- Design architectures built for the cloud
- Integrate AI and ML services into architectures
- Design hybrid cloud integration patterns
- Design network architectures
- Design data, storage, and database architectures
AWS Certified Solutions Architect Professional Training
We'll get you ready for the AWS Certified Solutions Architect Professional exam, the top AWS architecture credential.
What the Solutions Architect Professional course covers and who it's for.
AWS has published the SAP-C03 exam guide. SAP-C03 registration opened October 27, 2026, and SAP-C03 exams start November 17, 2026. The last day to take SAP-C02 is November 16, 2026. If you're testing after that, you're on SAP-C03, and that's the outline this course follows.
AWS says SAP-C03 validates advanced skills in designing optimized AWS solutions based on the AWS Well-Architected Framework. Architecture Design and Implementation Built for the Cloud and Security, Compliance, and Governance are the two biggest domains at 25% each, so they get the most class time.
Live virtual expert-led classes with hands-on labs and practice questions.
Accumentum is an AWS Authorized Training Partner. AWS sets exam content, fees and policies, so check aws.amazon.com/certification before you book.
Get ready for Solutions Architect Professional the way the exam is built.
Cover the Whole Exam Guide
Work through all 5 domains in the SAP-C03 exam guide, weighted the way AWS weights them.
Spend Time Where the Weight Is
Cloud architecture and security are 25% each of the scored content per AWS, so they get the most class time.
Practice in Real AWS Labs
Hands-on lab work on the tasks the SAP-C03 guide lists, from Amazon Bedrock integrations to multi-account pipelines.
Be Ready for Test Day
The exam has 75 multiple choice and multiple response questions in 180 minutes. We practice both question types under time.
Who Should Attend
- Senior cloud architects.
- Solutions Architect Associate holders ready to move up.
- Consultants who design large AWS environments.
- Engineers who lead migrations to AWS.
Prerequisites
- AWS doesn't require another certification first, and we don't have enrollment prerequisites either.
- AWS recommends 2 or more years of experience using AWS services to design and implement cloud solutions.
The Solutions Architect Professional course in 5 modules.
Each module is one domain from the SAP-C03 exam guide, with its exam weight.
- Design identity security architectures
- Design solutions to implement encryption and key management strategies
- Design multi-account governance and compliance solutions
- Design architectures to meet compliance requirements
- Design security and responsible AI controls
- Design architectures based on AWS pricing models
- Optimize data transfer and network costs
- Design cost allocation and visibility solutions
- Optimize storage and database costs
- Design migration strategies by using AWS frameworks
- Design disaster recovery architectures
- Design solutions to meet business continuity and resiliency requirements
- Design infrastructure as code
- Design CI/CD and DevSecOps pipelines
- Design observability and monitoring solutions
- Design operational automation and resilient systems
How we teach Solutions Architect Professional.
Expert-Led Classes
Live virtual instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Labs
Lab work in AWS tied to the tasks in the SAP-C03 exam guide.
Exam Guide Mapping
Every module maps to a domain in the SAP-C03 exam guide.
Exam Strategy
Timed practice with multiple choice and multiple response questions, plus test day tips for the center or online.
About the Solutions Architect Professional exam.
Solutions Architect Professional Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for Solutions Architect Professional the same way.

Exam update: SAP-C03 registration opened October 27, 2026, and SAP-C03 exams start November 17, 2026. The last day to take SAP-C02 is November 16, 2026.
Per AWS, AWS Certified Solutions Architect Professional (SAP-C03) is a Professional level exam with 75 multiple choice and multiple response questions in 180 minutes. You can take it at a Pearson VUE test center or as an online proctored exam.
AWS certifications are valid for three years. Full details are on the AWS Solutions Architect Professional page, in the SAP-C03 exam guide and in the AWS comparison of SAP-C02 and SAP-C03.
Accumentum is an AWS Authorized Training Partner. AWS sets exam content, fees and policies, so check aws.amazon.com/certification before you book. We're also an Army CA and Air Force COOL Approved Vendor.
Every SAP-C03 task, in AWS's own words.
Here is the full SAP-C03 blueprint at the task level. That means 5 domains, 21 tasks and the 115 skills AWS lists under them.
