AWS Certified Solutions Architect - Associate

Solutions Architect – Associate
(SAA-C02)
Overview
The AWS Certified Solutions Architect – Associate (SAA-C02) exam is intended for indi-
viduals who perform in a solutions architect role. The exam validates a candidate’s ability
to design secure and robust solutions by using AWS technologies.
The exam also validates a candidate’s ability to complete the following tasks:
 Design a solution by using appropriate AWS services and by following architectural

principles based on requirements
 Provide implementation guidance based on best practices to the organization
throughout the workload lifecycle
Target candidate description
 The target candidate should have at least 1 year of hands-on experience designing
 secure, high performing, cost-effective, highly available, and scalable systems by
using AWS services.
The target candidate should have the following knowledge:
 Hands-on experience using computer, networking, storage, management, and

database AWS services
 The ability to identify and define technical requirements for a solution that involves
AWS technology
 The ability to identify which AWS services meet a given technical requirement
 An understanding of best practices for building well-architected solutions on AWS
 An understanding of the AWS global infrastructure
 An understanding of AWS security services and features in relation to
traditional services
What is considered out of scope for the target candidate?
The following is a non-exhaustive list of related job tasks that the target candidate is not
expected to be able to perform. These items are out of scope for the exam:
 Design a complex, hybrid network architecture

 Design identity federation within multiple accounts
 Design an architecture that meets compliance requirements
 Incorporate specialized services in a design
 Develop deployment strategies
 Create a migration strategy for complex multi-tier applications
For a detailed list of specific tools and technologies that might be covered on the exam, as
well as a list of in-scope AWS services, refer to the Appendix.
Exam content
Response types
There are two types of questions on the exam:
 Multiple choice: Has one correct response and three incorrect responses
(distractors)
 Multiple response: Has two or more correct responses out of five or more
response options
Select one or more responses that best complete the statement or answer the question.
Distractors, or incorrect answers, are response options that a candidate with incomplete
knowledge or skill might choose. Distractors are generally plausible responses that match
the content area. Unanswered questions are scored as incorrect; there is no penalty for
guessing. The exam includes 50 questions that will affect your score.
Unscored content
The exam includes 15 unscored questions that do not affect your score. AWS collects
information about candidate performance on these unscored questions to evaluate these
questions for future use as scored questions. These unscored questions are not identified
on the exam.
Exam results
The AWS Certified Solutions Architect – Associate exam is a pass or fail exam. The exam
is scored against a minimum standard established by AWS professionals who follow certi-
fication industry best practices and guidelines.
Your results for the exam are reported as a scaled score of 100–1,000. The minimum
passing score is 720. Your score shows how you performed on the exam as a whole and
whether or not you passed. Scaled scoring models help equate scores across multiple
exam forms that might have slightly different difficulty levels. Your score report could con-
tain a table of classifications of your performance at each section level.
This information provides general feedback about your exam performance. The exam
uses a compensatory scoring model, which means that you do not need to achieve a pass-
ing score in each section. You need to pass only the overall exam. Each section of the exam
has a specific weighting, so some sections have more questions than other sections have.
The table contains general information that highlights your strengths and weaknesses.
Use caution when interpreting section-level feedback. Candidates who pass the exam will
not receive this additional information.
Content outline
This exam guide includes weightings, test domains, and objectives for the exam. It is not a
comprehensive listing of the content on the exam. However, additional context for each of
the objectives is available to help guide your preparation for the exam. The following table
lists the main content domains and their weightings.
The table precedes the complete exam content outline, which includes the additional con-
text. The percentage in each domain represents only scored content.
Domain % of Exam
Domain 1: Design Resilient Architectures 30%
Domain 2: Design High-Performing Architectures 28%
Domain 3: Design Secure Applications and Architectures 24%
Domain 4: Design Cost-Optimized Architectures 18%
TOTAL 100%
Course content
Domain 1: Design Resilient Architectures

1.1 Design a multi-tier architecture solution
 Determine a solution design based on access patterns.
 Determine a scaling strategy for components used in a design.
 Select an appropriate database based on requirements.
 Select an appropriate compute and storage service based on requirements.
1.2 Design highly available and/or fault-tolerant architectures
 Determine the amount of resources needed to provide a fault-tolerant
architecture across Availability Zones.
 Select a highly available configuration to mitigate single points of failure.
 Apply AWS services to improve the reliability of legacy applications when
application changes are not possible.
 Select an appropriate disaster recovery strategy to meet business
requirements.
 Identify key performance indicators to ensure the high availability of the
solution.
1.3 Design decoupling mechanisms using AWS services
 Determine which AWS services can be leveraged to achieve loose
coupling of components.
 Determine when to leverage server less technologies to enable decoupling.
1.4 Choose appropriate resilient storage
 Define a strategy to ensure the durability of data.
 Identify how data service consistency will affect the operation of the application.
 Select data services that will meet the access requirements of the application.
 Identify storage services that can be used with hybrid or non-cloud-native
applications.
Domain 2: Design High-Performing Architectures
2.1 Identify elastic and scalable compute solutions for a workload
 Select the appropriate instance(s) based on compute, storage, and

networking requirements.
 Choose the appropriate architecture and services that scale to meet perfor
mance requirements.
 Identify metrics to monitor the performance of the solution.
 Select high-performing and scalable storage solutions for a workload
 Select a storage service and configuration that meets performance demands.
 Determine storage services that can scale to accommodate future needs.
2.2 Select high-performing networking solutions for a workload

