SAP-C02 Study Guide: AWS Solutions Architect

How to Pass the AWS Solutions Architect Professional (SAP-C02): Advanced Study Guide — hero

SAP-C02 (AWS Certified Solutions Architect - Professional) has 75 questions in 180 minutes, costs USD 300 (JPY 40,000 in Japan) and passes at 750 out of 1,000. Its last day is November 16, 2026. SAP-C03 replaces it from November 17, 2026, at the same length and price, with five domains whose weights AWS has not yet published.

The AWS certification hub lists every AWS exam guide and practice app.

If your exam date is after November 16, study for SAP-C03; most SAP-C02 topics below still apply. Exam facts are from the AWS pages under Sources, checked October 15, 2026. If you have passed the Solutions Architect - Associate (SAA-C03), expect a clear step up in question length and depth.

Why is SAP-C02 hard?

Three things set this exam apart:

Question length and complexity. SAP-C02 questions are mini case studies. Many questions run to a long paragraph, describing a multi-service architecture with specific constraints. You need to read carefully, identify the real requirement, and choose the best answer from options that all seem plausible.

Depth of knowledge required. The associate exam tests whether you know what services exist. The professional exam tests whether you know exactly when to use one service over another, including edge cases, limitations, and architectural tradeoffs.

Breadth of coverage. The SAP-C02 covers virtually every AWS service at an advanced level. There is no “safe to skip” service. Questions can reference anything from Transfer Family to Lake Formation to EventBridge Pipes.

What is the SAP-C02 exam format, and what changes with SAP-C03?

Exam update (October 2026): The last day to take SAP-C02 is November 16, 2026. SAP-C03 is available from November 17, 2026 (registration opens October 27, 2026; 75 questions, 180 minutes, USD 300; five domains, weights not yet published). This guide covers SAP-C02. StudyKits does not have an SAP-C02 or SAP-C03 app.

Questions: 75 (65 scored + 10 unscored)
Time: 180 minutes (3 hours)
Passing score: 750 out of 1000
Cost: USD 300
Prerequisite: none required; SAA-C03 and real architecture experience help a lot

180 minutes for 75 questions gives you roughly 2.4 minutes per question. That sounds comfortable until you realize how long the questions are. Time management is a real challenge.

What are the four SAP-C02 domains?

Domain 1: Design Solutions for Organizational Complexity (26%)

This domain tests enterprise-level architecture skills.

Multi-account strategies:

AWS Organizations — organizational units, service control policies, tag policies, backup policies
AWS Control Tower — landing zones, guardrails, account factory
Cross-account resource sharing — RAM, cross-account IAM roles, S3 bucket policies
Centralized logging — CloudTrail organization trails, CloudWatch cross-account dashboards, centralized log aggregation
Centralized security — Security Hub aggregation, GuardDuty delegated admin, Config aggregators

Hybrid and multi-cloud architecture:

Direct Connect — dedicated vs hosted connections, virtual interfaces (private, public, transit), LAG, resiliency models
Site-to-site VPN — redundant VPN connections, VPN over Direct Connect
Transit Gateway — route tables, peering, multicast, inter-Region peering
AWS Outposts — use cases, limitations, connectivity
Hybrid DNS — Route 53 Resolver endpoints, conditional forwarding

Identity federation:

SAML 2.0 federation with IAM
AWS SSO (Identity Center) with external IdPs
Cognito for customer-facing identity
Web identity federation
Cross-account access patterns — when to use roles vs resource-based policies

This domain is where the SAP-C02 diverges most from the SAA-C03. You need to think in terms of enterprises with dozens or hundreds of AWS accounts, complex networking topologies, and centralized governance requirements.

Domain 2: Design for New Solutions (29%)

The largest domain tests your ability to architect from scratch.

