
AWS Certified Solutions Architect - Associate
The AWS Certified Solutions Architect - Associate certification validates your ability to design cost- and performance-optimized solutions across the breadth of AWS services. It is ideal for solutions architects and IT professionals with AWS Cloud or strong on-premises experience who want to demonstrate they can build secure, resilient, high-performing architectures. Earning this industry-recognized credential signals that you can apply the AWS Well-Architected Framework to real-world design challenges.
504 practice questions · Updated 2026-07-30
SAA-C03 Curriculum
Every domain, objective, and concept the SAA-C03 exam measures.
- AWS Shared Responsibility ModelExplain the division of security responsibilities between AWS and the customer for different service types.
- AWS Global InfrastructureDescribe how AWS Regions and Availability Zones affect the design of secure, resilient architectures.
- Principle of Least PrivilegeApply the principle of least privilege when designing IAM policies and access controls.
- IAM Users, Groups, Roles, and PoliciesDesign a flexible authorization model using IAM users, groups, roles, and policies to grant appropriate access.
- IAM Root User SecurityImplement security best practices for the AWS root user, including enabling MFA and avoiding routine use.
- Multi-Factor Authentication (MFA)Apply MFA requirements to IAM users and roles to add an extra layer of security.
- Role-Based Access Control (RBAC)Design a role-based access control strategy using IAM roles, AWS STS, and role switching.
- Cross-Account Access with IAM RolesConfigure cross-account IAM roles to allow secure access between AWS accounts.
- AWS Organizations and Service Control Policies (SCPs)Design a multi-account security strategy using AWS Organizations and SCPs to centrally manage permissions.
- AWS Control TowerUse AWS Control Tower to set up and govern a secure, multi-account AWS environment.
- Resource-Based PoliciesDetermine when to use resource-based policies (e.g., S3 bucket policies, KMS key policies) to grant access to AWS resources.
- Federated Access and IAM Identity CenterDesign federated access to AWS using IAM Identity Center (AWS SSO) and identity providers.
- Directory Service Federation with IAM RolesDetermine when to federate an existing directory service (e.g., AWS Directory Service, AD) with IAM roles for access.
- AWS Security Best PracticesApply AWS security best practices, such as least privilege, MFA, and regular key rotation, to IAM and resource access.
- Secure application configuration and credentialsExplain how to securely manage application configuration and credentials, including using IAM roles, environment variables, and AWS Secrets Manager.
- AWS service endpointsDescribe the types of AWS service endpoints (public, VPC, private) and how to use them to control network access.
- Control ports, protocols, and network trafficDefine strategies for controlling ports, protocols, and network traffic using security groups, network ACLs, and AWS Network Firewall.
- Secure application accessImplement secure access to applications using mechanisms like IAM, identity federation, and resource-based policies.
- Security services and use casesMatch AWS security services (e.g., Cognito, GuardDuty, Macie) to appropriate use cases for identity, threat detection, and data protection.
- External threat vectorsIdentify common external threat vectors such as DDoS and SQL injection, and explain how AWS services mitigate them.
- VPC security componentsDesign VPC architectures incorporating security groups, route tables, network ACLs, and NAT gateways to secure resources.
- Network segmentation strategiesDetermine public and private subnet segmentation to isolate resources and control traffic flow.
- Integrating AWS services for securityIntegrate services like AWS Shield, AWS WAF, IAM Identity Center, and Secrets Manager to secure applications.
- Securing external network connectionsDescribe how to secure external connections using VPN and AWS Direct Connect, including encryption and private connectivity options.
- Data access and governanceDefine and apply AWS identity and access management (IAM) policies, S3 bucket policies, and AWS Organizations service control policies to control data access and enforce governance.
- Data recoveryImplement data recovery strategies using AWS Backup, snapshots, versioning, and cross-region replication to meet recovery point and time objectives.
- Data retention and classificationClassify data based on sensitivity and apply lifecycle policies (e.g., S3 Lifecycle) to manage retention, archival, and deletion.
- Encryption and key management fundamentalsExplain the differences between encryption at rest and in transit, and describe the role of AWS KMS in managing encryption keys.
- Aligning AWS technologies with compliance requirementsIdentify AWS compliance programs (e.g., HIPAA, PCI DSS, FedRAMP) and map AWS services and features to meet specific compliance obligations.
- Encrypting data at rest with AWS KMSImplement server-side encryption using AWS KMS for services like S3, EBS, and RDS, including customer-managed keys and AWS-managed keys.