 Select appropriate AWS connectivity options to meet performance demands.
 Select appropriate features to optimize connectivity to AWS public services.
 Determine an edge caching strategy to provide performance benefits
 Select appropriate data transfer service for migration and/or ingestion.
2.3 Choose high-performing database solutions for a workload

 Select an appropriate database scaling strategy.
 Determine when database caching is required for performance improvement.
 Choose a suitable database service to meet performance needs.
Domain 3: Design Secure Applications and Architectures
3.1 Design secure access to AWS resources

 Determine when to choose between users, groups, and roles.
 Interpret the net effect of a given access policy.
 Select appropriate techniques to secure a root account.
 Determine ways to secure credentials using features of AWS IAM.
 Determine the secure method for an application to access AWS APIs.
 Select appropriate services to create traceability for access to AWS resources.
3.2 Design secure application tiers

 Given traffic control requirements, determine when and how to use security
groups and network ACLs.
 Determine a network segmentation strategy using public and private subnets.
 Select the appropriate routing mechanism to securely access AWS service
endpoints or internet-based resources from Amazon VPC.
 Select appropriate AWS services to protect applications from external threats.
3.3 Select appropriate data security options
 Determine the policies that need to be applied to objects based on access

patterns.
 Select appropriate encryption options for data at rest and in transit for
AWS services.
 Select appropriate key management options based on requirements.
Domain 4: Design Cost-Optimized Architectures

4.1 Identify cost-effective storage solutions
 Determine the most cost-effective data storage options based on
requirements.
 Apply automated processes to ensure that data over time is stored on storage
tiers that minimize costs.
 Identify cost-effective compute and database services
 Determine the most cost-effective Amazon EC2 billing options for each
aspect of the workload.
 Determine the most cost-effective database options based on requirements.
 Select appropriate scaling strategies from a cost perspective.
 Select and size compute resources that is optimally suited for the workload.
 Determine options to minimize total cost of ownership (TCO) through
managed services and server less architectures.
4.3 Design cost-optimized network architectures

 Identify when content delivery can be used to reduce costs.
 Determine strategies to reduce data transfer costs within AWS.
 Determine the most cost-effective connectivity options between
AWS and on-premises environments.
Appendix
Which key tools, technologies, and concepts might be covered on the exam?
The following is a non-exhaustive list of the tools and technologies that could appear
on the exam. This list is subject to change and is provided to help you understand the
general scope of services, features, or technologies on the exam. The general tools
and technologies in this list appear in no particular order. AWS services are grouped
according to their primary functions. While some of these technologies will likely be
covered more than others on the exam, the order and placement of them in this list is
no indication of relative weight or importance:
Compute
 Cost management
 Database
 Disaster recovery
 High availability
 Management and governance
 Micro services and component decoupling
 Migration and data transfer
 Networking, connectivity, and content delivery
 Security
 Server less design principles
 Storage
AWS services and features

Analytics:
 Amazon Athena
 Amazon Elastic search Service (Amazon ES)
 Amazon EMR
 AWS Glue
 Amazon Kinesis
 Amazon Quick Sight
AWS Billing and Cost Management:

 AWS Budgets
 Cost Explorer Application
Integration:
 Amazon Simple Notification Service (Amazon SNS)
 Amazon Simple Queue Service (Amazon SQS)
Compute:
 Amazon EC2
 AWS Elastic Beanstalk
 Amazon Elastic Container Service (Amazon ECS)
 Amazon Elastic Kubernetes Service (Amazon EKS)
 Elastic Load Balancing
 AWS Fargate
 AWS Lambda
Database:
 Amazon Aurora
 Amazon DynamoDB
 Amazon ElastiCache
 Amazon RDS
 Amazon Redshift
SHARJAH
Buhaira Corniche
Management and Governance:
 AWS Auto Scaling

 AWS Backup
 AWS Cloud Formation
 AWS Cloud Trail
 Amazon Cloud Watch
 AWS Config
 Amazon Event Bridge (Amazon Cloud Watch Events)
 AWS Organizations
 AWS Resource Access Manager
 AWS Systems Manager
 AWS Trusted Advisor
Migration and Transfer:

