In this lesson you will
- Describe how each module moves from short lessons to a lab to a checkpoint, and how the capstone and practice exam close the course
- State the exam's format, scoring and domain weights from the published SAA-C03 exam guide
- Set up a study plan that uses labs, checkpoints and missed questions to find and close gaps
- Name the recent AWS changes this edition teaches that older material may not
Why it matters
The Solutions Architect – Associate exam rarely asks you to recall a fact on its own. It describes a company, lists what it needs, and offers four answers that would all work to some degree. Your job is to pick the one that fits the requirement that matters most: the most secure, the most resilient, the fastest or the cheapest. Picture a team that has to move a reporting system to AWS by the end of the quarter with no database administrator. Two answers run the database perfectly well, but only one of them avoids patching servers the team cannot look after. This course is built to teach you to see that difference quickly, and to back it with things you have built yourself.
How the course is built
There are eleven modules. Modules 2 to 10 follow the same rhythm:
- Lessons. Short pages, one topic each. Every lesson opens with why the topic matters, includes at least one Try it block you can run with the AWS CLI or Python (read-only or Free Tier), and ends with Exam tips.
- A lab. Numbered steps with complete commands, a “Check your work” list, and a “Clean up” section. Labs tell you at the top what, if anything, they bill for.
- A checkpoint. Ten new scenario questions that span the whole module. They are not repeats of the lesson questions, so they test whether the ideas transfer.
Module 1 (this page and the sandbox lab) gets your account safe to learn in. Module 11 closes the course with a capstone project, a three-tier architecture you deploy from a CloudFormation template and then try to break, an exam strategy lesson, and a full practice exam of 65 questions weighted like the real one.
Every page ends with its own questions. Answer them all and check them: get at least 7 in 10 right and the page is passed, and the next one opens. You can try as often as you like, and after three tries the answers and explanations are shown.
Module 1 is open to everyone. To go further, sign in with your email address: there is no password, just a one-time link. Your progress is then saved to your account, so it follows you to any device, and the outline beside each lesson shows what you have passed and what is still locked.
| Module | Topic | Exam domains it feeds most |
|---|---|---|
| 1 | Getting started | All |
| 2 | Identity and access management | Secure |
| 3 | Networking | Secure, high-performing, cost |
| 4 | Compute | Resilient, high-performing, cost |
| 5 | Storage | Secure, high-performing, cost |
| 6 | Databases | Resilient, high-performing, cost |
| 7 | Integration and messaging | Resilient, high-performing |
| 8 | Security | Secure |
| 9 | Resilience and operations | Resilient |
| 10 | Cost optimization | Cost |
| 11 | Capstone and exam | All |
How the exam is built
These facts come from AWS’s SAA-C03 exam guide. Read it again before you book, because AWS revises exams.
- Question types. Multiple choice has one correct answer and three distractors. Multiple response has two or more correct answers among five or more options, and the question tells you how many to choose.
- Scored and unscored. 50 questions count toward your score. Another 15 are unscored questions AWS is trialling. You cannot tell which is which, so treat every question as if it counts.
- No penalty for guessing. An unanswered question is scored as wrong. Never leave one blank.
- Scaled score. Results are reported from 100 to 1,000 and the minimum passing score is 720. Scaling evens out differences between exam forms, so 720 is not the same as 72% correct.
- Compensatory scoring. You pass on the overall score, not per domain.
- Domain weights. Design secure architectures 30%, design resilient architectures 26%, design high-performing architectures 24%, design cost-optimized architectures 20%.
The AWS Certification exam page lists the time allowed, delivery options and the current fee. You book and sit the exam yourself through AWS Certification. Pontelon does not run exams or sell vouchers, and this course is independent of AWS.
Phrases that point to a service
Scenarios rarely name the service they want. They describe a need in words that, with practice, point straight at one. Start a list of your own as you go; these are the commonest. Each is taught properly in the module named.
