The AWS Certified Solutions Architect – Associate is one of the most popular cloud certifications, and one of the most commonly mis-studied. People try to memorize every service, drown in feature lists, and then meet an exam made almost entirely of scenario questions: given these requirements, which design is best?
That's a different skill from recall, and it needs a different study plan. The one below assumes roughly eight to ten hours a week for ten weeks. Compress or stretch it to fit your life.
Know the exam first
The exam is made up of multiple-choice and multiple-response questions, mostly short scenarios. It's organized into four domains — secure, resilient, high-performing, and cost-optimized architectures — and security carries the most weight. AWS publishes an official exam guide listing the current domains, weighting, and in-scope services. Download it and treat it as your syllabus, since exam versions get updated.
The mindset shift: for most questions, more than one answer works technically. You're picking the one that best satisfies the stated constraint — "most cost-effective," "least operational overhead," "highest availability." Read for those keywords first.
The 10-week plan
| Week | Focus | What to be able to do |
|---|---|---|
| 1 | IAM, account structure, global infrastructure, billing | Explain users, roles, and policies; read a policy document; describe Regions vs. Availability Zones |
| 2 | Compute: EC2, Auto Scaling, load balancers | Choose instance purchasing options; design a scalable, load-balanced web tier |
| 3 | Storage: S3, EBS, EFS | Match storage type to access pattern; use S3 storage classes and lifecycle rules |
| 4 | Networking: VPC | Build a VPC with public and private subnets, route tables, NAT, and security groups |
| 5 | Databases: RDS, Aurora, DynamoDB, ElastiCache | Pick the right database for a workload; understand Multi-AZ vs. read replicas |
| 6 | Decoupling and serverless: SQS, SNS, Lambda, API Gateway | Break a tightly coupled design into loosely coupled parts |
| 7 | Security and encryption: KMS, WAF, Shield, Secrets Manager | Apply encryption at rest and in transit; protect against common threats |
| 8 | Resilience, DR, and cost: backup strategies, Route 53, cost tools | Choose a disaster recovery strategy for a given RTO and RPO |
| 9 | Practice exams | Identify weak domains from results |
| 10 | Review and exam | Targeted revision, then sit the exam |
Make every week hands-on
Reading about a VPC and building one are not the same experience. Use a free-tier-eligible account (with a budget alert set first — see our FinOps habits post for why) and build something each week.
# Week 3 lab: create a bucket, enable versioning, add a lifecycle rule
aws s3api create-bucket --bucket my-study-bucket-12345 --region us-east-1
aws s3api put-bucket-versioning --bucket my-study-bucket-12345 \
--versioning-configuration Status=EnabledEven better, define your labs with infrastructure as code so you can tear them down cleanly — Terraform works well for this.
The decision pairs to master
Many questions boil down to choosing between near-neighbors. Learn why you'd choose each:
- Security groups vs. network ACLs (stateful instance-level vs. stateless subnet-level).
- SQS vs. SNS (queue for decoupled work vs. pub/sub fan-out).
- Multi-AZ vs. read replicas (availability vs. read scaling).
- S3 storage classes and what each trades for lower cost.
- Vertical vs. horizontal scaling, and why stateless designs scale out more easily.
- RTO vs. RPO, and the four classic DR strategies: backup and restore, pilot light, warm standby, multi-site active-active.
How to use practice exams
Practice exams are diagnostic tools, not scoreboards. After each one:
- Review every question, including the ones you got right — you may have guessed.
- Write down why the wrong options are wrong. That's where the learning is.
- Group your misses by domain and spend your next study block there.
- Don't memorize question banks. Real exam wording differs, and memorized answers fail on variations.
Exam-day habits
- Read the last line of the question first to see what's actually being asked.
- Eliminate obviously wrong options, then compare the survivors against the stated constraint.
- Flag and move on from anything that eats your time; come back at the end.
- Don't over-read. If a question doesn't mention a requirement, don't invent one.
Is it worth it?
The certification is a useful signal and a structured way to learn AWS broadly. But the lasting value is the habit of designing with trade-offs in mind — which is exactly what the framework in our post on the Well-Architected Framework is about. Plus, AWS has changed how recertification works recently; see AWS just replaced the recertification exam with something better.
If you'd like a live instructor, labs, and exam-style practice alongside a cohort, our AWS Certified Solutions Architect – Associate Prep course is built around exactly this plan. When you're ready to go further, the Professional-level prep is the natural next step.