AWS Certified Solutions Architect - Professional (SAP-C02) is one of the most challenging certifications in the AWS ecosystem. While the Associate level tests your knowledge of individual services, the Professional level tests your ability to combine multiple services to solve complex business requirements.
Think of it this way. The Associate exam asks "What are the properties of this building material?" The Professional exam asks "Design a 50-story skyscraper with structural safety, electrical systems, security infrastructure, and a renovation plan — all at once." Each question weaves together multiple services, and the requirements span performance, cost, security, and availability simultaneously.
Who Is SAP-C02 For?
The most demanding architecture certification AWS offers, validating senior practitioners who design complex multi-account and hybrid workloads.
| Target Audience | Why It Fits | |-----------------|-------------| | Senior solutions architects | Validates decision-making for complex migration and re-architecture scenarios | | Cloud consultants | Builds the skill to advise clients on multi-account governance and cost optimization | | SAA-C03 holders | The natural next step from Associate to Professional | | Enterprise architects | Prepares you to own org-wide disaster recovery and security policy design |
AWS recommends 2+ years of hands-on architecture experience. Unlike the Associate exam, there are no Lab questions, but the question texts are much longer and require weighing multiple constraints at once.
---
Exam at a Glance
Before you start studying, know the basic specs so you can plan your time wisely.
| Item | Details | |------|---------| | Exam Code | SAP-C02 | | Number of Questions | 75 | | Time Limit | 180 minutes | | Passing Score | 750 / 1000 | | Question Types | Multiple choice + Multiple select | | Cost | $300 USD | | Prerequisites | None (Associate recommended) |
That works out to about 2 minutes and 24 seconds per question. The question texts are long and scenario-heavy, so time management is critical. Flag uncertain questions and come back to them later.
Unlike the Associate exams, there are no Lab (hands-on) questions. Instead, nearly every question is scenario-based, asking you to find the optimal solution that meets specific constraints like "most cost-effective," "least operational overhead," or "shortest RTO."
The 4 Domains and Their Weights
SAP-C02 is divided into 4 domains. Knowing each domain's weight helps you invest your study time where it counts most.
| Domain | Weight | What It Covers | |--------|--------|---------------| | D1: Design Solutions for Organizational Complexity | 26% | Networking, security, multi-account, DR, cost visibility | | D2: Design for New Solutions | 29% | Deployment, continuity, security, reliability, performance, cost | | D3: Continuous Improvement for Existing Solutions | 25% | Operations, security, performance, reliability, cost improvements | | D4: Accelerate Workload Migration and Modernization | 20% | Migration planning, execution, architecture redesign |
D2 carries the heaviest weight at 29%. This means the exam prioritizes your ability to design new systems from scratch. D1 (26%) tests how you manage infrastructure in complex organizational environments, D3 (25%) tests how you improve systems already in production, and D4 (20%) tests your migration and modernization skills.
!SAP-C02 exam domain weight breakdown
Using the building design analogy: D1 is managing an existing complex — walkways between buildings (networking), access control (security), disaster preparedness (DR) D2 is designing a new building — drawing up the structure, utilities, and budget from scratch D3 is renovation — upgrading insulation, plumbing, and security in occupied buildings D4 is relocation — moving from an old building to a new one while upgrading to modern facilities
Key Services by Domain
Here are the most frequently tested AWS services in each domain.
D1: Design Solutions for Organizational Complexity (26%)
Networking carries the most weight. You need to understand Transit Gateway (hub-spoke topology), Direct Connect (dedicated connections), VPN, PrivateLink, and Route 53 Resolver (hybrid DNS). For security, the key services are IAM Identity Center (SSO), SCP (Service Control Policies), and KMS. For multi-account management, AWS Organizations, Control Tower, and RAM appear frequently.
D2: Design for New Solutions (29%)
CloudFormation (IaC), CodePipeline (CI/CD), and Route 53 (DNS routing) are central to deployment questions. For security, WAF, Shield, and GuardDuty are important. For reliability, Auto Scaling, SQS/SNS (loose coupling), and Multi-AZ configurations are tested. Performance questions focus on ElastiCache, CloudFront, DynamoDB DAX, and Aurora. Cost questions compare Savings Plans, Reserved Instances, and Spot Instances.
D3: Continuous Improvement for Existing Solutions (25%)
CloudWatch (monitoring), Systems Manager (operational automation), and AWS Config (compliance) are the operational excellence core. Security improvement covers Secrets Manager, Inspector, and Config Rules auto-remediation. Performance topics include Global Accelerator, CloudFront, and Placement Groups. Cost optimization features Compute Optimizer, Spot Fleet, and right-sizing.
D4: Accelerate Workload Migration and Modernization (20%)
You must know the migration tools: DMS (databases), DataSync (files), MGN (servers), and Snow Family (large-scale). The 7R migration strategies (Rehost, Replatform, Refactor, etc.) are essential. For modernization, Lambda (serverless), ECS/EKS/Fargate (containers), DynamoDB/Aurora Serverless (purpose-built databases), and SQS/SNS/EventBridge (event-driven) are key services.
Study Strategy — The Professional-Level Approach
SAP-C02 rewards understanding how services work together, not deep knowledge of a single service.
Step 1 — Start with network topology. If you cannot explain the differences between Transit Gateway, Direct Connect, and VPN, you will miss 26% of the exam. You should be able to draw VPC interconnection diagrams from memory.
Step 2 — Master the 4 DR strategies. Understand the RTO/RPO differences and cost trade-offs between Backup-Restore, Pilot Light, Warm Standby, and Multi-Site Active-Active. These appear across D1 and D2.
Step 3 — Learn multi-account governance. Understanding the relationship between Organizations, SCP, Control Tower, and IAM Identity Center solves half the security questions in D1.
Step 4 — Map migration tools to scenarios. "Migrate a 10TB database with minimal downtime" maps to DMS + CDC. "Transfer 100TB of files quickly" maps to DataSync + Direct Connect. "Petabyte scale" maps to Snow Family.
Step 5 — Compare cost optimization options. Know when to use Savings Plans vs Reserved Instances vs Spot Instances.
Practice tip: Use the AWS Well-Architected Labs to experience real architecture patterns. The disaster recovery, multi-account setup, and network connectivity labs are directly relevant to the exam.
Exam Key Points
"Hardest AWS architecture certification" -- SAP-C02
"Highest-weight domain" -- D2 Design for New Solutions (29%)
"Average time per question" -- about 2 minutes 24 seconds (75 questions / 180 min)
"Passing score" -- 750 out of 1000
"Exam cost" -- $300 USD
"Most frequently tested sub-area" -- Network connectivity strategies (D1)
Focus on D1+D2 to cover 55% of the exam
Unlike Associate, there are no Lab questions, but question texts are much longer and more complex
---
Domain Deep-Dive Series and Next Steps
With the big picture from this guide, continue with the deep-dive posts below to build service-level judgment for each domain.
| | Topic | |---|-------| | 2 | Network Connectivity Strategies and Hybrid Architecture | | 3 | Security Controls and Multi-Account Governance | | 4 | DR/Resilience Architecture and Cost Visibility | | 5 | Deployment Strategies and Business Continuity | | 6 | Security and Reliability for New Solutions | | 7 | Performance Goals and Cost Optimization | | 8 | Improving Operational Excellence | | 9 | Security and Reliability Improvement | | 10 | Performance and Cost Optimization | | 11 | Migration Planning and Execution | | 12 | Architecture Redesign and Modernization |
Ready to test where you stand? Try the SAP-C02 practice exam now.