Domain 1: Architecture Design and Implementation Built for the Cloud (25%)
Task 1.1: Design architectures built for the cloud
- Design event-driven architectures that use appropriate messaging patterns such as idempotency, ordering, and delivery guarantees (for example, by using Amazon EventBridge, Amazon SQS FIFO queues and standard queues, Amazon SNS, Amazon Kinesis with partition keys)
- Design stateless applications that use externalized state management (for example, by using Amazon DynamoDB, Amazon S3, Amazon ElastiCache)
- Design serverless data processing and analysis pipelines (for example, by using Amazon Kinesis Data Streams, AWS Glue, Amazon Athena, AWS Lambda)
- Design multi-step workflows that have durable execution patterns (for example, by using AWS Step Functions, durable Lambda functions)
- Implement cross-account and cross-Region event routing patterns that use event buses and event forwarding
- Design container orchestration for microservices by using managed services (for example, Amazon EKS, Amazon ECS, AWS Fargate)
- Design service mesh architectures that facilitate microservice communication and observability (for example, by using Amazon VPC Lattice, Amazon ECS Service Connect)
- Manage container images by configuring security scans and lifecycle policies (for example, by using Amazon ECR)
- Design auto scaling patterns for serverless and containerized workloads (for example, by using Lambda concurrency, Horizontal Pod Autoscaler, Cluster Autoscaler, Amazon ECS service auto scaling, AWS Application Auto Scaling)
- Design ingress patterns and optimize resources for specific usage patterns (for example, Application Load Balancer, Network Load Balancer, AWS Load Balancer Controller, Amazon API Gateway)
- Design edge architectures to meet latency requirements (for example, by using Amazon CloudFront Functions, Lambda@Edge)
- Design architectures that support real-time data processing by using WebSocket and publish-subscribe patterns (for example, by using API Gateway WebSocket APIs)
- Design multi-tenant architectures that use tenant isolation patterns (for example, siloed or pooled resources, Amazon Cognito tenant context, row-level security, tenant-specific encryption)
Task 1.2: Integrate AI and ML services into architectures
- Design generative AI integrations for applications, including for multi-account deployment patterns (for example, by using Amazon Bedrock)
- Design AI agent architectures that integrate with tools (for example, by using Amazon Bedrock AgentCore, Amazon Bedrock Knowledge Bases)
- Design ML inference architectures (for example, Amazon SageMaker AI endpoints)
- Design RAG architectures, including ingestion and retrieval strategies (for example, Amazon Bedrock knowledge bases that use vector stores)
Task 1.3: Design hybrid cloud integration patterns
- Design hybrid connectivity that provides redundancy and failover capabilities (for example, by using AWS Direct Connect, AWS VPN, AWS Transit Gateway)
- Design data synchronization strategies for hybrid workloads (for example, by using AWS DataSync, AWS Storage Gateway, AWS Transfer Family)
- Design integration patterns to modernize legacy systems by using data transformations (for example, by using API Gateway, Lambda, Amazon MQ)
- Design DNS solutions for hybrid environments (for example, by using Amazon Route 53 Resolver endpoints, Route 53 private hosted zones, split-horizon DNS, conditional forwarding)
- Design hybrid compute patterns (for example, by using Amazon EKS Anywhere, Amazon ECS Anywhere, AWS Outposts, AWS Local Zones)
Task 1.4: Design network architectures
- Design multi-VPC architectures that provide hybrid and multi-account connectivity (for example, VPC peering, AWS PrivateLink)
- Design VPC architectures by using subnet strategies, IP address management, and network segmentation (for example, by using Amazon VPC IP Address Manager [IPAM], public and private subnets)
- Design network security architectures that include traffic inspection, traffic filtering, and application layer protection (for example, by using AWS Network Firewall, AWS WAF, Gateway Load Balancers, security groups, network ACLs, VPC Flow Logs)
- Design IPv6 adoption and dual-stack migration strategies
- Design global traffic routing strategies for multi-Region applications (for example, by using Route 53 routing policies, AWS Global Accelerator)
Task 1.5: Design data, storage, and database architectures
- Design data lake and lakehouse architectures (for example, by using Amazon S3, AWS Lake Formation, Amazon Redshift Spectrum, Apache Iceberg)
- Design real-time and batch analytics pipelines (for example, by using Amazon EMR, Amazon Redshift, Amazon Managed Streaming for Apache Kafka [Amazon MSK], Amazon AppFlow)
