AWS Certified Solutions Architect – Professional

SAP-C02 · ● Active · Expert · Amazon Web Services

Flagship expert-level AWS architecture credential. Validates advanced capability to design and deploy complex, large-scale AWS solutions across enterprise environments. Launched Nov 15, 2022; supersedes SAP-C01 (retired Mar 27, 2023).

Exam facts

Vendor source — AWS Certified Solutions Architect – Professional ↗

Official exam guide — AWS Certified Solutions Architect Professional SAP-C02 Exam Guide (PDF) ↗

Exam objectives — SAP-C02 Exam Guide – Content Domains ↗

About

AWS Certified Solutions Architect – Professional (SAP-C02) is the flagship expert-level AWS credential for senior architects and principal engineers designing enterprise-scale, mission-critical solutions. Launched November 15, 2022, it supersedes SAP-C01 and reflects modern AWS services, organizational complexity patterns (multi-account strategy, Control Tower, landing zones), advanced networking (Transit Gateway, Network Firewall, Cloud WAN), and workload migration at scale. The exam validates deep hands-on experience with AWS Well-Architected Framework, cost governance, resilience patterns, and large-scale transformation initiatives. Industry pass rate approximately 55–65%; significantly harder than Solutions Architect Associate (SAA-C03).

Domain context — Cloud / Architecture

Hyperscale public cloud architecture, enterprise cloud adoption, hybrid/multi-cloud strategy, and advanced solutions design across AWS ecosystem. Cloud architects at Expert level own organization-wide AWS strategies, lead migration initiatives, mentor solutions architects, and influence vendor/platform decisions.

Read full deep dive — AWS Ecosystem →

Read full deep dive — DOM09 Architecture Domain →

Topics covered

Official exam blueprint weights (SAP-C02) — 4 scored domains:

• Design Solutions for Organizational Complexity (26%) — Multi-account AWS environments, AWS Organizations, Service Control Policies (SCPs), AWS Control Tower, landing zone architecture, cross-account access (Resource Access Manager, IAM roles), compliance frameworks, scalable governance patterns
• Design for New Solutions (29%) — Greenfield architecture patterns, compute strategy (EC2, Fargate, Lambda, Outposts, Wavelength), storage architecture (S3, EBS, EFS, FSx), database selection (RDS, Aurora, DynamoDB, Redshift, Neptune), networking design (VPC design, Route 53, CloudFront, Direct Connect, VPN), security design (IAM, KMS, Secrets Manager, CloudHSM)
• Continuously Improve for Existing Solutions (25%) — Migration planning and execution (AWS Migration Hub, Application Migration Service, Database Migration Service, DataSync), cost optimization (Compute Optimizer, Right Sizing, Reserved Instances, Savings Plans, Spot Instances), performance tuning, operational excellence (CloudWatch, X-Ray, CloudTrail), disaster recovery and business continuity
• Accelerate Workload Migration and Modernization (20%) — Migration strategies (rehost, re-platform, re-architect, retire, repurchase), legacy system assessment, dependency mapping, parallelization patterns, data migration at scale (AWS Snow Family, DataSync, Storage Gateway), application modernization (containerization, serverless refactoring), cost-benefit analysis for migration sequencing

Source: Official SAP-C02 Exam Guide ↗

Common skills at Cloud / Architecture · Expert

Shared competencies for all architects at Expert level across cloud platforms.

• Multi-cloud and hybrid strategy (AWS + Azure, AWS + GCP, or AWS-centric with on-premise)
• Cost governance at scale (chargeback models, showback/allocation, FinOps practices, TCO/ROI modeling)
• Enterprise governance and compliance (SOC2, ISO 27001, HIPAA, PCI-DSS, FedRAMP, GDPR data residency)
• Advanced networking architecture (SD-WAN, cloud interconnect, hybrid VPN/Direct Connect, network segmentation, zero-trust)
• Resilience and disaster recovery (RTO/RPO targets, multi-region active-active, failover automation, chaos engineering)
• Organizational design for cloud (two-pizza teams, cross-functional architecture reviews, guild/community models)
• Vendor strategy and platform roadmapping (make/buy/integrate decisions, CapEx vs. OpEx tradeoffs, competitive positioning)
• Executive communication and C-suite readiness (cloud ROI, business case development, risk quantification, strategic alignment)

Recommended courses at Cloud / Architecture · Expert

Course selection rule: All listed courses target SAP-C02 specifically (not generic "AWS advanced"). Adrian Cantrill is widely considered the highest-quality resource; combined with Tutorials Dojo practice exams, this is the most common high-pass-rate pathway.

