What Is the AWS SAP-C02 Exam
The AWS Certified Solutions Architect Professional (SAP-C02) is one of the most respected cloud certifications in the industry. It validates advanced skills in designing distributed systems, optimizing cost and performance, and implementing secure architectures across complex AWS environments. According to the official AWS certification page, the exam targets professionals with two or more years of hands-on experience designing and implementing cloud solutions on AWS.
The exam consists of 75 questions (65 scored, 10 unscored) in multiple-choice and multiple-response format. You have 180 minutes to complete it, and it costs $300 USD. The passing score is reported on a scale of 100 to 1,000, with the threshold set by AWS subject-matter experts. The certification remains valid for three years before you need to recertify.
This is not an entry-level exam. It sits at the Professional tier in the AWS certification path, meaning AWS expects you to already hold the Solutions Architect Associate or have equivalent real-world experience. The questions are scenario-based, often presenting a complex business problem with multiple valid-but-suboptimal answers. Your job is to pick the best answer based on the Well-Architected Framework pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.
SAP-C02 Exam Domains Breakdown
The exam is organized into four domains, each carrying a specific weight. Understanding this breakdown is critical because it tells you exactly where to invest your study hours. The official SAP-C02 Exam Guide (PDF) details every task and knowledge area within each domain.
| Domain | Weight |
|---|---|
| Domain 1: Design Solutions for Organizational Complexity | 26% |
| Domain 2: Design for New Solutions | 29% |
| Domain 3: Continuous Improvement for Existing Solutions | 25% |
| Domain 4: Accelerate Workload Migration and Modernization | 20% |
Domain 1 covers networking strategies (VPC peering, Transit Gateway, Direct Connect, hybrid DNS), security controls (IAM, KMS, security groups, centralized logging), disaster recovery (RTO/RPO analysis, pilot light, warm standby, multi-site), and multi-account architecture (AWS Organizations, Control Tower, service control policies). This domain tests whether you can design solutions that span multiple accounts, regions, and VPCs.
Domain 2 is the heaviest at 29%. It focuses on designing new workloads: compute selection (EC2, Lambda, ECS, EKS), storage tiering (S3 lifecycle policies, EFS, EBS), database strategy (RDS, Aurora, DynamoDB, ElastiCache), and event-driven architectures (EventBridge, SQS, SNS). Expect questions about choosing the right service for specific throughput, latency, and cost requirements.
Domain 3 tests your ability to optimize existing architectures. Topics include cost optimization (Reserved Instances, Savings Plans, Spot Instances), performance tuning (CloudFront caching, auto-scaling policies), and operational improvements (Infrastructure as Code with CloudFormation, monitoring with CloudWatch). You will face scenarios where a company has a running workload and needs to reduce costs by 30% or improve availability from 99.9% to 99.99%.
Domain 4 covers migration and modernization using the AWS Migration Acceleration Program. Key topics include database migration (DMS, SCT), application modernization (containerization, serverless transformation), and hybrid cloud strategies. You need to know the six strategies for migrating applications: rehost, replatform, repurchase, refactor, retain, and retire.
Who Should Take SAP-C02
The SAP-C02 is designed for solutions architects, cloud engineers, and technical leads who design systems on AWS daily. AWS recommends two or more years of experience before attempting this exam. That recommendation is not a suggestion — candidates with less than a year of AWS experience consistently report that the exam feels overwhelming.
Here is a practical checklist to determine if you are ready:
- You hold the AWS Solutions Architect Associate (SAA-C03) or have equivalent knowledge.
- You can design a multi-tier application architecture on AWS without referencing documentation.
- You understand VPC networking at a deep level: route tables, NAT gateways, VPC endpoints, Transit Gateway, and Direct Connect.
- You have hands-on experience with Infrastructure as Code (CloudFormation or Terraform).
- You can explain the difference between SCPs, IAM policies, and resource-based policies.
