AWS SAP-C02 Exam Prep: Architecture & Scenarios
The SAP-C02 isn’t about memorizing services. It’s about making architectural decisions under constraints—balancing cost against performance, availability against complexity, security against usability.
This guide is built around that reality: AWS SAP-C02 Study Guide 2026
What Makes This Different #
Most SAP-C02 resources give you service lists to memorize or practice questions without context. That approach fails because the exam tests decision-making, not recall.
Our approach:
| Traditional Resources | CloudCertPro Approach |
|---|---|
| Service feature lists | Decision frameworks that explain when and why |
| Random practice questions | Scenarios mapped to specific architectural patterns |
| Isolated topics | Connected content showing how decisions interact |
| Paid access walls | Free, comprehensive, no registration required |
Everything here is designed to help you think like a Solutions Architect, not just pass an exam.
Content Structure #
SAP-C02 preparation is organized into five interconnected content types:
flowchart TB
KA["KNOWLEDGE AREAS
(18 topics organizing the SAP-C02 landscape)"]
P["PILLARS
(Deep-dive decision guides)"]
A["ARCHETYPES
(Complete architecture patterns)"]
S["SCENARIOS
(Practice questions
500+)"]
SP["SPECIALS
(Exam strategy,
quick references,
cheat sheets)"]
KA --> P
KA --> A
KA --> S
P --> SP
A --> SP
S --> SP
Decision Pillars #
Deep-dive guides for specific architectural decisions.
When should you choose Aurora over RDS MySQL? How do you design Transit Gateway routing for 50 VPCs? What’s the right DR strategy for a 15-minute RTO?
Pillars answer these questions with comprehensive analysis—not just what to choose, but why it’s the right choice and when alternatives make more sense.
| Pillar Title | Focus Area | Link |
|---|---|---|
| Landing Zone & Control Tower Setup | Multi-account baseline, account vending, guardrails | Read → |
| AWS Organizations & SCP Governance Decisions | Preventive controls, SCP logic, OU strategy | Read → |
| Direct Connect vs VPN Decision Matrix | Hybrid connectivity trade-offs and patterns | Read → |
| IAM Identity Center & SSO Federation | Identity federation, SAML, centralized access | Read → |
| Route 53 Resolver for Hybrid DNS | Hybrid name resolution and DNS decision logic | Read → |
| Centralized Logging & Observability | Cross-account logging, CloudWatch, audit trails | Read → |
| Security Monitoring: GuardDuty & Config | Detection vs compliance, security monitoring strategy | Read → |
40+ pillars covering:
- Service selection criteria and tradeoffs
- Configuration decisions and their implications
- Integration patterns between services
- Anti-patterns and common mistakes
Architecture Patterns #
Complete, production-ready architecture patterns.
SAP-C02 scenarios consistently map to six fundamental enterprise patterns. Understanding these patterns helps you recognize the underlying structure in exam questions—and design real solutions faster.
| Pattern | What It Covers |
|---|---|
| Global & Multi-Region | Worldwide user bases, cross-region replication, active-active patterns |
| Hybrid & Edge | Data center connectivity, edge computing, hybrid DNS and identity |
| Serverless & Microservices | Event-driven design, container orchestration, API patterns |
| Legacy Modernization | Migration strategies, database migration, application evolution |
| Data Lake & Analytics | Data platforms, analytics pipelines, storage optimization |
| Security & Governance | Multi-account design, compliance automation, centralized security |
Each pattern synthesizes multiple pillars into a coherent whole, showing how individual decisions combine into complete architectures.
Knowledge Areas #
18 topics organizing the SAP-C02 landscape.
Knowledge areas help you navigate the breadth of SAP-C02 content. They group related pillars, connect to relevant patterns, and link to practice scenarios.
| Focus | Knowledge Areas |
|---|---|
| Foundation | Architecture Fundamentals, Well-Architected Framework |
| Compute | EC2 & Compute, Serverless, Containers |
| Data | Storage, Databases, Data & Analytics |
| Network | Networking, Hybrid Connectivity |
| Security | Security & Compliance, Identity & Access |
| Reliability | HA & Disaster Recovery, Performance, Scalability |
| Integration | Application Integration, Event-Driven Architecture |
| Operations | Operational Excellence, Cost Optimization, Governance, Migration |
Use knowledge areas to identify gaps, structure your study plan, and ensure comprehensive coverage.
