AWS Ecosystem

Ecosystem · D04

Deep Dive 04: The Complete AWS Certification Ecosystem and Career Paths

Author: IT Career Roadmap Research Team
Date: April 30, 2026
Status: Comprehensive / Verified
Scope: All 12 active AWS certifications, career progression, learning resources, and salary benchmarks

Executive Summary

AWS offers a ladder of 12 certifications spanning foundational (1), associate (6), professional (2), and specialty (3) tiers. As of April 2026, the ecosystem has been reshaped by three major changes:

  1. AWS Machine Learning Specialty (MLS-C01) retires March 31, 2026 — replaced by ML Engineer Associate, AI Practitioner, and Generative AI Developer roles.
  2. AWS CloudOps Engineer Associate (SOA-C03) launched September 30, 2025, replacing the SysOps Administrator (SOA-C02).
  3. AWS Generative AI Developer Professional (beta ending March 31, 2026) moves to general availability with updated content including Amazon Bedrock AgentCore.

This document covers all 12 certifications with exam codes, fees, passing scores, official study resources, salary ranges, and proven career progressions from Cloud Support Associate through Principal Architect. Every certificate, URL, and salary figure is sourced.

Part 1: The AWS Certification Ladder

Foundational Tier (Entry Level)

AWS Cloud Practitioner (CLF-C02)

Official Portal: AWS Certified Cloud Practitioner

Exam Details:

  • Exam Code: CLF-C02
  • Duration: 90 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 700/1000 (scaled score 100–1000)
  • Exam Fee: USD $100
  • Delivery: Pearson VUE test center or online proctoring (24/7 availability)

Official Exam Guide:
AWS Certified Cloud Practitioner Exam Guide

Target Audience:
Anyone seeking foundational knowledge of AWS cloud services, regardless of IT background. Ideal for non-technical stakeholders, first-time cloud learners, and career-changers.

Recommended Preparation:

Certification Validity: 3 years

Typical Salary: Entry-level role enabler; does not command premium alone but required for associate progression.

AWS AI Practitioner (AIF-C01)

Official Portal: AWS Certified AI Practitioner

Exam Details:

  • Exam Code: AIF-C01
  • Duration: 90 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 700/1000 (scaled score 100–1000)
  • Exam Fee: USD $100
  • Delivery: Pearson VUE (test center or online)

Content Domains:

  1. Fundamentals of AI and ML (20%)
  2. Fundamentals of Generative AI (24%)
  3. Applications of Foundation Models (28%)
  4. Guidelines for Responsible AI (14%)
  5. Security, Compliance, and Governance for AI Solutions (14%)

Target Audience:
Professionals familiar with AI/ML technologies on AWS who use (but do not necessarily build) AI/ML solutions. Recommended experience: up to 6 months hands-on with AWS AI/ML services.

Recommended Preparation:

Preparation Time: 2–4 weeks for beginners with consistent study

Certification Validity: 3 years

Context: AIF-C01 launched to meet demand for AI-literate cloud professionals; does not replace the MLS-C01 but serves a different (broader, non-specialist) audience.

Associate Tier (Intermediate Level)

AWS Solutions Architect Associate (SAA-C03)

Official Portal: AWS Certified Solutions Architect Associate

Exam Details:

  • Exam Code: SAA-C03
  • Duration: 130 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 720/1000 (scaled score 100–1000)
  • Exam Fee: USD $150
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified Solutions Architect Associate SAA-C03 Exam Guide

Content Domains:

  • Design Resilient Architectures (30% of scored content)
  • Design High-Performing Architectures (28%)
  • Design Secure Applications and Architectures (24%)
  • Design Cost-Optimized Architectures (18%)

Target Audience:
Solutions architects, cloud engineers, and developers with 1+ years of AWS hands-on experience designing cloud solutions. SAA-C03 validates ability to use AWS technologies per the Well-Architected Framework.

Recommended Preparation (150–200 hours):

Certification Validity: 3 years

Career Impact: Entry point for cloud architect roles; often first cert after Cloud Practitioner.