- Select appropriate database services based on workload requirements such as access patterns, consistency needs, and scalability (for example, Amazon RDS, Amazon Aurora, Amazon DynamoDB, Amazon Redshift)
- Design database scaling solutions to provide high availability (for example, by using read replicas, Amazon Aurora Global Database, Amazon DynamoDB global tables, Amazon RDS Multi-AZ deployments)
- Design storage architectures based on access patterns and performance requirements (for example, by using Amazon S3, Amazon EBS, Amazon EFS, Amazon FSx)
- Design data caching strategies to optimize performance (for example, by using ElastiCache, DynamoDB Accelerator [DAX])
- Design data cataloging and cross-account data sharing patterns (for example, AWS Glue Data Catalog, Lake Formation, AWS Clean Rooms)
Domain 2: Security, Compliance, and Governance (25%)
Task 2.1: Design identity security architectures
- Implement identity federation by using standard protocols (for example, AWS IAM Identity Center, SAML 2.0, OpenID Connect, System for Cross-domain Identity Management [SCIM])
- Design application authentication and authorization solutions (for example, by using Amazon Cognito user pools, identity pools, OAuth 2.0, Amazon EKS Pod Identity)
- Design least-privilege access controls such as cross-account access and temporary credentials (for example, by using IAM roles, IAM policies, permissions boundaries, external IDs, session policies, attribute-based access control [ABAC])
- Design data perimeter controls and external access validation solutions (for example, by using AWS Identity and Access Management Access Analyzer, VPC endpoint policies, AWS Verified Access)
- Design workload identities for hybrid and multi-cloud environments (for example, by using IAM Roles Anywhere)
Task 2.2: Design solutions to implement encryption and key management strategies
- Implement encryption at rest by using customer managed keys and automatic key rotation (for example, by using AWS KMS)
- Implement encryption in transit by using certificate management (for example, TLS 1.3, AWS Certificate Manager [ACM], AWS Private CA)
- Implement dedicated hardware security modules to comply with regulations (for example, AWS CloudHSM)
- Design post-quantum cryptography strategies (for example, by using AWS KMS with Module-Lattice Digital Signature Algorithm [ML-DSA], Module-Lattice-Based Key-Encapsulation Mechanism [ML-KEM])
Task 2.3: Design multi-account governance and compliance solutions
- Design organizational structures that include features such as guardrails, landing zones, and automated account provisioning (for example, by using AWS Organizations, OUs, AWS Control Tower, AWS Control Tower Account Factory)
- Implement centralized logging and configuration management solutions, including solutions for AI model invocations and responses (for example, by using AWS CloudTrail organization trails, AWS Config aggregation, AWS GuardDuty, Amazon Security Lake, AWS Security Hub, Amazon CloudWatch Logs)
- Configure cross-account resource sharing (for example, AWS Resource Access Manager [AWS RAM], AWS Transit Gateway)
- Design policy enforcement by using SCPs and RCPs
- Implement automated compliance monitoring (for example, by using AWS Config rules, AWS Security Hub CSPM)
- Configure automated vulnerability scanning and patch management (for example, by using Amazon Inspector, AWS Systems Manager Patch Manager)
Task 2.4: Design architectures to meet compliance requirements
- Design architectures to meet data protection requirements (for example, by implementing encryption, access controls, audit logging)
- Design solutions to meet regulatory requirements such as data sovereignty controls
- Implement audit trail management for regulated workloads, including for AI services
- Design data residency controls such as AWS Region-specific deployments and transfer restrictions
- Implement compliance evidence collection and reporting solutions (for example, by using AWS Artifact)
- Implement risk assessment solutions for cloud architectures such as threat modeling and mitigation strategies
Task 2.5: Design security and responsible AI controls
- Implement content filtering and compliance controls for generative AI services (for example, by using Amazon Bedrock Guardrails)
- Implement access controls for generative and agentic AI applications (for example, by using Amazon Bedrock AgentCore Identity)
- Design human oversight workflows that include approval mechanisms for AI operations (for example, by using AWS Step Functions)
Domain 3: Cost-Optimized Architecture Design (15%)
Task 3.1: Design architectures based on AWS pricing models
