AWS Certified Solutions Architect – Associate (SAA-C03) Study Guide 2026
$10 · instant PDF download (link also emailed)
For cloud and IT people who know the AWS basics and want a focused review of the four SAA-C03 design domains.
Covers AWS Solutions Architect – Associate SAA-C03 · Written and maintained by Todd Lavergne, Todd Lavergne Media · Last updated Oct 2026
SAA-C03 questions are scenarios with one key requirement — cheapest, most available, least overhead, most secure. This guide teaches you to spot that word and pick the service that fits.
- Lessons for all four SAA-C03 domains
- 80 original practice questions with answers and short explanations
- Service comparison tables (storage, load balancers, DR strategies, pricing models)
- Cheat sheet plus 4- and 8-week study plans
- Instant PDF after payment — link also arrives by email
Safe, secure checkout. Pay securely with PayPal or a debit or credit card via PayPal guest checkout.
Download on the thank-you page and by email.
What’s not included
Not a live class, not a video course, and not a promise you will pass. Exam facts are dated October 2026 and cited to official sources inside; always confirm current details with the official exam body before you book.
Disclaimer: an independent PDF study aid, not affiliated with or endorsed by AWS. All practice questions are original.
Free sample: 5 questions from the guide
Taken straight from the AWS Solutions Architect – Associate guide. Try each one, then tap “Show answer.”
An EC2 app must read objects from an S3 bucket. Most secure way to grant access?
- A) Store access keys in a config file
- B) Attach an IAM role to the instance
- C) Make the bucket public
- D) Use the root user's keys
Show answer
Answer: B — Roles provide temporary, rotated credentials.
A team must block a specific malicious IP range from a subnet. Use:
- A) Security group deny rule
- B) Network ACL deny rule
- C) IAM policy
- D) Route 53
Show answer
Answer: B — Security groups can't deny.
Requirement: audit who used which encryption key and when, for S3 objects. Choose:
- A) SSE-S3
- B) SSE-KMS
- C) No encryption
- D) SSE-C
Show answer
Answer: B — KMS usage is logged in CloudTrail.
An order system's web tier must keep accepting orders when the processing tier is slow. Best design?
- A) Direct HTTP calls
- B) Put orders in an SQS queue
- C) Bigger instances
- D) Route 53 failover
Show answer
Answer: B — Decoupling absorbs spikes.
Reduce internet data-transfer-out costs for a popular static site on S3. Use:
- A) CloudFront
- B) Larger bucket
- C) NAT gateway
- D) Direct Connect
Show answer
Answer: A — Edge caching reduces origin egress and usually lowers per-GB cost.
Practice questions are original teaching items, not real exam questions. Independent study aid; not affiliated with or endorsed by the exam provider.
Already using a main course or textbook? This $10 guide is a low-cost add-on: a compact review plus original practice questions with explanations to check your weak spots.
Ready when you are.