Exam Scenarios #
500+ practice questions at SAP-C02 difficulty.
These aren’t associate-level questions relabeled. Each scenario presents realistic architectural decisions with multiple plausible answers—just like the real exam.
Every scenario includes:
- Detailed explanations of why each answer is correct or incorrect
- Pillar references linking to deeper coverage of underlying concepts
- Pattern connections showing which enterprise pattern applies
- Exam strategy tips for recognizing similar questions
Current: 80+ scenarios across all exam domains Planned: 500+ scenarios (rolling release throughout 2026)
SAP-C02 Exam Overview #
What the Exam Tests #
| Domain | Weight | Focus |
|---|---|---|
| Design for Organizational Complexity | 26% | Multi-account strategies, cross-account access, compliance at scale |
| Design for New Solutions | 29% | Service selection, architecture patterns, requirements analysis |
| Continuous Improvement | 25% | Cost optimization, performance tuning, operational excellence |
| Accelerate Workload Migration | 20% | Migration strategies, hybrid architectures, modernization |
Exam Format #
- Questions: 75 (65 scored, 10 unscored)
- Time: 180 minutes
- Format: Multiple choice, multiple response
- Passing Score: 750/1000 (scaled)
- Cost: $300 USD
- Validity: 3 years
Prerequisites #
AWS recommends:
- 2+ years hands-on experience with AWS
- AWS Solutions Architect Associate certification (recommended, not required)
- Experience designing distributed systems on AWS
Recommended Study Paths #
Path 1: Structured Learning (6-8 weeks) #
For those who prefer systematic coverage:
Weeks 1-2: Foundation
- Review Architecture Fundamentals
- Study Well-Architected Framework
- Complete foundation scenarios
Weeks 3-4: Core Services
- Deep-dive into Networking and Security
- Study Compute and Storage pillars
- Practice domain-specific scenarios
Weeks 5-6: Advanced Patterns
- Master HA/DR and Governance
- Study all six architecture patterns
- Increase scenario practice volume
Weeks 7-8: Exam Preparation
- Full-length practice exams
- Review weak areas identified in practice
- Study exam strategy guides
Path 2: Gap-Focused Learning (2-4 weeks) #
For experienced architects targeting specific weaknesses:
- Assess: Take a practice exam to identify weak domains
- Target: Study pillars in weak knowledge areas
- Practice: Work through scenarios in those areas
- Verify: Retake practice exam to confirm improvement
- Repeat: Address remaining gaps
Path 3: Pattern Recognition (3-4 weeks) #
For those who learn best through examples:
- Start with patterns: Understand the six enterprise patterns
- Practice scenarios: Work through questions mapped to each pattern
- Fill gaps: Study pillars when scenarios reveal knowledge gaps
- Integrate: Return to patterns to see how pieces connect
Why Free? #
CloudCertPro believes certification preparation shouldn’t be a financial barrier—especially at the professional architect level.
All content is free because:
- Certifications advance careers—cost shouldn’t limit access
- Quality content builds community—shared knowledge benefits everyone
- Free content can still be comprehensive—we prove that here
Premium features (coming soon) will enhance the learning experience—personalized study plans, progress tracking, spaced repetition—but core content remains free forever.
