AWS publishes exactly what the SAP-C03 tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.
Domain 1
Architecture Design and Implementation Built for the Cloud
Designing cloud-native architectures across an organization: event-driven and serverless patterns, containers and service meshes, multi-tenancy, AI/ML and RAG integration, hybrid connectivity and DNS, multi-VPC networking, IPv6, global routing, and data, storage and database design. Official weighting 25%.
6 topics in this domain
- Design architectures built for the cloud: event-driven, serverless and multi-tenant
- Design architectures built for the cloud: containers, scaling, ingress and edge
- Integrate AI and ML services into architectures
- Design hybrid cloud integration patterns
- Design network architectures
- Design data, storage, and database architectures
Domain 2
Security, Compliance, and Governance
Securing and governing multi-account estates: identity federation and least privilege, data perimeters, encryption and key management (including CloudHSM and post-quantum cryptography), Organizations and Control Tower guardrails, centralized logging, compliance, data residency, and responsible-AI controls. Official weighting 25%.
5 topics in this domain
- Design identity security architectures
- Design solutions to implement encryption and key management strategies
- Design multi-account governance and compliance solutions
- Design architectures to meet compliance requirements
- Design security and responsible AI controls
Domain 3
Cost-Optimized Architecture Design
Designing for cost: purchase options and pricing models, rightsizing, AI/ML cost levers, data-transfer and network costs, tagging, chargeback and anomaly detection, and storage, database, backup and observability costs. Official weighting 15%.
4 topics in this domain
- Design architectures based on AWS pricing models
- Optimize data transfer and network costs
- Design cost allocation and visibility solutions
- Optimize storage and database costs
Domain 4
Resilience, Migration, and Business Continuity
Migration, disaster recovery and resilience: portfolio discovery and migration waves, rehost/replatform/refactor strategies and mainframe modernization, DR design against RTO/RPO, multi-Region failover, backup governance, ransomware protection and chaos engineering. Official weighting 15%.
3 topics in this domain
- Design migration strategies by using AWS frameworks
- Design disaster recovery architectures
- Design solutions to meet business continuity and resiliency requirements
Domain 5
Operational Excellence and Automation
Running architectures at scale: infrastructure and policy as code, multi-account deployments, CI/CD and DevSecOps pipelines, AI output evaluation, observability and SLOs, and operational automation with safe remediation, scaling and self-healing. Official weighting 20%.
4 topics in this domain
- Design infrastructure as code
- Design CI/CD and DevSecOps pipelines
- Design observability and monitoring solutions
- Design operational automation and resilient systems