- Encrypting data in transit with ACM and TLSConfigure TLS certificates using AWS Certificate Manager to encrypt data in transit for load balancers, CloudFront, and API Gateway.
- Implementing access policies for encryption keysCreate and attach key policies, IAM policies, and grants to control who can use and manage KMS keys, including enabling cross-account access.
- Implementing data backups and replicationSet up automated backups, snapshots, and replication (e.g., S3 Cross-Region Replication, RDS Multi-AZ) to ensure data durability and availability.
- Implementing policies for data access, lifecycle, and protectionCombine IAM, bucket policies, lifecycle rules, and AWS Organizations policies to enforce data access, retention, and protection across the organization.
- Rotating encryption keys and renewing certificatesEnable automatic key rotation for KMS keys and manage certificate renewal with ACM to maintain security and compliance.
- API Gateway and REST API managementDesign and manage APIs using Amazon API Gateway, including REST API creation, deployment, and integration with backend services.
- AWS managed services for loose couplingSelect and apply AWS managed services like Amazon SQS, AWS Transfer Family, and AWS Secrets Manager for appropriate use cases in decoupled architectures.
- Caching strategiesImplement caching strategies using services like Amazon CloudFront and ElastiCache to improve performance and reduce load.
- Microservices design principlesApply design principles for microservices, distinguishing stateless and stateful workloads and their implications.
- Event-driven architecturesDesign event-driven architectures using services like Amazon EventBridge and SNS to enable asynchronous communication.
- Horizontal and vertical scalingDetermine when to use horizontal scaling (adding instances) versus vertical scaling (increasing instance size) based on workload requirements.
- Edge accelerators and CDNUse content delivery networks and edge accelerators like Amazon CloudFront to reduce latency and offload origin traffic.
- Container migration strategiesPlan and execute migration of applications into containers, considering packaging, orchestration, and deployment.
- Load balancing conceptsApply load balancing concepts, including Application Load Balancer (ALB), to distribute traffic and improve availability.
- Multi-tier architecturesDesign multi-tier architectures separating presentation, application, and data tiers for scalability and security.
- Queuing and messaging conceptsImplement queuing and messaging patterns using SQS and SNS, including publish/subscribe models.
- Serverless technologies and patternsUse serverless technologies like AWS Lambda and AWS Fargate to build scalable, event-driven applications without managing servers.
- Storage types and characteristicsDifferentiate object, file, and block storage and select appropriate AWS storage services based on characteristics.
- Container orchestrationOrchestrate containers using Amazon ECS and Amazon EKS for deployment, scaling, and management.
- Read replicas usageDetermine when to use read replicas to offload read traffic and improve database performance.
- Workflow orchestrationOrchestrate complex workflows using AWS Step Functions to coordinate multiple AWS services.
- Architecture design based on requirementsDesign event-driven, microservice, or multi-tier architectures based on specific functional and non-functional requirements.
- Scaling strategy determinationDetermine appropriate scaling strategies for components in an architecture, considering elasticity and cost.
- Loose coupling service selectionIdentify AWS services required to achieve loose coupling, such as SQS, SNS, and API Gateway, based on requirements.
- Container usage determinationDecide when to use containers versus other compute options based on application characteristics and operational needs.
- Serverless adoption determinationEvaluate when to use serverless technologies and patterns based on workload patterns and management overhead.
- Compute, storage, networking, and database selectionRecommend appropriate AWS compute, storage, networking, and database technologies based on workload requirements.
- Purpose-built AWS servicesUtilize purpose-built AWS services for specific workloads to optimize performance, cost, and operational efficiency.
- AWS Global InfrastructureExplain how AWS Regions, Availability Zones, and edge locations (including Route 53) contribute to high availability and fault tolerance.
- AWS Managed Services for ResilienceIdentify appropriate use cases for AWS managed services like Amazon Comprehend and Amazon Polly in resilient architectures.
- Basic Networking for HA/FTDescribe how route tables and other basic networking components support highly available and fault-tolerant designs.
- Disaster Recovery StrategiesCompare and contrast backup and restore, pilot light, warm standby, and active-active failover strategies, and define RPO and RTO.
- Distributed Design PatternsApply distributed design patterns such as sharding, statelessness, and eventual consistency to improve resilience.
- Failover StrategiesDesign failover mechanisms across Availability Zones and Regions, including health checks and automatic failover.