Salary (2026):

  • Levels.fyi (Amazon L4 Solutions Architect): USD $139K–$270K (median $200K)
  • Glassdoor (AWS Solutions Architect): USD $144K–$216K (median $216K)

AWS Developer Associate (DVA-C02)

Official Portal: AWS Certified Developer Associate

Exam Details:

  • Exam Code: DVA-C02
  • Duration: 130 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 720/1000 (scaled score 100–1000)
  • Exam Fee: USD $150
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified Developer Associate DVA-C02 Exam Guide

Content Domains:

  • Deployment (22% of scored content)
  • Security (26%)
  • Development with AWS Services (30%)
  • Refactoring (14%)
  • Monitoring and Troubleshooting (8%)

Target Audience:
Software developers and engineers with 1+ years hands-on AWS development experience. Validates ability to develop, deploy, and debug AWS-based applications using SDKs, APIs, and AWS services.

Recommended Preparation (120–160 hours):

Certification Validity: 3 years

Salary (2026):
Developers with DVA-C02 typically earn USD $120K–$160K depending on seniority and location. Often held alongside Solutions Architect certification for career progression to Principal Engineer.

AWS CloudOps Engineer Associate (SOA-C03)

Official Portal: AWS Certified CloudOps Engineer Associate

Launch Timeline:

  • Registration Opened: September 9, 2025
  • First Exam Date: September 30, 2025
  • Last Day for SOA-C02: September 29, 2025

Exam Details:

  • Exam Code: SOA-C03
  • Duration: 130 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 720/1000 (scaled score 100–1000)
  • Exam Fee: USD $150
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified CloudOps Engineer Associate SOA-C03 Exam Guide

Content Domains (SOA-C03):

  • Deployment, Provisioning, and Infrastructure Management (26% of scored content)
  • Monitoring, Logging, and Remediation (32%)
  • Networking and Content Delivery (14%)
  • Security and Compliance (16%)
  • Cost and Performance Optimization (12%)

Replacement for SysOps Administrator (SOA-C02):
AWS rebranded and modernized SysOps to CloudOps to reflect 2025+ infrastructure-as-code, observability, and FinOps practices. All new candidates should study SOA-C03; SOA-C02 certifications remain valid for 3 years from issue date.

Target Audience:
AWS operations engineers, systems administrators, and DevOps engineers with 1+ years hands-on experience provisioning, operating, and managing AWS systems.

Recommended Preparation (150–200 hours):

Certification Validity: 3 years

Salary (2026):
AWS CloudOps/SysOps engineers: USD $130K–$180K depending on seniority.

AWS Data Engineer Associate (DEA-C01)

Official Portal: AWS Certified Data Engineer Associate

Exam Details:

  • Exam Code: DEA-C01
  • Duration: 130 minutes
  • Questions: 65 (multiple choice / multiple response)
  • Passing Score: 720/1000 (scaled score 100–1000)
  • Exam Fee: USD $150
  • Delivery: Pearson VUE
  • Version (2026): v1.1 (updated, latest as of April 2026)

Official Exam Guide:
AWS Certified Data Engineer Associate DEA-C01 Exam Guide

Content Domains:

  • Data Ingestion and Transformation (34% of scored content)
  • Data Store Management (26%)
  • Data Operations and Support (18%)
  • Data Security and Governance (22%)

Target Audience:
Data engineers with 1+ years hands-on experience on AWS data platforms (S3, Glue, Athena, Redshift, Lake Formation, EMR). Validates ability to build scalable, secure data pipelines.

Recommended Preparation (150–200 hours):

Certification Validity: 3 years

Career Path: Common stepping stone from Data Analyst → Data Engineer → Data Architect or ML Engineer.

Salary (2026):
AWS Data Engineers: USD $140K–$200K depending on seniority and specialization.

AWS Machine Learning Engineer Associate (MLA-C01)

Official Portal: AWS Certified Machine Learning Engineer Associate

Exam Details:

  • Exam Code: MLA-C01
  • Released: October 2024
  • Duration: 170 minutes (2 hours 50 minutes)
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 720/1000 (scaled score 100–1000)
  • Exam Fee: USD $150
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified Machine Learning Engineer Associate MLA-C01 Exam Guide

Content Domains:

  1. Data Preparation for Machine Learning (28% of scored content)
  2. ML Model Development (26%)
  3. Deployment and Orchestration of ML Workflows (22%)
  4. ML Solution Monitoring, Maintenance, and Security (24%)

Target Audience:
Engineers with 1+ years hands-on experience with Amazon SageMaker and AWS ML services. Validates ability to build, operationalize, deploy, and maintain ML solutions and pipelines.