- Select appropriate purchase options based on usage patterns, including commitment-based and capacity-based options (for example, provisioned capacity, Reserved Instances, AWS Savings Plans, Spot Instances, On-Demand Instances)
- Design cost-optimized architectures to meet workload requirements (for example, by using Graviton-based instances, AWS Step Functions Standard Workflows or Express Workflows, AWS Lambda functions)
- Implement rightsizing and scaling strategies based on performance metrics (for example, by using AWS Compute Optimizer, scheduled scaling, target tracking policies, AWS Fargate Spot)
- Optimize costs for AI/ML workloads by selecting the appropriate service tier, implementing batching strategies, and designing caching patterns (for example, by using Amazon Bedrock, Amazon SageMaker AI)
Task 3.2: Optimize data transfer and network costs
- Design content delivery architectures, origin selection strategies, caching strategies, and failover patterns (for example, by using Amazon CloudFront, Amazon CloudFront Origin Shield)
- Optimize data transfer costs by using strategies such as private connectivity, Regional traffic patterns, and inter-Availability Zone/inter-Region strategies (for example, by using VPC endpoints, NAT gateways, Availability Zone-aware architectures)
- Configure cost-aware, multi-Region data replication (for example, by using Amazon S3 Cross-Region Replication, Amazon DynamoDB global tables)
- Design cost-effective network architectures (for example, by using AWS Transit Gateway data processing charges, AWS PrivateLink pricing models)
- Optimize data transfer costs for AI/ML workloads by using strategies such as cross-Region inference routing
Task 3.3: Design cost allocation and visibility solutions
- Design tagging strategies for cost allocation (for example, by using tags for business units, projects, and environments)
- Configure cost reporting and analytics solutions that use detailed billing data (for example, by using AWS Cost Explorer, AWS Cost and Usage Reports)
- Implement policy-based tagging enforcement for cost allocation (for example, by using SCPs, AWS Config rules, tag policies)
- Implement chargeback and showback capabilities for cost allocation (for example, by using cost categories, split cost allocation, token usage monitoring for Amazon Bedrock)
- Configure cost monitoring and alerting solutions that include budget thresholds and anomaly detection (for example, by using AWS Budgets, AWS Cost Anomaly Detection)
Task 3.4: Optimize storage and database costs
- Implement intelligent storage tiering and lifecycle policies (for example, by using Amazon S3 Intelligent-Tiering, S3 Lifecycle policies, S3 Glacier storage classes, Amazon EFS lifecycle policies)
- Optimize block storage costs by selecting appropriate volume types and provisioning appropriate input/output operations per second (IOPS) (for example, Amazon EBS gp3 volumes, EBS gp2 volumes, Provisioned IOPS)
- Optimize database costs by selecting appropriate capacity modes and reserved capacity (for example, DynamoDB capacity modes, Amazon RDS reserved DB instances, Amazon Aurora serverless, Aurora I/O-Optimized, Database Savings Plans)
- Implement backup and disaster recovery mechanisms that use cost-optimized retention policies (for example, by using AWS Backup, Amazon Data Lifecycle Manager)
- Design cost-effective observability solutions that include features such as log filtering, metric aggregation, and retention optimization
Domain 4: Resilience, Migration, and Business Continuity (15%)
Task 4.1: Design migration strategies by using AWS frameworks
- Design discovery and portfolio assessment solutions to map dependencies and plan migration waves
- Implement rehosting strategies (for example, by using AWS Transform MGN [previously known as AWS Application Migration Service], AWS Transform)
- Design database and data migration strategies (for example, by using AWS Database Migration Service, AWS DataSync)
- Design replatforming strategies that use managed services to reduce operational overhead (for example, Amazon RDS, Amazon Aurora, Amazon ECS, AWS Lambda)
- Implement refactor strategies such as microservices decomposition, serverless adoption, and incremental modernization patterns (for example, strangler fig pattern)
- Modernize legacy workloads, including mainframes, applications, and databases
Task 4.2: Design disaster recovery architectures
- Design disaster recovery solutions to meet business requirements (for example, RTO, RPO, costs)
- Configure continuous replication to recover quickly from incidents (for example, by using AWS Elastic Disaster Recovery)
- Establish disaster recovery assessment and recovery procedures (for example, by using AWS Resilience Hub, AWS Systems Manager runbooks)
