Associate exams and scenario questions

What changes at associate level

A foundational exam asks "What is S3?". An associate exam describes a company, its traffic, its budget and a problem, then asks which design solves it best. Usually two options would work, but only one fits every word of the question. You need hands-on experience and the habit of reading carefully.

The main associate exams

Always check the current exam guide; codes and details change. AWS also has associate exams for data engineering and machine learning engineering if you want to specialise later.

SAA-C03 domains

The SAA-C03 guide has four domains, roughly in this order of weight: Design Secure Architectures (the largest), Design Resilient Architectures, Design High-Performing Architectures, and Design Cost-Optimized Architectures (the smallest, but still about a fifth). They map neatly to this course: security to Modules 2 and 11, resilience to Modules 4 and 10, performance to Modules 3 to 5 and 8, and cost to Modules 2 and 5.

Scenario-question technique

1. Read the last line first. It tells you what is really asked: "Which solution meets these requirements with the LEAST operational overhead?"
2. Underline the keywords. "Most cost-effective" points to Spot, Savings Plans, S3 lifecycle rules, Glacier classes or serverless. "Least operational overhead" points to managed services: RDS over a database on EC2, Fargate over self-managed servers, Lambda over cron on EC2. "Highly available" means multiple Availability Zones. "Decouple" means SQS or SNS. "Real time" rules out batch.
3. Read the scenario for hard limits: data size, latency, "must not be reachable from the internet", "within 12 hours", "existing on-premises Active Directory".
4. Eliminate. Remove options that break a limit, that use a service that cannot do the job, or that add work the question wants to avoid. Usually you are left with two; pick the one that matches every keyword.
5. Do not fight the question. If it says the company wants no code changes, an answer that rewrites the app is wrong even if it is a better design.
6. Flag and move on. With about two minutes per question, mark hard ones and come back. There is no penalty for guessing, so never leave a blank.

Worked example

Question: "A company stores monthly audit reports in S3. They are rarely read but must be kept for 7 years. Retrieval within 12 hours is acceptable. Which storage class is MOST cost-effective?" The last line asks for cost. The limit is retrieval within 12 hours. S3 Standard and Standard-IA work but cost more. Glacier Flexible Retrieval works. Glacier Deep Archive is the cheapest, and its standard retrieval completes within 12 hours. Answer: S3 Glacier Deep Archive, set by a lifecycle rule.

An 8 to 10 week plan for SAA-C03 (about 8 to 10 hours a week)

• Weeks 1 to 2: IAM, Organizations, VPC design (subnets, routing, NAT, endpoints), security groups and NACLs. Build a VPC by hand.
• Weeks 3 to 4: EC2, Auto Scaling, load balancers, EBS, EFS, S3 in depth (classes, lifecycle, replication, encryption).
• Weeks 5 to 6: RDS, Aurora, DynamoDB, ElastiCache; SQS, SNS, EventBridge, Lambda, API Gateway; CloudFront and Route 53 routing.
• Week 7: KMS, Secrets Manager, WAF, Shield, GuardDuty; backup and disaster recovery strategies; cost tools.
• Weeks 8 to 10: official practice question sets and a full timed practice exam; review every wrong answer against the docs; build the three-tier project from the next topic.