Exam Overview
The SAP-C02 certification validates your ability to design and deploy scalable, highly available, and fault-tolerant systems on AWS. It is designed for experienced solutions architects who demonstrate advanced knowledge of AWS services, best practices, and complex architectural patterns.
Exam Domains
- Design for New Solutions: Create architectures that meet business and technical requirements using AWS best practices.
- Design for Existing Solutions: Improve existing architectures for cost optimization, operational excellence, security, reliability, and performance efficiency.
- Implementation: Deploy applications and infrastructure using automation, CI/CD, and infrastructure as code.
- Migration: Plan and execute migration strategies to move workloads to AWS with minimal downtime.
Key Concepts & Common Difficulties
- Multi-Region Active-Active vs. Active-Passive: Candidates often confuse replication strategies. Remember that active-active requires sophisticated load balancing and data synchronization, while active-passive relies on DNS failover and standby resources.
- Cost Optimization at Scale: Many overlook the importance of right-sizing and reserved instances for long-term savings. Focus on analyzing usage patterns and leveraging AWS Cost Explorer alongside architectural decisions.
- Security Identity Management: IAM roles, policies, and cross-account access are frequently misunderstood. Ensure you understand the principle of least privilege and how to chain roles securely across services.
- High Availability and Disaster Recovery: RTO and RPO definitions are critical. Distinguish between backup, restore, cold standby, warm standby, and pilot light strategies based on business impact analysis.
- Networking Complexity: VPC peering, transit gateways, and private links can be tricky. Visualize traffic flow and ensure connectivity options align with security and latency requirements.
Study Strategy
- Prerequisites: Gain hands-on experience with AWS core services like EC2, S3, RDS, Lambda, and VPC. Familiarity with Terraform or CloudFormation is beneficial.
- Study Order: Begin with networking and security fundamentals, then progress to compute, storage, and database services. Finally, tackle migration and advanced architecture scenarios.
- Practice Approach: Use scenario-based questions to simulate real-world problems. Analyze why incorrect answers are wrong to deepen understanding of trade-offs.
- Exam-Day Tips: Read each question carefully, identifying keywords like "most cost-effective" or "highest availability." Eliminate obviously incorrect options first and manage time wisely for complex multi-part questions.
What you'll find here
- 70 highly debated topics with an expert breakdown of every option
- 56 community-verified topics with consensus explanations
- Debate ranking showing which concepts cause the most confusion
Study recommendation
Start with the debated topics — they mark the areas where candidates most often get the answer wrong on the real exam.
Featured analysis
Most debated concepts with community insightA company plans to migrate many VMs from an on-premises environment to AWS. The…
The question tests the division of labor between Migration Evaluator's Quick Insights report and Application Discovery Service's dependency mapping;…
Deep analysisA company runs an ecommerce application in a single AWS Region. The application…
The question tests cross-Region DR for Aurora and the trap is choosing DMS CDC or hourly backups because they seem cheaper while ignoring…
Deep analysisA company has VPC flow logs enabled for Its NAT gateway. The company is seeing…
Testing whether NAT gateway inbound traffic is unsolicited requires finding the corresponding outbound flow from the VPC CIDR to the public IP; the…
Deep analysisA company is planning to store a large number of archived documents and make…
The exam tests choosing an S3 storage class by access pattern, cost, and retrieval latency, not by picking the absolute cheapest storage tier; the…
Deep analysisA company has many AWS accounts and uses AWS Organizations to manage all of…
This tests AWS RAM subnet sharing within Organizations, and the trap is replacing delegated subnet use with transit gateway routing or duplicate…
Deep analysisA company uses AWS Organizations with a single OU named Production to manage…
Tests SCP inheritance and deny precedence: root deny-list SCPs cannot be overridden by an allow SCP in a child OU, so the fix must move the deny…
Deep analysisA company needs to architect a hybrid DNS solution. This solution will use an…
The question tests whether you can combine Route 53 private hosted zone association with the correct directional Resolver endpoint for hybrid DNS,…
Deep analysisAn events company runs a ticketing platform on AWS. The company’s customers…
A gateway VPC endpoint for S3 removes both the NAT gateway data processing charge and the cross-AZ traffic for S3 requests, and because event…
Deep analysisA company wants to migrate its website to AWS. The website uses containers that…
Migration Evaluator collects on-premises inventory data and models that workload into an AWS scenario so the report covers both the current-state…
Deep analysis