Getting Started #
New to SAP-C02? #
- Read the Architecture Fundamentals overview
- Explore one architecture pattern that matches your experience
- Try 10 practice scenarios to calibrate difficulty
- Build your study plan based on results
Ready to Dive Deep? #
- Pick a knowledge area to focus on
- Study the pillars within that area
- Practice scenarios until accuracy exceeds 80%
- Move to the next knowledge area
Short on Time? #
- Focus on high-weight areas: Networking, Security, HA/DR, Governance
- Study the exam strategy guide
- Practice scenarios daily, even if just 10-15 questions
- Review explanations thoroughly—they teach more than the questions
Content Updates #
This guide is actively maintained and expanded:
| Content Type | Current | Planned |
|---|---|---|
| Decision Pillars | 40+ | 60+ |
| Architecture Patterns | 6 | 6 (complete) |
| Knowledge Areas | 18 | 18 (complete) |
| Practice Scenarios | 80+ | 500+ |
| Special Resources | Growing | Ongoing |
New content is added weekly, prioritized by exam weight and user feedback.
Quick Links #
| I want to… | Go to… |
|---|---|
| Understand a specific service decision | Decision Pillars |
| See complete architecture patterns | Architecture Patterns |
| Find content by topic | Knowledge Areas |
| Practice exam questions | Exam Scenarios |
| Get exam strategy tips | Special Resources |
Ready to begin? Pick your starting point above, or browse the latest content below.
- Route 53 Resolver for Hybrid DNS | AWS SAP-C02
- Direct Connect vs VPN Decision Matrix | AWS SAP-C02
- Security Monitoring: GuardDuty & Config | AWS SAP-C02
- Centralized Logging & Observability | AWS SAP-C02
- Enterprise Data Lake & Analytics | AWS SAP-C02
- Global & Multi-Region Scalability | AWS SAP-C02
- Hybrid Cloud & Edge Connectivity | AWS SAP-C02
- Legacy to Cloud Modernization | AWS SAP-C02
- Security & Governance at Scale | AWS SAP-C02
- Serverless & Microservices Design | AWS SAP-C02
- IAM Identity Center & SSO Federation | AWS SAP-C02
- Lift-and-Shift Messaging vs Managed Queue | SAP-C02
- Landing Zone & Control Tower Setup | AWS SAP-C02
- Cloud Governance & Organization Scenarios | AWS SAP-C02
- AWS Organizations & SCP Governance Decisions | SAP-C02
- CloudFront Multi-Region Origin Routing Trade-offs | SAP-C02
- Hybrid Genomics Data Transfer Trade-offs | SAP-C02
- Auto Scaling Deployment Automation Trade-offs | SAP-C02
- IoT Migration Trade-offs—Serverless vs Containers | SAP-C02
- Centralized TGW Routing Across Accounts | SAP-C02
- SQS Buffering for Resilient Event Ingestion | SAP-C02
- Async Integration: Cost vs Reliability Trade-offs | SAP-C02
- Multi-Account Cost Analysis via CUR & Athena | SAP-C02
- Ephemeral Test Envs—Automation vs Isolation | SAP-C02
- Multi-AZ CIDR Trade-offs Under Fixed IPv4 Space | SAP-C02
- EC2 Placement Groups—Speed vs Resilience | SAP-C02
- Resilient IoT Ingestion Trade-offs | SAP-C02
- Auto-Healing Network Inspection Route Decisions | SAP-C02
- Cut Idle Compute via Event Triggers | SAP-C02
- Cross-Account Migration Cost vs Uptime | SAP-C02
- Enforcing Spend Limits with SCP vs Budgets | SAP-C02
- Secure SSH Audit vs Perimeter Control | SAP-C02
- Control Tower Guardrails vs SCPs for RDS | SAP-C02
- Lambda Timeout Trade-offs vs Fargate | SAP-C02
- VMware to EC2—Fidelity vs Simplicity | SAP-C02
- Active-Passive Multi-Region DR | SAP-C02