- Immutable InfrastructureExplain the concept of immutable infrastructure and how it enhances reliability and recoverability.
- Load Balancing ConceptsDescribe how Application Load Balancers (ALB) and other load balancers distribute traffic and improve availability.
- Proxy ConceptsExplain how proxies like Amazon RDS Proxy improve availability and scalability by managing connections.
- Service Quotas and ThrottlingConfigure service quotas and handle throttling to ensure a workload can operate in standby environments.
- Storage Options and CharacteristicsEvaluate storage services based on durability, replication, and availability characteristics.
- Workload VisibilityUse AWS X-Ray and other monitoring tools to gain visibility into workload performance and failures.
- Automation for Infrastructure IntegrityDetermine automation strategies such as infrastructure as code and auto-scaling to maintain infrastructure integrity.
- Selecting AWS Services for HA/FTChoose appropriate AWS services to build highly available and fault-tolerant architectures across Regions or Availability Zones.
- Metrics for Business RequirementsIdentify and define metrics based on business requirements to measure the availability of a solution.
- Mitigating Single Points of FailureImplement designs that eliminate or mitigate single points of failure in an architecture.
- Data Durability and AvailabilityImplement strategies such as backups and replication to ensure data durability and availability.
- DR Strategy SelectionSelect an appropriate disaster recovery strategy based on business requirements such as RPO and RTO.
- Reliability for Legacy ApplicationsUse AWS services to improve the reliability of legacy applications that cannot be modified.
- Purpose-Built AWS ServicesLeverage purpose-built AWS services to enhance the resilience of specific workloads.
- Hybrid storage architectureIdentify and describe hybrid storage solutions that combine on-premises and AWS storage to meet business requirements such as data residency, latency, and cost.
- AWS Storage Gateway use casesDetermine appropriate AWS Storage Gateway deployment modes (File, Volume, Tape) for hybrid scenarios based on access patterns and data transfer needs.
- Amazon S3 use casesSelect Amazon S3 for object storage use cases involving high durability, scalability, and internet-accessible data, including static content and data lakes.
- Amazon EFS use casesSelect Amazon EFS for file storage use cases requiring shared access across multiple EC2 instances with POSIX permissions and scalable throughput.
- Amazon EBS use casesSelect Amazon EBS for block storage use cases requiring low-latency, persistent storage for a single EC2 instance, with options for different volume types.
- Object storage characteristicsDescribe object storage characteristics such as flat namespace, metadata, and HTTP-based access, and contrast with file and block storage.
- File storage characteristicsDescribe file storage characteristics such as hierarchical directory structure, shared access, and POSIX permissions, and contrast with object and block storage.
- Block storage characteristicsDescribe block storage characteristics such as raw disk volumes, low latency, and attachment to a single host, and contrast with object and file storage.
- Performance-based storage selectionDetermine storage services and configurations (e.g., EBS volume types, S3 performance tiers, EFS performance modes) that meet specific performance demands such as IOPS, throughput, and latency.
- Scalable storage designDetermine storage services that can scale to accommodate future needs, considering factors like capacity growth, throughput scaling, and automatic scaling features.
- AWS compute services overviewIdentify AWS compute services (EC2, Lambda, ECS, EKS, Fargate, Batch, EMR, etc.) and match them to appropriate use cases based on workload characteristics.
- Distributed computing on AWS global infrastructureExplain how AWS global infrastructure (Regions, AZs, edge locations) supports distributed computing patterns for high performance and low latency.
- Queuing and messaging patternsDescribe queuing (SQS) and publish/subscribe (SNS) patterns and their role in decoupling and scaling distributed systems.
- Scalability capabilities and use casesCompare EC2 Auto Scaling and AWS Auto Scaling, and select the appropriate scaling approach for different workload types.
- Serverless technologies and patternsDescribe AWS Lambda and AWS Fargate serverless patterns, including event-driven architectures and their benefits for elasticity.
- Container orchestration with ECS and EKSExplain how Amazon ECS and Amazon EKS orchestrate containers, including cluster management, service scaling, and task scheduling.
- Decoupling workloads for independent scalingApply decoupling techniques (e.g., queues, event buses, load balancers) to allow components to scale independently.
- Metrics and conditions for scaling actionsIdentify key metrics (CPU, memory, request count, queue depth) and conditions (thresholds, alarms) used to trigger scaling actions.