Compute architecture:

When to use EC2 vs ECS vs EKS vs Lambda vs Fargate
EC2 Auto Scaling advanced patterns — predictive scaling, mixed instance groups, capacity rebalancing
Container orchestration — ECS vs EKS decision criteria, service mesh (App Mesh), service discovery (Cloud Map)
Serverless architecture — Lambda limitations, Step Functions for workflows, EventBridge for event routing

Data architecture:

Lake Formation for data lakes — permissions, data sharing, governed tables
Amazon Redshift — RA3 instances, Redshift Spectrum, data sharing, Redshift Serverless
Amazon Athena — federated queries, CTAS, workgroups
Amazon OpenSearch Service — fine-grained access control, UltraWarm storage
Amazon Kinesis — Data Streams vs Data Firehose vs Data Analytics, enhanced fan-out, auto-scaling
Amazon MSK (Managed Streaming for Kafka) vs Kinesis decision criteria
DynamoDB advanced patterns — global tables, on-demand vs provisioned, adaptive capacity

Storage architecture:

S3 advanced features — Object Lock, Glacier Vault Lock, cross-Region replication with ownership override, S3 Access Points
EFS vs FSx — FSx for Lustre, FSx for Windows File Server, FSx for NetApp ONTAP, FSx for OpenZFS
Storage Gateway — file gateway, volume gateway, tape gateway

Application integration:

SQS advanced — FIFO exactly-once processing, high throughput mode, temporary queues
SNS advanced — FIFO topics, message deduplication, raw message delivery
Amazon MQ — ActiveMQ vs RabbitMQ, migration from on-premises message brokers
API Gateway advanced — private APIs, mutual TLS, custom domain names, WAF integration

Domain 3: Continuous Improvement for Existing Solutions (25%)

This domain covers improving and optimizing existing architectures.

Cost optimization:

EC2 purchasing — Savings Plans (Compute, EC2 Instance, SageMaker), Reserved Instances, Spot, capacity reservations
Right-sizing with Compute Optimizer, Cost Explorer
Storage cost optimization — S3 lifecycle policies, S3 Intelligent-Tiering, EBS optimization, gp2 to gp3 migration
Data transfer costs — understanding inter-AZ, inter-Region, and internet egress charges, using VPC endpoints to reduce NAT gateway costs
Serverless cost analysis — when serverless is cheaper vs when it is more expensive at scale

Disaster recovery:

RPO and RTO calculations
DR strategies — backup/restore, pilot light, warm standby, multi-site active-active
Implementing DR across Regions — Aurora global databases, DynamoDB global tables, S3 cross-Region replication
Route 53 failover routing with health checks
Testing DR plans — GameDay exercises

Performance optimization:

CloudFront optimization — cache policies, origin failover, Lambda@Edge for dynamic content
Database performance — read replicas, Aurora Serverless v2, ElastiCache patterns, DAX
Networking performance — Global Accelerator, Transit Gateway optimization, enhanced networking

Operational excellence:

Well-Architected Framework — all six pillars at a detailed level
CloudFormation best practices — nested stacks, StackSets, custom resources
Systems Manager for fleet management
AWS Trusted Advisor programmatic access
Tagging strategies for governance and cost allocation

Domain 4: Accelerate Workload Migration and Modernization (20%)

Migration strategies:

The 7 Rs — rehost, replatform, repurchase, refactor, retire, retain, relocate
AWS Migration Hub — tracking migrations across tools
AWS Application Discovery Service — agentless vs agent-based discovery
AWS Application Migration Service (MGN) — continuous replication, cutover
AWS Database Migration Service (DMS) — homogeneous vs heterogeneous, Schema Conversion Tool, CDC

Data transfer:

AWS DataSync — on-premises to S3/EFS/FSx, cross-Region transfers
AWS Transfer Family — SFTP, FTPS, FTP to S3
AWS Snow Family — Snowcone, Snowball Edge, Snowmobile, data transfer calculations
Direct Connect for large-scale ongoing data transfer

Database migration:

RDS migration strategies — native tools, DMS, read replicas for minimal downtime
DynamoDB migration — import/export, DMS as source/target
Oracle/SQL Server to Aurora migration paths

What does an 8-week study plan look like?

Weeks 1-2: Organizational Complexity and Networking

Week 1: Study AWS Organizations, Control Tower, cross-account patterns, centralized logging and security. These are topics that barely appear on the associate exam but are major themes here.
Week 2: Study Direct Connect (connection types, virtual interfaces, resiliency), Transit Gateway, VPN architectures, and hybrid DNS. Complete 4 practice question sets.