- Lambda Canary Releases—Risk vs Ops Overhead | SAP-C02
- Cross-Account S3 Replication IAM Trust Trade-off | SAP-C02
- Zero-Downtime EBS Extraction Decision Logic | SAP-C02
- SCP Guardrails vs Delegation Decision | SAP-C02
- BYOIP Outbound IPs—NAT vs Accelerator | SAP-C02
- FinOps Cost Allocation Decisions for Shared VPCs | SAP-C02
- Lambda Cost Reporting Trade-offs | SAP-C02
- Central IP Allowlists Across Accounts—Trade-offs | SAP-C02
- CloudFront Multi-Region Failover Trade-offs | SAP-C02
- S3 Encryption Decision—KMS vs SSE Trade-offs | SAP-C02
- Zero-Downtime DB Migration Decision Logic | SAP-C02
- End-to-End TLS—Cert Ops vs Cost | SAP-C02
- Lambda RDS Proxy Pooling Decision Under Load | SAP-C02
- Lambda Static Egress IP via NAT Gateway | SAP-C02
- Agent vs Agentless Discovery Trade-offs | SAP-C02
- Webhook Migration Trade-offs | SAP-C02
- SCP Guardrails vs Lambda Remediation | SAP-C02
- OpenSearch Hot-Warm-Cold Cost Trade-offs | SAP-C02
- Pass AWS SAP-C02: The Ultimate 2026 Architect Study Guide
- Async Migration Cost vs Elasticity | SAP-C02
- DynamoDB Capacity Trade-offs (FinOps) | SAP-C02
- S3 Gateway Endpoint vs NAT Gateway Costs | SAP-C02
- StackSets in AWS Organizations Governance Traps | SAP-C02
- Migration Discovery—Agent vs Agentless | SAP-C02
- HA/DR Multi-Region Web Resilience Trade-offs | SAP-C02
- HA .NET Migration—Aurora vs RDS Decision | SAP-C02
- Hybrid File Sync—DataSync vs Storage Gateway | SAP-C02
- Multi-Account Cost Visibility Trade-offs | SAP-C02
- API Migration Scalability Trade-offs | SAP-C02
- SCP Explicit Deny vs FullAWSAccess | SAP-C02
- Private Marketplace Governance via SCPs | SAP-C02
- Multi-Account Transit Gateway Automation | SAP-C02
- Multi-Account Chargeback Decision Matrix | SAP-C02
- Domain Redirects—Cost vs Operability | SAP-C02
- Serverless DynamoDB API Integration Trade-offs | SAP-C02
- Secrets Rotation Automation Trade-offs | SAP-C02
- Hybrid Migration SLA vs Cost Trade-offs | SAP-C02
- NLB Static IP for HA TCP Service Trade-offs | SAP-C02
- FSx for Lustre HPC Cost Trade-offs | SAP-C02
- API Rate Limiting Trade-offs (Noisy Neighbor) | SAP-C02
- Multi-Account SSO vs AD Federation Trade-off | SAP-C02
- Archive Storage Private Access Trade-offs | SAP-C02
- Serverless CI/CD Canary vs Rollback | SAP-C02
- Serverless Refactoring Trade-offs | SAP-C02
- Direct Connect HA/DR & Multi-Region Trade-offs | SAP-C02
- CDN vs Storage Cost Trade-offs (S3, EFS, CloudFront) | SAP-C02
- Cross-Account Route 53 PHZ Trade-offs | SAP-C02
- ASG Lifecycle Hooks Log Retention Trade-offs | SAP-C02
- Hybrid Patch Management Governance Trade-offs | SAP-C02
- Cross-Account VPC Sharing Trade-offs | SAP-C02
- CloudFront Error Pages Trade-offs | SAP-C02
- HA/DR Design Trade-offs in Multi-AZ Recovery | SAP-C02
- Multi-Region DR Automation Trade-offs | SAP-C02
- Serverless Containers Trade-offs (ECS vs Lambda) | SAP-C02
- Cross-Account S3 Access Policy Trade-offs | SAP-C02
- CloudFront Header Rewrite Trade-offs | SAP-C02
- Migration Trade-offs for Stateful Apps | SAP-C02
- SCPs for M&A Onboarding Trade-offs | SAP-C02
- Multi-Region API Failover Trade-offs | SAP-C02
- Hybrid DNS Trade-offs in Route 53 Resolver | SAP-C02
Accelerate Your Cloud Certification.
Stop memorizing exam dumps. Join our waitlist for logic-driven blueprints tailored to your specific certification path.