Practice exams

Exam prep insight: Tutorials Dojo is most highly recommended for SAP-C02 by the AWS community (40,000+ reviews); practice exams are closest in format and difficulty to actual exam. Minimum 5–10 full practice exams recommended before attempting live exam.

Books

Book note: The Sybex study guide by Piper & Clinton is the canonical print resource for SAP-C02; verified current for the 2023+ exam revision. Official exam guide PDF is free from AWS and essential reference material.

Typical job titles at Cloud / Architecture · Expert

Senior Solutions Architect · Principal Solutions Architect · Cloud Architect · Enterprise Cloud Architect · Sr. Pre-Sales Solutions Architect · Cloud Infrastructure Architect · Principal Cloud Engineer

(Drawn from current job postings on AWS Jobs, LinkedIn, and cloud-focused recruiting firms that list SAP-C02 as required or preferred credential.)

Salary

Salary drivers: SAP-C02 adds $20K–$40K premium over SAA-C03. Principal-level roles (SAP-C02 + 2+ specialty certs) command $250K–$400K+ in FAANG and high-growth unicorns. Cost-of-living adjustments: San Francisco, Seattle, NYC +25–35%; remote-first with lower-CoL negotiation yields +10–15% above stated ranges.

Skills validated

SAP-C02-specific technologies and patterns tested on the exam.

• Organizational AWS (multi-account): AWS Organizations, Service Control Policies (SCPs), AWS Control Tower, landing zone architecture (AWS Landing Zone Accelerator, Service Catalog)
• Advanced networking: Transit Gateway (TGW) routing, Network Firewall, AWS Cloud WAN, Direct Connect (connections, virtual interfaces, MACsec, gateway), VPN high availability (redundant VPN, Customer Gateway failover), Route 53 (health checks, geolocation routing, failover, traffic policies), PrivateLink, VPC endpoints
• Governance and compliance: AWS Config, AWS Compliance Manager, AWS Service Control Policies, cross-account IAM role assumption, Resource Access Manager (RAM), AWS Security Hub, Detective, CloudTrail for multi-account logging
• Advanced security: KMS multi-Region keys, Secrets Manager with rotation, CloudHSM, AWS Certificate Manager (ACM), WAF with custom rules and rate limiting, Shield Advanced, GuardDuty, Macie (data discovery)
• Enterprise data architecture: Redshift (Spectrum, Concurrency Scaling), Aurora (read replicas, global databases), DynamoDB (global tables, on-demand billing), Lake Formation, AWS Glue (data catalog, ETL), Amazon QLDB
• Migration at scale: AWS Application Migration Service (MGN), Database Migration Service (DMS) with CDC, AWS DataSync, AWS Storage Gateway (file, volume, tape), AWS Snow Family (Snowcone, Snowball, Snowmobile), AWS Migration Hub, Server Migration Service (SMS), AWS Datasync
• Cost optimization: Compute Optimizer recommendations, Right Sizing analysis, Reserved Instances (RIs) and Savings Plans (SP) purchasing strategies, Spot Instance fleets, Cost Anomaly Detection, AWS Budgets and Cost Explorer, Cost allocation tags, FinOps metrics (CUR analysis)
• Disaster recovery: Multi-Region active-active architecture, pilot light, warm standby, RTO/RPO targets, AWS Backup cross-Region copies, Amazon Route 53 failover, Application Load Balancer cross-zone, DynamoDB global tables, Aurora cross-Region read replicas
• Performance at scale: CloudFront (origin groups, geographic routing, origin shield), ElastiCache (Redis, Memcached, cluster mode), RDS (read replicas, Aurora read scaling), Kinesis (streams, firehose, analytics), SQS / SNS / EventBridge (async decoupling), Lambda (concurrency, reserved capacity)
• Serverless at enterprise scale: Lambda function versioning and aliases, layers (dependencies), VPC Lambda, Lambda@Edge, API Gateway (caching, throttling, request/response transformation), Step Functions (state machines, error handling, retries), AppSync (GraphQL managed service)
• Hybrid and edge: AWS Outposts (compute/storage on-prem), Wavelength (5G edge), Local Zones (metro extension), Site-to-Site VPN, AWS Direct Connect, Storage Gateway, Snow Family, Hybrid architectures with on-prem integration