If you cannot confidently check at least four of those five boxes, spend time building real architectures first. The SAP-C02 tests judgment gained from experience, not memorized facts. You cannot cram your way through scenario-based questions that require trade-off analysis between cost, performance, and security. If you are earlier in your cloud journey, start with our AWS Cloud Practitioner exam guide and work up from there.
This certification also opens specific career doors. It is listed among the top 15 highest-paying IT certifications in the Skillsoft IT Skills and Salary Report. Solutions architects holding this cert routinely land roles paying $150,000 to $200,000+ in the US market, particularly in organizations running large-scale AWS deployments.
Study Materials That Work
Not all study resources are created equal. The SAP-C02 tests deep architectural judgment, so passive video watching alone will not cut it. Here is a ranked list of materials based on feedback from certified professionals:
1. AWS Official Exam Guide and Sample Questions. Start here. The official exam guide lists every task statement, knowledge area, and skill you will be tested on. Read it twice. Then work through the official practice question set available on AWS Skill Builder. These questions mirror the exam format closely.
2. Tutorials Dojo Practice Exams. Jon Bonso’s practice exams from Tutorials Dojo are widely regarded as the best third-party prep. The questions are slightly harder than the real exam, which is exactly what you want. Each answer includes detailed explanations with links to AWS documentation.
3. AWS Well-Architected Framework. Read every pillar: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. The exam is built on these pillars. Download the whitepapers directly from the AWS Well-Architected page. Each whitepaper is 40-80 pages and packed with decision frameworks that map directly to exam questions.
4. AWS Documentation and FAQs. For services that appear heavily on the exam (Organizations, Control Tower, Transit Gateway, Direct Connect, IAM, KMS, CloudFormation), read the official AWS documentation and the service FAQs. Exam questions often test edge cases documented in FAQs but not covered in video courses.
5. Adrian Cantrill’s Video Course. Available on learn.cantrill.io, this course provides deep-dive technical explanations with architecture diagrams. It is longer than most competitors but covers the material at the depth the exam demands.
10-Week Study Plan
This plan assumes you already hold the Solutions Architect Associate and can dedicate 10-15 hours per week. Adjust the timeline up or down based on your experience level.
Weeks 1-2: Foundation Review. Re-read the exam guide. Refresh your knowledge of core services: VPC, IAM, S3, EC2, RDS, Lambda, CloudFormation. Focus on services you use least in your day job. If you work mostly in compute, spend extra time on networking and database services. Read the Well-Architected Framework pillars.
Weeks 3-4: Multi-Account and Networking Deep Dive. Study AWS Organizations, Control Tower, Service Control Policies, and multi-account strategies. Deep-dive into Transit Gateway, VPC peering vs. Transit Gateway, Direct Connect, VPN, and hybrid DNS with Route 53 Resolver. Build a lab with three VPCs connected via Transit Gateway. This covers Domain 1 (26% of the exam).
Weeks 5-6: Design for New Solutions. This is your heaviest domain at 29%. Study compute selection criteria, storage tiering strategies, database engine selection, caching strategies, and event-driven architectures. Practice designing architectures from requirements. Pick a real-world scenario (e.g., an e-commerce platform handling 10,000 orders per hour) and design the full architecture on paper, then compare it to AWS reference architectures.
Weeks 7-8: Optimization and Migration. Cover Domain 3 (cost optimization, performance tuning, monitoring) and Domain 4 (migration strategies, database migration, modernization). Study the six R’s of migration. Learn to calculate Total Cost of Ownership (TCO) and compare migration approaches based on RTO/RPO requirements.
Week 9: Practice Exams and Gap Analysis. Take full-length practice exams under timed conditions. Score each domain separately. Identify your weakest domain and study those topics intensively. Review every wrong answer and understand why the correct answer is better. This is where the real learning happens.
Week 10: Final Review and Exam Readiness. Re-read the exam guide one more time. Review AWS service FAQs for high-frequency services. Take one final practice exam. If you are scoring 80% or above consistently, schedule the exam. If not, extend by one week and focus on your weak areas.