- Selecting compute options and featuresChoose appropriate EC2 instance types and compute features (e.g., burstable, GPU, storage optimized) based on business requirements.
- Selecting resource type and sizeDetermine the appropriate resource type and size (e.g., Lambda memory, Fargate CPU/memory) to meet performance and cost requirements.
- AWS Global InfrastructureExplain how AWS Regions and Availability Zones affect database deployment and high availability.
- Caching Strategies and ServicesDescribe caching strategies and use cases for Amazon ElastiCache to improve database performance.
- Data Access PatternsDifferentiate between read-intensive and write-intensive workloads and their impact on database design.
- Database Capacity PlanningPlan database capacity using concepts like capacity units, instance types, and Provisioned IOPS.
- Database Connections and ProxiesExplain the role of database proxies and connection pooling in managing database connections.
- Database Engines and Use CasesMatch database engines to use cases, including considerations for heterogeneous and homogeneous migrations.
- Database ReplicationDescribe database replication methods, focusing on read replicas and their benefits.
- Database Types and ServicesCompare serverless, relational, non-relational, and in-memory database services and their appropriate use cases.
- Configuring Read ReplicasConfigure read replicas to meet specific business requirements such as scaling reads and improving availability.
- Designing Database ArchitecturesDesign database architectures that align with performance, scalability, and cost requirements.
- Choosing Database EngineSelect an appropriate database engine (e.g., MySQL vs PostgreSQL) based on workload and feature needs.
- Choosing Database TypeDetermine the appropriate database type (e.g., Amazon Aurora, DynamoDB) for given application requirements.
- Integrating CachingIntegrate caching solutions to meet business requirements and optimize database performance.
- Edge networking servicesIdentify and compare Amazon CloudFront and AWS Global Accelerator, and select the appropriate service based on use cases such as content delivery, dynamic content, or global latency reduction.
- Network architecture designDesign network architectures including subnet tiers, routing tables, and IP addressing schemes to support high availability and scalability.
- Load balancing conceptsExplain the features and use cases of Application Load Balancer, Network Load Balancer, and Gateway Load Balancer, and determine which to use for different traffic types and protocols.
- Network connection optionsCompare AWS VPN, AWS Direct Connect, and AWS PrivateLink, and select the appropriate connection option based on security, bandwidth, and hybrid connectivity requirements.
- Network topology creationDesign network topologies for global, hybrid, and multi-tier architectures, incorporating appropriate AWS services and connectivity.
- Scalable network configurationsDetermine network configurations that can scale to accommodate future growth, such as using auto scaling, elastic IPs, and scalable routing designs.
- Resource placementDetermine the appropriate placement of resources (e.g., in which VPC, subnet, or Availability Zone) to meet business requirements such as low latency, high availability, and compliance.
- Load balancing strategy selectionSelect the appropriate load balancing strategy (e.g., round robin, least outstanding requests, or path-based routing) based on application requirements and traffic patterns.
- Data analytics and visualization servicesIdentify appropriate AWS analytics and visualization services (e.g., Amazon Athena, AWS Lake Formation, Amazon QuickSight) for specific use cases.
- Data ingestion patternsDescribe common data ingestion patterns, including frequency (batch, near-real-time, real-time) and their trade-offs.
- Data transfer servicesSelect appropriate data transfer services (e.g., AWS DataSync, AWS Storage Gateway) based on use cases like one-time migration, continuous replication, or edge storage.
- Data transformation servicesChoose the right data transformation service (e.g., AWS Glue) for ETL/ELT jobs, including serverless options and integration with other AWS services.
- Secure access to ingestion access pointsImplement secure access to ingestion endpoints using IAM policies, VPC endpoints, and encryption to protect data in transit and at rest.
- Sizing and throughput planningDetermine the sizes and speeds (e.g., data volume, transfer rate) needed to meet business requirements for ingestion and processing.
- Streaming data servicesIdentify appropriate streaming services (e.g., Amazon Kinesis Data Streams, Kinesis Data Firehose, Kinesis Data Analytics) for real-time data ingestion and processing use cases.
- Building and securing data lakesDesign a secure data lake architecture using services like Amazon S3, AWS Lake Formation, and AWS Glue, including access control and data cataloging.
- Designing data streaming architecturesDesign a streaming data architecture that includes ingestion, processing, and storage, considering scalability, durability, and ordering.
- Designing data transfer solutionsDesign a data transfer solution that meets business requirements for speed, cost, and security, using appropriate AWS services.