- Implement multi-Region disaster recovery solutions that include features such as data replication and failover (for example, by using Amazon Route 53 health checks, AWS Global Accelerator, Amazon Application Recovery Controller)
- Establish disaster recovery testing and validation procedures (for example, by using AWS Resilience Hub)
- Implement multi-cluster container strategies to provide high availability and disaster recovery (for example, by using Amazon EKS, Amazon ECS)
Task 4.3: Design solutions to meet business continuity and resiliency requirements
- Configure centralized backup governance and cross-account backup policies (for example, by using AWS Backup)
- Design failover tests and measure recovery times (for example, by using AWS Fault Injection Service, Amazon Route 53 health checks)
- Design technically resilient architectures that have features such as redundancy, fault tolerance, and self-healing capabilities
- Protect data against ransomware and accidental deletion (for example, by using Amazon S3 Object Lock, Amazon EBS snapshot lock, AWS Backup Vault Lock)
- Implement chaos engineering with controlled failure scenarios (for example, by using AWS Fault Injection Service experiment templates, steady-state hypotheses)
Domain 5: Operational Excellence and Automation (20%)
Task 5.1: Design infrastructure as code
- Implement infrastructure as code by using declarative and imperative approaches (for example, AWS CloudFormation, AWS CDK)
- Design policy as code to perform proactive validation, enforcement, and drift remediation (for example, by using AWS CloudFormation Hooks, AWS CDK aspects, AWS Config rules, SCPs)
- Manage secrets in infrastructure code (for example, by using AWS Secrets Manager, AWS Systems Manager Parameter Store)
- Design multi-account and multi-Region infrastructure deployments (for example, by using CloudFormation StackSets)
Task 5.2: Design CI/CD and DevSecOps pipelines
- Design CI/CD solutions to orchestrate automated build and deployment pipelines (for example, by using AWS CodePipeline, AWS CodeBuild, AWS CodeDeploy, AWS CodeCommit)
- Implement security scanning in pipelines to assess vulnerabilities and sign artifacts (for example, by using Amazon Inspector, Amazon ECR image scanning)
- Configure multi-account and multi-Region deployment pipelines that include features such as role delegation and artifact promotion (for example, by using CodePipeline cross-account deployments)
- Evaluate AI/ML applications and validate outputs (for example, by using Amazon Bedrock Evaluations)
- Implement deployment strategies that provide rollback capabilities (for example, blue/green, canary, rolling deployments)
Task 5.3: Design observability and monitoring solutions
- Implement observability by collecting metrics, logs, and distributed tracing by using standardized instrumentation (for example, by using Amazon CloudWatch, AWS X-Ray, AWS Distro for OpenTelemetry)
- Implement monitoring for containerized applications (for example, by using Amazon ECS, Amazon EKS with Container Insights)
- Implement multi-account log aggregation with cross-account subscriptions and centralized archives (for example, by using Amazon CloudWatch Logs subscriptions, Amazon S3 archival storage tiers)
- Configure alerting solutions (for example, by using CloudWatch alarms, Amazon SNS, AWS Systems Manager)
- Monitor metrics for AI/ML workloads, including model performance, AI agent performance, inference latency, and model drift
- Design monitoring solutions for the user experience by using strategies such as synthetic transactions and real user monitoring (for example, by using Amazon CloudWatch Synthetics, Amazon CloudWatch RUM)
- Design service-level objectives (SLOs) that have measurable indicators and alerts (for example, by using CloudWatch, CloudWatch Application Signals)
Task 5.4: Design operational automation and resilient systems
- Implement health monitoring, capacity planning, and operational responses (for example, by using CloudWatch alarms, Amazon EventBridge, AWS Systems Manager, Service Quotas)
- Configure controlled remediation solutions that have safety constraints (for example, circuit breakers, rate limits, bulkhead patterns, retry patterns with exponential backoff)
- Configure auto scaling policies that are based on metrics and scheduled scaling policies (for example, target tracking scaling, predictive scaling for Auto Scaling groups)
- Design automated failure recovery solutions that use health checks and replacement strategies (for example, by using Auto Scaling health checks, Amazon ECS task replacement, AWS Lambda retry policies)
- Configure automated runbooks and incident response procedures for operational tasks such as patching, remediation, and scaling
How ready do you need to be for SAP-C03?