| When the scenario says | It usually points to | Module |
|---|---|---|
| “decouple”, “buffer requests”, “process later” | Amazon SQS | 7 |
| “notify several systems of the same event” | Amazon SNS fanning out to SQS queues | 7 |
| “react to events from AWS services or SaaS apps”, “run on a schedule” | Amazon EventBridge | 7 |
| “ingest a real-time stream”, “replay records” | Amazon Kinesis Data Streams | 7 |
| “shared file system for Linux instances” | Amazon EFS | 5 |
| “Windows file shares”, “SMB” | Amazon FSx for Windows File Server | 5 |
| “key-value”, “single-digit millisecond at any scale” | Amazon DynamoDB | 6 |
| “query files in S3 with SQL, no servers to manage” | Amazon Athena | 6 |
| “cache content close to users worldwide” | Amazon CloudFront | 3 |
| “static IP addresses”, “TCP or UDP”, “fast Regional failover” | AWS Global Accelerator | 3 |
| “rotate database credentials automatically” | AWS Secrets Manager | 8 |
| “block SQL injection or cross-site scripting” | AWS WAF | 8 |
| “find sensitive data such as PII in S3” | Amazon Macie | 8 |
| “who made this API call” | AWS CloudTrail | 8 |
The exam strategy lesson at the end of the course adds the other half: the qualifiers, such as most cost-effective or least operational overhead, that decide between two answers that both work.
A study plan you can follow
The plan is a sequence, not a timetable. Go at the pace your week allows.
- Do module 1 first, fully. The sandbox lab sets up multi-factor
authentication, short-lived CLI credentials and a budget alert. Every
later lab assumes the
sandboxprofile exists. - For each module: read the lessons and run every Try it block, do the lab including the clean-up, then take the checkpoint without notes.
- Log your misses. For each wrong checkpoint answer, write one line: the requirement you missed and why your chosen answer lost. Patterns show up fast, such as always choosing the option that works but costs more.
- Close gaps before moving on. Revisit the lesson the checkpoint points to. Later modules assume earlier ones; networking gaps resurface in compute, storage and cost.
- Build the capstone after module 10. It is the best rehearsal for reading a scenario as a set of design decisions.
- Sit the practice exam in one go, without notes, then use its review table to map every miss back to a lesson.
- Read the exam guide’s in-scope services list one last time. Any service you cannot place in a sentence is worth an hour.
What changed recently
AWS changes faster than exams do, and older study material can teach things that are no longer true. This edition covers these changes in the lessons where they belong; each one is checked against AWS’s own announcements or documentation.
| When | Change | Where it is taught |
|---|---|---|
| November 2024 | Resource control policies (RCPs) in AWS Organizations | Multi-account governance, IAM policies and evaluation |
| November 2024 | Centralized root access management for member accounts | Multi-account governance |
| December 2024 | Declarative policies for EC2, VPC and EBS settings | Multi-account governance |
| June 2025 | MFA required for root users in all account types, including member accounts | Lab: sandbox account |
| September 2025 | Full IAM policy language in service control policies | Multi-account governance |
Later modules flag their own recent changes in a “What changed recently” note. Exam questions can lag behind such changes, so learn both the current behaviour and the principle the exam is testing.
Try it: check your tools
Before the lab, confirm your tools are ready. Nothing here calls AWS or costs anything.
aws --version
python3 -c "import boto3; print('boto3', boto3.__version__)"
aws configure list-profiles
The first line should start aws-cli/2. (version 1 of the CLI lacks
aws configure sso and several commands used later). The second prints the
installed boto3 version; if Python reports ModuleNotFoundError, run
pip install boto3. The third lists profiles you already have. It may be
empty, which is fine: the next lab creates one called sandbox. If a
profile for a work account appears, leave it alone and never use it for
these labs.
Exam tips
- Read the final sentence of each question first. It usually holds the qualifier that decides it: most cost-effective, least operational overhead, most secure.
- Answer every question. Blank answers score zero and guessing is free.
- For multiple response, select exactly the number asked for.
- Do not try to spot unscored questions; you cannot, and it wastes time.
- Learn the current behaviour of a service, and the principle behind it, so an older or newer phrasing of a question does not throw you.
Key takeaways
- Every module has the same rhythm: short lessons, a hands-on lab, then a checkpoint with questions you have not seen.
- The exam has 65 questions; 50 are scored and 15 are unscored, and an unanswered question counts as wrong.
- Results are scaled from 100 to 1,000 and 720 passes; you pass on the overall score, not per domain.
- Secure architectures carry the most weight (30%), then resilient (26%), high-performing (24%) and cost-optimized (20%).
- Module 1 is open to everyone; sign in to save your progress and unlock each later lesson by passing the one before it.
- Each scenario has one deciding requirement; find it in the final sentence before you read the answers.
Lesson questions
Answer all 10, then check them. You need 7 right to pass this lesson and unlock the next one. Try as often as you like; after three tries the answers and explanations are shown. These are our own questions, written for this course.
You book and take the exam yourself with AWS. We do not run exams or sell exam vouchers. Pontelon is not affiliated with, endorsed by, or an authorized training partner of AWS. Practice questions are our own, written against the published exam guide, never leaked exam content. Certification names are trademarks of their owners.