactics

• Read the requirement first. The last sentence — "most cost-effective," "least operational overhead," "highest availability" — is the whole question. Everything before it is context.
• Eliminate to two. Most questions reduce to two working answers; the qualifier decides. "Least operational overhead" favors managed/serverless; "most cost-effective" favors the cheapest sufficient option.
• Beware over-engineering. If a question asks for the cheapest option meeting a modest requirement, the multi-region active-active answer is a trap.
• Flag and move. Two minutes each is generous, but don't burn six on one question — flag, move, return.

Are you ready?

• ✅ Consistently 80%+ on fresh, timed questions across all four domains
• ✅ You reflexively spot the constraint ("least overhead," "most cost-effective") before reading options
• ✅ You can explain RDS Multi-AZ vs. read replicas, SQS vs. SNS, and Spot vs. Reserved without hesitating
• ✅ You've done at least two full-length timed runs above passing margin

FAQ

Is SAA-C03 still the current version in 2026? Yes. SAA-C03 is the live exam as of 2026, and AWS has not announced a successor or retirement date. Claims of an "SAA-C04" circulating on some blogs are not reflected in AWS's official documentation.

How many questions is the SAA exam and what's the passing score? 65 questions (50 scored + 15 unscored) in 130 minutes. The passing score is 720 on a scaled range of 100–1000. The exam costs $150 USD.

How long is the certification valid? Three years. You recertify either by passing the current version of this exam again, or by earning the higher-level AWS Certified Solutions Architect – Professional, which also extends the associate credential.

Do I need hands-on AWS experience to pass? It helps enormously. AWS recommends around a year of hands-on experience, but disciplined study plus a free-tier account to build the services you're learning (not just read about them) is enough for many candidates. The exam rewards people who've actually wired a VPC and an Auto Scaling group.