- Implementing visualization strategiesImplement data visualization strategies using Amazon QuickSight, including connecting to data sources, creating dashboards, and managing access.
- Selecting compute options for data processingSelect appropriate compute options for data processing, such as Amazon EMR, AWS Glue, or Amazon Redshift, based on workload characteristics.
- Selecting configurations for ingestionChoose appropriate configurations for data ingestion, including batch size, frequency, compression, and partitioning, to optimize performance and cost.
- Transforming data between formatsTransform data between formats (e.g., CSV to Parquet) using AWS services like AWS Glue or Amazon EMR, and understand the benefits of columnar formats.
- S3 Requester PaysExplain how Requester Pays buckets shift data transfer and request costs to the requester and identify use cases.
- Cost Allocation TagsUse cost allocation tags to organize and track AWS costs by project, department, or environment.
- Multi-Account BillingDescribe how consolidated billing and multi-account strategies help optimize costs through volume discounts and centralized management.
- AWS Cost ExplorerUse AWS Cost Explorer to visualize, analyze, and forecast AWS spending and identify cost optimization opportunities.
- AWS BudgetsSet custom budgets and alerts to monitor costs and usage, and automate actions based on budget thresholds.
- AWS Cost and Usage ReportGenerate and analyze the AWS Cost and Usage Report for granular cost and usage data.
- Amazon S3 Use CasesIdentify appropriate use cases for Amazon S3, such as static content, backups, and data lakes.
- Amazon EBS Use CasesIdentify appropriate use cases for Amazon EBS, such as block storage for EC2 instances.
- Amazon EFS Use CasesIdentify appropriate use cases for Amazon EFS, such as shared file storage for Linux workloads.
- Amazon FSx Use CasesIdentify appropriate use cases for Amazon FSx, such as Windows file servers or Lustre for high-performance computing.
- Backup StrategiesDesign cost-effective backup strategies using services like S3, EBS snapshots, and AWS Backup.
- EBS Volume TypesDifferentiate between SSD and HDD EBS volume types and select the most cost-effective option for a workload.
- S3 Lifecycle PoliciesConfigure S3 lifecycle policies to transition objects to cheaper storage tiers and expire unneeded data.
- Data Lifecycle ManagementDefine data lifecycle stages and apply appropriate storage actions from creation to deletion.
- AWS DataSyncUse AWS DataSync to transfer large amounts of data to AWS cost-effectively.
- AWS Transfer FamilyUse AWS Transfer Family for secure file transfers over SFTP, FTPS, and FTP.
- AWS Storage GatewayUse AWS Storage Gateway to integrate on-premises storage with AWS for hybrid cloud scenarios.
- Storage Access PatternsAnalyze access patterns (frequent, infrequent, random, sequential) to choose the right storage service and tier.
- Storage TieringApply storage tiering, such as S3 Standard to S3 Glacier, to reduce costs for cold data.
- Storage Types CharacteristicsCompare object, file, and block storage characteristics and select the appropriate type for a workload.
- Batch vs Individual UploadsDesign cost-efficient data ingestion strategies, such as batching uploads to S3 to reduce request costs.
- Storage SizingDetermine the correct storage capacity for a workload to avoid over-provisioning and minimize costs.
- Lowest Cost Data TransferIdentify the most cost-effective method to transfer data to AWS, considering factors like data volume and network.
- Storage Auto ScalingDetermine when to enable storage auto scaling, such as for EFS or DynamoDB, to match demand and control costs.
- S3 Object Lifecycle ManagementManage S3 object lifecycles by creating rules to transition and expire objects based on age or other criteria.
- Backup and Archival SelectionSelect the appropriate backup and archival solution (e.g., S3 Glacier for archives) based on recovery time and cost.
- Data Migration Service SelectionChoose the right service for migrating data to AWS storage, such as S3 Transfer Acceleration or Snowball.
- Storage Tier SelectionSelect the most cost-effective storage tier for a workload based on access frequency and retrieval needs.
- Cost-Effective Storage ServiceEvaluate and select the most cost-effective storage service for a given workload, balancing performance and cost.
- AWS cost management service featuresIdentify and describe AWS cost management features such as cost allocation tags and multi-account billing, and explain their purpose in tracking and allocating costs.
- AWS cost management toolsMatch AWS cost management tools (Cost Explorer, Budgets, Cost and Usage Report) to appropriate use cases for monitoring, forecasting, and controlling costs.
