AWS Solutions Architect Associate (SAA-C03)
The tier where naming the service stops being enough. {cards} flashcards on the trade-offs SAA-C03 actually tests — which of two services, at what cost, and what breaks at scale.
- flashcards
- 90
- flashcards
- per day
- ~10 min
- per day
- level
- Intermediate
- level
- modules
- 5
- modules
What the SAA-C03 exam actually asks
AWS Certified Solutions Architect – Associate (SAA-C03) sits a level above Cloud Practitioner, and the difference is not simply more services. Cloud Practitioner asks what a service is; SAA-C03 gives you a workload with several constraints at once — a latency target, a compliance rule, a budget — and asks which design satisfies all of them. Answers that are technically capable but needlessly expensive are wrong answers.
The exam guide (Version 1.1) weights four domains: Design Secure Architectures 30%, Design Resilient Architectures 26%, Design High-Performing Architectures 24% and Design Cost-Optimized Architectures 20%. This track mirrors those weights rather than splitting evenly, so time spent here lands roughly where the marks are. Verify the current weighting against the official exam guide before you book — AWS revises it.
A fifth module holds case-style scenarios in the shape the exam asks them: two or three paragraphs of context, four plausible architectures, one that meets every stated constraint. Those cards run on a longer timing profile, so reading carefully is not punished as hesitation.
5 modules, seed to bloom
Each module is a set of flashcards — 90 in total. Answer, review, and watch your knowledge grow from seed to full bloom.
Design Secure Architectures
Multi-account guardrails, cross-account roles and the effective-permission chain, VPC segmentation and endpoints, key management and data protection
23 cardsDesign Resilient Architectures
Disaster-recovery strategies against RPO and RTO, decoupling with queues and events, failover and health checking, and the proxies and replicas that keep a data tier up
19 cardsDesign High-Performing Architectures
Sizing storage, compute and databases to a workload's real access pattern — volume types, placement, caching, partition keys, network topology and streaming ingestion
18 cardsDesign Cost-Optimized Architectures
Where the money actually goes — storage tiering and lifecycles, purchasing models, right-sized databases, and the data-transfer and NAT charges that quietly dominate a bill
15 cardsArchitecture Scenarios
Case-style questions in the shape the exam asks them — several constraints at once, where the right answer is the one that satisfies all of them rather than the most capable service
15 cardsSample questions
A taste of the real flashcards. Pick an answer, then reveal the explanation.
Private-subnet instances must reach S3 without traversing the internet, at the lowest cost. Which endpoint type?
- AA gateway endpoint, which adds a route table entry and carries no hourly charge
- BAn interface endpoint, which places an elastic network interface in each subnet
- CEither one, since S3 and DynamoDB support both at identical pricing
- DA NAT gateway with an S3 prefix list, which keeps the traffic on the backbone
Reporting queries are saturating an RDS primary in a Multi-AZ instance deployment. What actually helps?
- AA read replica, which the reporting workload can be pointed at directly
- BPromoting the Multi-AZ standby, which is idle and can serve the reports
- CA second Multi-AZ standby in another Availability Zone to share the load
- DEnabling automatic backups, which offloads read traffic to the snapshot
Instances pull terabytes per month from S3 through a NAT gateway. What removes most of that charge?
- AA gateway VPC endpoint for S3, which keeps the traffic off the NAT gateway
- BA larger NAT gateway size, since per-GB processing falls at higher tiers
- CS3 Transfer Acceleration, which routes the traffic over the AWS backbone
- DMoving the bucket to another Region to qualify for lower transfer rates
A three-tier web application runs in one Availability Zone. The business needs it to survive the loss of a zone, the reporting queries are saturating the database, and the budget will not stretch to a second Region. What is the smallest set of changes that meets all three?
- ASpread the web tier across zones behind an ALB, enable Multi-AZ, add a read replica
- BMove the web tier to a second Region behind Route 53, enable cross-Region replication
- CEnable Multi-AZ and point the reporting queries at the standby instance
- DAdd read replicas in three zones and let the application write to whichever responds
Learn it once, keep it for good
Answer a question
Each card is one practical concept with multiple options. Pick what you think is right.
Get the full answer
See the correct option plus a clear explanation, and a link to deeper docs when one is available.
Review at the right time
A spaced-repetition engine (SM-2 or FSRS) resurfaces each card just before you would forget it.
Why this tier is the one that changes how you work
Trade-offs, not trivia
Every card asks which option and why — the judgement that separates an architect from a service catalogue.
The bill becomes visible
NAT gateway processing, cross-zone transfer, missing VPC endpoints — the line items that quietly dominate real invoices.
Failure modes up front
RPO against RTO, what a Multi-AZ standby will not do for you, why DNS failover is never instant.
Highest-volume cloud cert
SAA-C03 is the most widely taken AWS certification, and the vocabulary transfers straight into design reviews.
Common questions
Should I do Cloud Practitioner first? +
It helps but is not required — SAA-C03 has no prerequisite. This track assumes you already know what the core services are and spends its time on choosing between them, so if service names are still new, start with the Cloud Practitioner track and come back.
Does this cover all four SAA-C03 domains? +
Yes, and in the exam's own proportions: security 30%, resilience 26%, performance 24% and cost 20%, with a fifth module of case-style scenarios drawing across all of them.
Is this enough to pass the exam on its own? +
No, and nothing that is only flashcards would be. It builds the recall the exam leans on — which service, which trade-off, which limit — but you should pair it with the official exam guide, AWS whitepapers and hands-on time. Gnoseed does not sell, proctor or guarantee any certification.
How current are the facts? +
Every card cites a specific AWS documentation page, and the domain weightings were read off the official SAA-C03 exam guide rather than a prep site. AWS changes services and pricing constantly, so treat the linked docs as the source of truth.
Is it free? +
Yes, completely free with no registration. Progress is stored locally in your browser, and syncs across devices only if you choose to sign in.
Start with the domain you would fail today
Security is 30% of the exam and the module most people underestimate. Plant your first seed there — ten minutes a day beats another pass over what you already know.