Related certifications

• Stacks with: AWS Certified DevOps Engineer – Professional (DOP-C02) ↗ — enterprise-scale CI/CD, IaC, deployment automation at the same Expert level
• Stacks with (specialty): AWS Certified Security Specialty (SCS-C03) ↗, AWS Certified Advanced Networking Specialty (ANS-C01) ↗ — common complementary credentials for enterprise architects
• Prerequisite for: Advanced Specialty certifications (DAS-C01 Data Analytics, MLS-C01 Machine Learning) — SAP-C02 is implicit prerequisite for organizational understanding
• Replaces: SAP-C01 (retired March 27, 2023)
• Entry prerequisite: AWS Certified Solutions Architect – Associate (SAA-C03) ↗ — strongly recommended before SAP-C02
• Vendor overview: AWS Vendor Overview ↗

Exam preparation strategy

Typical timeline: 8–16 weeks (300+ study hours for full-time working professionals).

Week 1–2: Baseline assessment

• Review SAP-C02 exam guide (PDF, free from AWS)
• Take one free Tutorials Dojo practice exam to identify knowledge gaps
• Verify prerequisites: 2+ years hands-on AWS experience; SAA-C03 pass required

Week 3–8: Core content

• Complete Adrian Cantrill SAP-C02 course (40–60 hours video + hands-on labs)
• Deep-dive on weak domains: re-watch sections, take detailed notes, build lab environments
• Read AWS whitepapers: Well-Architected Framework, Cost Optimization Pillar, Resilience Pillar, Security Pillar
• Practice AWS CLI for multi-account scenarios, CloudFormation stack sets, cost estimation

Week 9–14: Practice exams

• Take 5–10 full Tutorials Dojo practice exams (timed, 180 min, under exam conditions)
• Review every incorrect answer; understand why each option is right/wrong
• Track performance by domain; re-study underperforming topics
• Aim for consistent 800+ scores on practice exams before attempting live exam

Week 15–16: Final review

• Review all ADRs (Architecture Decision Records) you've written in your job
• Re-watch Adrian Cantrill high-difficulty sections (multi-account, networking, migration)
• Mock exam day: take one final practice exam at exact exam time, same environment
• Skim AWS service release notes from past 6 months (new services rarely tested, but updated services appear)

Critical success factors:

• Hands-on labs: Don't just watch videos. Provision multi-account AWS environments, set up AWS Organizations, create Transit Gateway, configure Direct Connect, build DMS pipelines.
• Business context: SAP-C02 tests architectural thinking, not just AWS service knowledge. Understand the why behind decisions (cost vs. reliability vs. complexity tradeoff).
• Scenario-based focus: Exam questions are complex multi-part scenarios. Practice identifying business constraints, non-functional requirements, and hidden gotchas in question stems.

Sources

• AWS Certified Solutions Architect – Professional (Official Page)
• SAP-C02 Exam Guide PDF
• AWS Well-Architected Framework
• AWS Architecture Center — Reference Architectures
• Adrian Cantrill SAP-C02 Course
• Tutorials Dojo SAP-C02 Practice Exams
• AWS Certified Solutions Architect Professional Study Guide (SAP-C02) — Sybex/Wiley
• Robert Half 2026 Salary Guide
• Levels.fyi AWS Salary Data
• IT Jobs Watch — Cloud Architect (UK)

Last verified: 2026-05-01
Parent ecosystem: AWS Ecosystem
Parent domain: DOM09 — Architecture Domain
Vendor overview: AWS Vendor Overview