- AWS global infrastructureExplain how AWS Regions and Availability Zones impact cost optimization, including data transfer costs and latency considerations.
- AWS purchasing optionsCompare and contrast Spot Instances, Reserved Instances, and Savings Plans, and determine which purchasing option is cost-effective for different workload patterns.
- Distributed compute strategiesDescribe edge processing and how it reduces latency and cost by processing data closer to the source.
- Hybrid compute optionsExplain AWS Outposts and other hybrid compute solutions, and identify scenarios where they provide cost-effective compute for on-premises workloads.
- Instance types, families, and sizesClassify EC2 instance families (e.g., memory optimized, compute optimized) and sizes, and select appropriate instances based on workload requirements and cost.
- Optimization of compute utilizationDescribe how containers, serverless computing, and microservices can optimize compute utilization and reduce costs.
- Scaling strategiesExplain auto scaling and EC2 hibernation, and determine when each strategy is appropriate for cost optimization.
- Load balancing strategiesCompare Application Load Balancer (Layer 7), Network Load Balancer (Layer 4), and Gateway Load Balancer, and select the appropriate one based on traffic characteristics and cost.
- Scaling methods for elastic workloadsDifferentiate horizontal scaling from vertical scaling, and evaluate EC2 hibernation as a cost-saving measure for elastic workloads.
- Cost-effective AWS compute servicesDetermine the most cost-effective AWS compute service (e.g., Lambda, EC2, Fargate) for a given workload based on usage patterns and requirements.
- Availability and cost trade-offsAnalyze the trade-offs between availability and cost when designing compute architectures, including multi-AZ deployments and spot instance usage.
- Cost-effective database selectionEvaluate and select the most cost-effective database service (e.g., RDS, DynamoDB, Aurora, Redshift) based on workload requirements and cost constraints.
- Right-sizing database instancesDetermine appropriate database instance types and sizes to match performance needs while minimizing costs.
- Storage optimization for databasesOptimize database storage configurations (e.g., provisioned IOPS, storage types, autoscaling) to reduce costs without sacrificing performance.
- Leveraging managed servicesUse managed database services to reduce operational overhead and lower total cost of ownership compared to self-managed options.
- Reserved capacity and savings plansApply reserved instances or savings plans for databases to achieve significant cost savings for predictable workloads.
- Serverless database optionsUtilize serverless database offerings (e.g., Aurora Serverless, DynamoDB on-demand) to match costs to actual usage and eliminate idle capacity.
- Data lifecycle and retention policiesImplement data lifecycle policies (e.g., archiving, deletion, tiering) to reduce storage costs for infrequently accessed data.
- Cost monitoring and optimization toolsUse AWS cost monitoring tools (e.g., Cost Explorer, Trusted Advisor) to identify and act on database cost optimization opportunities.
- Cost-Effective Network Architecture PrinciplesIdentify and apply principles for designing network architectures that minimize costs while meeting performance and security requirements.
- Cost Optimization for VPC DesignDesign VPCs with cost-efficient subnetting, routing, and IP addressing to avoid unnecessary resource usage and data transfer costs.
- Cost-Efficient Internet ConnectivityChoose between NAT gateways, NAT instances, and internet gateways based on cost and performance trade-offs for outbound internet access.
- Cost-Effective Load BalancingSelect and configure load balancers (ALB, NLB, CLB) and target groups to optimize costs while ensuring required availability and performance.
- Cost Optimization for Content DeliveryUse CloudFront and other CDN services to reduce data transfer costs and offload traffic from origin servers.
- Cost-Effective Hybrid ConnectivityEvaluate and choose between AWS Site-to-Site VPN, Direct Connect, and transit gateway options to minimize costs for hybrid network connections.
- Cost Optimization for DNS and RoutingDesign DNS resolution and routing policies (e.g., Route 53) to reduce latency and costs, including using alias records and cost-effective routing strategies.
- Minimizing Data Transfer CostsImplement strategies to reduce data transfer costs, such as using VPC endpoints, placing resources in the same AZ, and leveraging private IPs.
- Cost-Effective Network Monitoring and ManagementUse cost-effective monitoring and management tools (e.g., VPC Flow Logs, CloudWatch) to track network usage and identify cost-saving opportunities.
- Right-Sizing Network ResourcesSelect appropriate instance types, bandwidth, and network features to match workload requirements and avoid over-provisioning costs.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for SAA-C03, so none is invented.