SAA-C03 — AWS Certified Solutions Architect – Associate Quick Review

Quick Review purpose

This Quick Review is for candidates preparing for the real AWS Certified Solutions Architect – Associate (SAA-C03) exam from AWS. Use it to refresh high-yield architecture decisions before moving into topic drills, mock exams, and detailed explanations.

The SAA-C03 exam is not mainly a memorization test. It rewards choosing the AWS service or architecture pattern that best satisfies requirements such as:

• High availability and fault tolerance
• Security and least privilege
• Performance and scalability
• Cost optimization
• Operational simplicity
• Migration constraints
• Data durability, retention, and access patterns

This page is IT Mastery review support and is not affiliated with AWS.

How to think like SAA-C03

Many questions describe a business workload and ask for the best or most cost-effective architecture. The right answer usually follows from the stated constraints.

Core architecture principles

Availability, durability, and fault tolerance

Shared responsibility model

AWS is responsible for security of the cloud. Customers are responsible for security in the cloud.

Exam trap: AWS manages more for serverless and managed services, but customers still configure identity, access, data classification, network exposure, and logging.

Networking and VPC review

VPC fundamentals

Security groups vs network ACLs

Common candidate mistake: Choosing a network ACL when the question asks for normal application access control. Security groups are the default control for instance-level access.

Public, private, and database subnets

VPC connectivity options

Trap: VPC peering is not transitive. If VPC A peers with B and B peers with C, A does not automatically reach C through B.

Route 53, CloudFront, and edge networking

Route 53 routing policy quick table

Compute and load balancing

EC2 purchasing and capacity

Auto Scaling

Trap: Auto Scaling improves elasticity and availability, but it does not by itself make a stateful application safe. Store state outside instances, such as in RDS, DynamoDB, EFS, S3, or ElastiCache.

Elastic Load Balancing

Containers and serverless compute

Decision rule: If the question emphasizes “run containers without managing servers,” look for Fargate. If it emphasizes “Kubernetes,” look for EKS.

Storage review

S3 high-yield concepts

S3 storage class selection

Common trap: Do not choose One Zone-IA for data that must remain resilient to AZ loss unless the scenario says the data is easily re-created.

EBS, EFS, FSx, and instance store

Trap: EBS volumes are AZ-scoped. If an EC2 instance needs access in another AZ, snapshots can be used to create a new volume there, but EBS is not a regional shared file system.

Storage decision path

    flowchart TD
	    A[Need storage?] --> B{Object, block, or file?}
	    B -->|Object| C[S3]
	    B -->|Block for EC2| D[EBS]
	    B -->|Shared Linux file| E[EFS]
	    B -->|Windows file share| F[FSx for Windows File Server]
	    B -->|HPC fast file processing| G[FSx for Lustre]
	    C --> H{Access pattern known?}
	    H -->|Frequent| I[S3 Standard]
	    H -->|Unknown or changing| J[S3 Intelligent-Tiering]
	    H -->|Archive| K[S3 Glacier classes]

Databases and caching

Relational database choices

Trap: Multi-AZ is for availability/failover, not read scaling in the usual SAA-C03 decision pattern. Read replicas are for read scaling.

NoSQL and purpose-built databases

Database decision rules

Security, identity, and encryption

IAM essentials

Common trap: Applications running on EC2 should usually use an IAM role attached to the instance profile, not stored access keys.

AWS Organizations controls

Trap: An SCP does not grant permissions. It only limits what can be granted by identity/resource policies.

KMS and secrets

Logging and detection

Trap: CloudWatch is not the same as CloudTrail. CloudWatch monitors metrics/logs; CloudTrail records API activity.

Application integration and decoupling

Messaging and event services

SQS review points

Common trap: If one message must be delivered to many subscribers, use SNS fanout, not a single SQS queue with multiple competing consumers.

Reliability and disaster recovery patterns

High-availability patterns

Disaster recovery approaches

Exam decision rule: If the question asks for the lowest cost DR option and can tolerate slower recovery, backup and restore is usually favored. If it asks for very fast recovery, warm standby or active-active may be more appropriate.

Migration, hybrid, and data transfer

Storage Gateway types

Monitoring, operations, and governance

Trap: For secure shell access without opening inbound SSH, Systems Manager Session Manager is often a better answer than a bastion host, assuming prerequisites are met.

Cost optimization review

Cost levers

Cost tools

Common trap: “Cheapest” is not always “best.” If the scenario requires high availability, durability, or compliance, avoid options that save money by violating stated requirements.

High-yield service comparison tables

S3 vs EBS vs EFS

ALB vs NLB vs CloudFront

SQS vs SNS vs EventBridge vs Kinesis

RDS Multi-AZ vs read replica

Common SAA-C03 traps

Trap 1: Ignoring “managed” and “least operational overhead”

If two answers work technically, the exam often favors the one with less administration when the scenario requests minimal operations.

Trap 2: Confusing HA with scalability

An Auto Scaling group may improve both availability and scalability, but an RDS read replica mostly improves read scalability, while Multi-AZ improves availability.

Trap 3: Choosing public access when private access is required

If the question asks for private connectivity to AWS services, consider:

• VPC gateway endpoints for supported services such as S3 and DynamoDB
• VPC interface endpoints powered by PrivateLink for many AWS services
• Private subnets with no direct inbound internet route
• Direct Connect or VPN for hybrid connectivity

Trap 4: Misreading “real-time”

“Real-time” can point to different services:

Trap 5: Overusing Multi-Region

Multi-Region designs can improve disaster recovery and latency but add cost and complexity. If the question only requires high availability within a Region, Multi-AZ is often enough.

Trap 6: Forgetting state

Stateless compute is easier to scale and replace. Store state in managed external services:

Fast final-review checklist

Before answering an SAA-C03 scenario question, ask:

1. What is the primary requirement? Cost, availability, security, performance, or operational simplicity?
2. Is the workload stateful or stateless?
3. Does it need relational features, key-value scale, file storage, object storage, or block storage?
4. Is traffic synchronous, queued, pub/sub, event-driven, or streaming?
5. Is the architecture single-AZ, Multi-AZ, or Multi-Region?
6. Does the question require private connectivity or public access?
7. Can a managed or serverless service reduce operational overhead?
8. Are there hidden cost drivers such as idle capacity, cross-AZ transfer, NAT processing, or overprovisioned storage?
9. Does the proposed answer satisfy every stated constraint, not just one?
10. Does any answer add unnecessary complexity?

Practice connection

Use this Quick Review as a final concept pass, then move into IT Mastery practice with original practice questions. The fastest way to improve for AWS Certified Solutions Architect – Associate (SAA-C03) is to test service selection under realistic constraints:

• Start with focused topic drills on weak areas such as VPC networking, S3 storage classes, RDS vs DynamoDB, IAM/KMS, and decoupling.
• Review detailed explanations for both correct and incorrect answers.
• Track repeated mistakes by decision type, not just by service name.
• Then use timed mock exams to practice reading scenario wording quickly.

Next step: choose one weak domain, complete a short question bank drill, and review every explanation until you can state why the best answer is better than the plausible distractors.

Continue in IT Mastery

Use this Quick Review as a final concept map, then move into IT Mastery for focused topic drills, mixed practice sets, timed mock exams, and detailed explanations. The practice questions are original IT Mastery practice items; they are not official AWS questions, copied live-exam content, or exam dumps.