AWS describes a target candidate for every exam. Here is how it describes the person who should sit SAP-C03, in its words.
Who AWS wrote this exam for
The target candidate has 2 or more years of experience using AWS services to design and implement cloud solutions. The target candidate can evaluate cloud application requirements and make architectural recommendations for deployment of applications on AWS. The target candidate can also provide expert guidance about architectural design that extends across multiple applications and projects within a complex organization.
What AWS says is out of scope
- In-depth knowledge of operating systems
- AI/ML model training, fine-tuning, and data science workflows
- Security incident forensics and detailed threat investigation
- Application code development and debugging
You can skip these in your study plan. AWS says the target candidate is not expected to do them.
How AWS scores SAP-C03.
SAP-C03 has 75 questions in total. 65 of them count toward your score and 10 are unscored questions AWS uses to gather data for future exams. You won't know which ones are unscored, so give every question your full attention.
AWS reports results as a scaled score from 100 to 1,000, and the minimum passing score for SAP-C03 is 720. SAP-C02 used 750. The exam uses compensatory scoring, which means you pass on your overall score and don't have to pass each domain on its own.
The question types in the SAP-C03 exam guide are multiple choice and multiple response. A question you leave blank counts as wrong, and there's no penalty for guessing. You get 180 minutes.
Architecture Design and Implementation Built for the Cloud and Security, Compliance, and Governance are the heaviest domains at 25% each, so they get the most time in our course and in your practice exams.
SAP-C02 and SAP-C03 side by side.
SAP-C03 registration opened October 27, 2026, and SAP-C03 exams start November 17, 2026. The last day to take SAP-C02 is November 16, 2026.
SAP-C02 domains (through November 16, 2026)
- Design Solutions for Organizational Complexity (26%)
- Design for New Solutions (29%)
- Continuous Improvement for Existing Solutions (25%)
- Accelerate Workload Migration and Modernization (20%)
SAP-C03 domains (from November 17, 2026)
- Architecture Design and Implementation Built for the Cloud (25%)
- Security, Compliance, and Governance (25%)
- Cost-Optimized Architecture Design (15%)
- Resilience, Migration, and Business Continuity (15%)
- Operational Excellence and Automation (20%)
AWS added skills on generative AI and AI agent design with Amazon Bedrock and Amazon Bedrock AgentCore, RAG architectures, ML inference on Amazon SageMaker AI, Amazon VPC Lattice, IPv6 dual-stack design, lakehouse design with AWS Lake Formation and Apache Iceberg, post-quantum cryptography in AWS KMS, responsible AI controls with Amazon Bedrock Guardrails, and DevSecOps pipelines.
The minimum passing score dropped from 750 to 720. AWS also changed the out of scope list. It now names AI/ML model training and data science workflows, security incident forensics and application code development, along with in-depth knowledge of operating systems.
Already certified on SAP-C02? AWS says your credential remains active through its original expiration date. The full list of changes is in the AWS comparison of SAP-C02 and SAP-C03.
What SAP-C03 does for your career.
Solutions Architect Professional is the senior architect credential in the AWS catalog. It lines up with principal cloud architect, enterprise architect and senior consulting roles where you design across many accounts, many teams and complex migrations.
For pay and job outlook data, the Bureau of Labor Statistics tracks computer network architects in its Occupational Outlook Handbook. Your own pay will depend on location, experience and employer.
Ways to pay for SAP-C03 training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps. We'll help you line up the course with your request.
Paying on your own? SAP-C03 prep is eligible for PathPay, our monthly payment plan. The PathPay page has the current terms, and course access opens when your first payment clears.
Veterans can also look at VR&E benefits for career training.
Common questions about our Solutions Architect Professional course.
Enroll in Solutions Architect Professional training with Accumentum.
Enroll in our Solutions Architect Professional course to get ready for the AWS Certified Solutions Architect Professional exam with expert-led classes and hands-on labs.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on Solutions Architect Professional?
Tell us your target date and we'll help you plan the path.