Hardest Exam Topics
Certain topics appear repeatedly in candidate failure reports. These are the areas where the exam differentiates between someone who memorized services and someone who understands architecture:
Service Control Policies vs. IAM Policies. Many candidates confuse what SCPs can and cannot do. SCPs set permission boundaries but do not grant permissions. A user must have both an SCP allowing the action AND an IAM policy granting it. The “implicit deny” behavior of SCPs trips people up constantly.
Transit Gateway vs. VPC Peering. The exam loves scenarios where you must choose between Transit Gateway, VPC peering, and AWS PrivateLink. Transit Gateway supports transitive routing and scales better for mesh topologies. VPC peering does not support transitive routing. Know when each is the right answer based on the number of VPCs, traffic patterns, and cost.
Migration Strategy Selection. The six R’s (rehost, replatform, repurchase, refactor, retain, retire) are straightforward in theory, but the exam presents complex scenarios where multiple strategies could work. You must select the optimal strategy based on business constraints: timeline, budget, team skills, and application criticality.
Cost Optimization Trade-offs. Expect questions where you must choose between Reserved Instances, Savings Plans, and Spot Instances for a workload with specific availability requirements. Know when to use Compute Savings Plans vs. EC2 Instance Savings Plans, and how Spot interruption notices affect architecture decisions.
Disaster Recovery Strategy Selection. You must map RTO and RPO values to specific DR strategies (backup and restore, pilot light, warm standby, multi-site). The exam gives you specific RTO/RPO numbers and expects you to select the cheapest strategy that meets both requirements.
Exam Day Strategy
Time management is the single biggest factor in passing the SAP-C02. With 75 questions in 180 minutes, you have approximately 2.4 minutes per question. Some questions will take 30 seconds; others will take 5 minutes. Here is how to maximize your score:
Flag and move. If a question takes more than 90 seconds and you are unsure, flag it and move on. Easy questions and hard questions are worth the same points. Do not burn 5 minutes on one question when you could answer three easier ones.
Eliminate wrong answers first. Most SAP-C02 questions have two obviously wrong answers and two plausible ones. Cross out the wrong ones first, then compare the remaining two against the specific requirements in the scenario. Look for keywords like “most cost-effective,” “lowest latency,” or “minimal operational overhead” — these determine the correct answer.
Read the entire question. SAP-C02 questions are long, often a full paragraph. Key constraints are buried in the middle or at the end. Skipping to the last sentence means you miss critical details that eliminate otherwise valid answers.
Manage your energy. Three hours is a long exam. Take a bathroom break if needed (the clock keeps running for online proctored exams). Have water nearby. Do not rush through the last 20 questions because you are mentally fatigued — those questions count the same as the first 20.
Review flagged questions. After completing all questions, return to your flagged items. With fresh eyes, many become clearer. Change answers only if you have a concrete reason — your first instinct is usually correct.
Salary and Career Impact
The AWS Solutions Architect Professional certification has measurable career impact. According to the Skillsoft IT Skills and Salary Report, it ranks among the top-paying cloud certifications in North America. Certified solutions architects in the US earn an average base salary between $150,000 and $190,000, with senior and principal architects exceeding $200,000 in major metro areas.
Beyond salary, the certification serves as a credibility signal. AWS Partner Network (APN) partners are required to maintain a certain number of certified professionals at each tier. Holding the Professional certification makes you valuable to consulting firms, managed service providers, and enterprises running large AWS deployments.
The certification also opens paths to specialty certifications. Many professionals follow SAP-C02 with the AWS Certified Security Specialty or the AWS Certified DevOps Engineer Professional. Each specialty deepens your expertise in a specific area and further differentiates your resume. Check our ranking of the best IT certification practice tests for prep resources across all these paths.
Recertification is required every three years. You can recertify by taking the latest version of the SAP-C02 exam or by earning a higher-level certification. AWS also offers a 50% discount on recertification exams for holders of active AWS certifications.