SAA-C03

AWS Certified Solutions Architect – Associate (SAA-C03) Study Notes and Practice Tests

Free AWS Certified Solutions Architect Associate (SAA-C03) study notes and practice tests. Design resilient, secure, high-performing, cost-optimized architectures.

Start free practice testsAll certifications

What you'll study

Free SAA-C03 practice questions

Try real exam-style questions from the course — no sign-up needed. Open each one to see the answer and explanation.

  1. AWS Architect 01 Architecting Fundamentals

    A team must justify a new architecture against operational, security, reliability, performance, cost, and sustainability goals. Which AWS framework provides this structure?

    • The AWS Well-Architected Framework (six pillars)
    • The AWS Cloud Adoption Framework (CAF)
    • The AWS Shared Responsibility Model
    • The AWS Service Catalog
    Show answer

    Answer: The AWS Well-Architected Framework (six pillars)

    The Well-Architected Framework defines six pillars — Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability — used to evaluate and improve architectures.

  2. AWS Architect 02 Account Security

    An EC2-hosted application needs to read from an S3 bucket. What is the most secure way to grant access?

    • Attach an IAM role to the EC2 instance
    • Store an IAM user's access keys on the instance
    • Make the bucket public
    • Embed root user credentials in the app config
    Show answer

    Answer: Attach an IAM role to the EC2 instance

    IAM roles provide temporary, automatically-rotated credentials to the instance with no long-term keys stored — the best-practice approach.

  3. AWS Architect 03 Networking 1

    Instances in a private subnet must download OS updates from the internet but must not be reachable from it. What do you use?

    • A NAT gateway in a public subnet
    • An internet gateway attached to the private subnet
    • An egress-only internet gateway for IPv4
    • A VPC peering connection
    Show answer

    Answer: A NAT gateway in a public subnet

    A NAT gateway allows outbound-only internet access for private instances while blocking inbound connections from the internet.

  4. AWS Architect 04 Compute

    A workload is fault-tolerant batch processing that can handle interruptions and needs the lowest compute cost. Which purchasing option fits best?

    • Spot Instances
    • On-Demand Instances
    • Reserved Instances
    • Dedicated Hosts
    Show answer

    Answer: Spot Instances

    Spot Instances use spare capacity at up to ~90% off and are ideal for interruption-tolerant workloads like batch processing.

  5. AWS Architect 05 Storage

    Objects are accessed unpredictably and you want automatic cost optimisation with no retrieval fees. Which S3 storage class fits?

    • S3 Intelligent-Tiering
    • S3 Standard
    • S3 Glacier Deep Archive
    • S3 One Zone-IA
    Show answer

    Answer: S3 Intelligent-Tiering

    Intelligent-Tiering automatically moves objects between access tiers based on usage with no retrieval fees — ideal for unknown/changing patterns.

Practise the full SAA-C03 question bank free

Free SAA-C03 flashcards

Hands-on labs

Practice on real AWS with free, step-by-step labs:

Study notes & practice tests

This certification has a full in-app learning path — module-by-module study notes, spaced-repetition flashcards, and timed practice tests. Create a free account to start.

Recommended next

Next: MLA-C01AWS Certified Machine Learning Engineer – Associate →