Weeks 3-4: New Solution Design

Week 3: Study advanced compute (containers, serverless, scaling patterns) and data architecture (Kinesis, Redshift, Athena, Lake Formation, OpenSearch).
Week 4: Study advanced storage (FSx family, Storage Gateway, S3 advanced features) and application integration (SQS/SNS advanced, Amazon MQ, EventBridge). Complete 4 practice question sets.

Weeks 5-6: Migration and Cost Optimization

Week 5: Study migration strategies (7 Rs, MGN, DMS, SCT), data transfer services (DataSync, Snow Family, Transfer Family), and database migration patterns.
Week 6: Study cost optimization strategies, disaster recovery architectures, and the Well-Architected Framework pillars. Complete 4 practice question sets.

Weeks 7-8: Review and Exam Simulation

Week 7: Take a full-length 75-question practice exam under timed conditions (180 minutes). Analyze results by domain. Focus targeted study on your weakest areas.
Week 8: Take a second full-length practice exam. Review all wrong answers. Do a final pass on your weakest domain. Aim for 78%+ before sitting for the real exam.

Which study strategies work for SAP-C02?

Read questions carefully. Many SAP-C02 questions contain the answer in the requirements. Words like “minimize operational overhead,” “most cost-effective,” “least disruption,” and “maintain existing on-premises functionality” change which answer is correct. Train yourself to identify the key constraint before evaluating options.

Eliminate, do not select. With four or five answer choices that all seem reasonable, it is often easier to eliminate wrong answers than to identify the right one. Look for anti-patterns: answers that suggest unnecessary complexity, ignore stated constraints, or use services inappropriately.

Build mental decision trees. For common scenarios, build decision trees:

“We need to migrate a database with minimal downtime” = DMS with CDC
“We need to connect on-premises to AWS with consistent latency” = Direct Connect
“We need to share resources across accounts” = RAM or cross-account IAM roles
“We need disaster recovery with RPO of 1 hour” = Pilot light or warm standby

Time management. Flag questions you are unsure about and move on. With 75 questions in 180 minutes, spending 5 minutes on a single question leaves you short at the end. Make a first pass answering every question, then return to flagged ones.

Use practice questions extensively. The SAP-C02 is the exam where practice questions matter most. The question format is distinctive, and you need to build fluency in reading long scenarios quickly.

What mistakes should you avoid?

Underestimating the exam. If you passed SAA-C03 easily, do not assume SAP-C02 will be similar. It is a different level entirely.
Skipping networking. Direct Connect, Transit Gateway, and VPC design appear in many questions. Candidates who skip these topics regret it.
Ignoring cost optimization. Continuous improvement of existing solutions is 25% of the exam. Cost analysis is a core skill.
Not practicing under timed conditions. The 3-hour exam is mentally exhausting. Practice full-length exams to build stamina.
Studying breadth without depth. You need both. You cannot skip any service, but you also need deep knowledge of key services like Organizations, Direct Connect, and Transit Gateway.

What comes after SAP-C02?

Common next steps:

AWS DevOps Engineer Professional (DOP-C02) is a natural complement, giving you the professional pair
Specialty certifications such as Security (SCS-C03) or Advanced Networking (ANS-C01) add domain expertise
AI certifications like AIP-C01 or the ML Engineer - Associate (MLA-C02 general availability announced for January 14, 2027; the exam page lists TBD) add AI knowledge

SAP needs broad knowledge and quick architecture decisions under time pressure. Follow the plan and practise long scenario questions under time.

Frequently asked questions

When is the last day to take SAP-C02?

November 16, 2026. SAP-C03 is delivered from November 17, 2026; registration opens October 27, 2026.

How much does the SAP-C02 exam cost?

USD 300 (JPY 40,000). SAP-C03 is also USD 300.

What is the SAP-C02 passing score?

750 on a scale of 100-1,000.

Should I study for SAP-C02 or SAP-C03?

Pick by your exam date. Before November 17, 2026, it is SAP-C02; from then on, SAP-C03. The SAP-C03 domain weights are not published yet.

How to Pass the AWS Solutions Architect Professional (SAP-C02): Advanced Study Guide