 AWS Database Migration Service (AWS DMS)
 AWS DataSync
 AWS Migration Hub
 AWS Server Migration Service (AWS SMS)
 AWS Snowball
 AWS Transfer Family
Networking and Content Delivery:

 Amazon API Gateway
 Amazon Cloud Front
 AWS Direct Connect
 AWS Global Accelerator
 Amazon Route 53
 AWS Transit Gateway
 Amazon VPC (and associated features)
Security, Identity, and Compliance:

 AWS Certificate Manager (ACM)
 AWS Directory Service
 Amazon GuardDuty
 AWS Identity and Access Management (IAM)
 Amazon Inspector
 AWS Key Management Service (AWS KMS)
 Amazon Macie
 AWS Secrets Manager
 AWS Shield
 AWS Single Sign-On
 AWS WAF
Storage:
 Amazon Elastic Block Store (Amazon EBS)
 Amazon Elastic File System (Amazon EFS)
 Amazon FSx
 Amazon S3
 Amazon S3 Glacier
 AWS Storage Gateway
KHDA (Knowledge & Human Development Authority).
The Ministry of Education, Dubai. Educational quali-
ty assurance and regulatory authority of the Govern-
ment of Dubai,
AUTODESK is an American multinational software
corporation that makes software products and services
for the architecture, engineering, construction, manu-
facturing, media, education, and entertainment indus-
tries.
IATA/UFTA Montreal, Canada Extensive training

portfolio includes topics for airlines, airports, cargo
operators, governments, ground service providers,
travel agents, young professionals and more.
CIPS-UK Chartered Institute of Procurement & Supply..

Leading global excellence and offering chartered status
in procurement and supply chain.
ACCA (the Association of Chartered Certified Accoun-

tants) Global body for professional accountants. IMA (Institute of Management Accountants) is the
Approved Testing center
worldwide association of accountants and financial
CIMA ; Chartered Institute of Management Accoun-
professionals in business. Founded in 1919, IMA is one
tants – World's largest professional body of manage-
of the largest and most respected associations focused
ment accountants offering most relevant finance qualifi-
cation for business. exclusively on advancing the management accounting
profession
ZABEEL Advantage
With three decades of experience in designing
AIBM American Institute of Business & Management
the best training experience, ZABEEL understands the
nuances of training needs that are relevant and in (AIBM) USA American Institute of Business and Man-
demand in the market. This makes all the difference agement (AIBM) would certify professionals in all areas
when you choose an experienced training provider like
of Business & Management. American Institute of
ZABEEL for an unparalleled training quality and learning
Finance and Banking (AIFB) certication verifies Profi-
outcomes
ZABEEL is locally preferred and internationally ciencies of students in the domains of Accounting,
recognized Training institute with dedicated academies Finance. American Institute of Purchasing and Logistics
focusing on Engineering, IT, Logistics, Management &
Management (AIPLM) accredates Purchasing and
Soft skills, Airline, Finance and Languages
Supply Chain Management qualifications.
BUR DUBAI SHARJAH

Near Burjuman Metro Station Buhaira Corniche

AWS Certified Solutions Architect - Associate

Uploaded by

Copyright:

Available Formats

AWS Certified Solutions Architect - Associate

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

AWS Certified Solutions Architect - Associate

Uploaded by

Copyright:

Available Formats

Solutions Architect – Associate

 Design a solution by using appropriate AWS services and by following architectural

Target candidate description

The target candidate should have the following knowledge:

 Hands-on experience using computer, networking, storage, management, and

What is considered out of scope for the target candidate?

 Design a complex, hybrid network architecture

There are two types of questions on the exam:

Domain 1: Design Resilient Architectures 30%

Domain 2: Design High-Performing Architectures 28%

Domain 3: Design Secure Applications and Architectures 24%

Domain 4: Design Cost-Optimized Architectures 18%

Domain 1: Design Resilient Architectures

 Select the appropriate instance(s) based on compute, storage, and

2.2 Select high-performing networking solutions for a workload

2.3 Choose high-performing database solutions for a workload

Domain 3: Design Secure Applications and Architectures

3.1 Design secure access to AWS resources

3.2 Design secure application tiers

 Determine the policies that need to be applied to objects based on access

Domain 4: Design Cost-Optimized Architectures

4.3 Design cost-optimized network architectures

AWS services and features

AWS Billing and Cost Management:

 AWS Auto Scaling

Migration and Transfer:

Networking and Content Delivery:

Security, Identity, and Compliance:

IATA/UFTA Montreal, Canada Extensive training

CIPS-UK Chartered Institute of Procurement & Supply..

ACCA (the Association of Chartered Certiﬁed Accoun-

BUR DUBAI SHARJAH

You might also like