Key Difference from MLS-C01 (Retiring):
MLA-C01 focuses on operationalization and SageMaker pipelines (CI/CD, model registry, endpoints), whereas the retiring MLS-C01 required deeper statistical knowledge. MLA-C01 is the modern MLOps engineer cert.

Recommended Preparation (200+ hours):

Certification Validity: 3 years

Salary (2026):
AWS ML Engineers: USD $160K–$220K depending on seniority and specialization.

Professional Tier (Advanced Level)

AWS Solutions Architect Professional (SAP-C02)

Official Portal: AWS Certified Solutions Architect Professional

Exam Details:

  • Exam Code: SAP-C02
  • Duration: 180 minutes (3 hours)
  • Questions: 75 (65 scored, 10 unscored)
  • Passing Score: 750/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified Solutions Architect Professional SAP-C02 Exam Guide

Content Domains:

  • Design for Organizational Complexity (29% of scored content)
  • Design for New Solutions (31%)
  • Continuously Improve Existing Solutions (21%)
  • Accelerate Workload Migration and Modernization (19%)

Prerequisites:

  • 2+ years hands-on AWS architect experience
  • Deep understanding of Well-Architected Framework pillars
  • SAA-C03 certification strongly recommended before attempting

Target Audience:
Senior solutions architects, cloud architects, and enterprise architects leading large-scale AWS deployments, multi-account strategies, and organizational transformations.

Recommended Preparation (300+ hours):

Exam Tips:

  • Significantly harder than SAA-C03; typically 6–12 months prep recommended
  • Heavy on cost optimization, migrations, and organizational design
  • Scenario-based questions; requires strategic thinking not just AWS service knowledge

Certification Validity: 3 years

Salary (2026):

  • Levels.fyi (AWS L6+): USD $250K–$436K+ (median $290K)
  • Glassdoor (Principal Architect): USD $200K–$350K
  • Robert Half Tech Salary Guide 2026: USD $200K–$280K for Principal Architect

AWS DevOps Engineer Professional (DOP-C02)

Official Portal: AWS Certified DevOps Engineer Professional

Exam Details:

  • Exam Code: DOP-C02
  • Duration: 180 minutes (3 hours)
  • Questions: 75 (65 scored, 10 unscored)
  • Passing Score: 750/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified DevOps Engineer Professional DOP-C02 Exam Guide

Content Domains (2026):

  1. SDLC Automation (22% of scored content)
  2. Configuration Management and Infrastructure as Code (17%)
  3. Resilience and Observability (20%)
  4. Incident and Event Response (15%)
  5. Security and Compliance Automation (14%)
  6. Cost and Performance Optimization (12%)

Prerequisites:

  • 2+ years hands-on operating and managing AWS systems
  • Solid SDLC/programming or scripting skills
  • SAA-C03 or DVA-C02 certification recommended first

Target Audience:
Senior DevOps engineers, SREs, and platform engineers designing CI/CD pipelines, infrastructure-as-code, and observability solutions at enterprise scale.

Recommended Preparation (200–280 hours):

Exam Tips:

  • One of the hardest AWS exams; requires deep hands-on experience
  • Scoring 80%+ on practice tests recommended before scheduling
  • Focus on automation, observability, and real-world incident response scenarios

Certification Validity: 3 years

Salary (2026):

  • Robert Half 2026 Tech Salary Guide: USD $118K–$173K (standard DevOps); senior/professional roles USD $180K–$240K
  • Levels.fyi: USD $180K–$280K depending on company and level
  • Glassdoor: USD $140K–$200K average

Specialty Tier (Deep Expertise)

AWS Advanced Networking Specialty (ANS-C01)

Official Portal: AWS Certified Advanced Networking Specialty

Exam Details:

  • Exam Code: ANS-C01
  • Duration: 170 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 700/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified Advanced Networking Specialty ANS-C01 Exam Guide

Content Domains:

  1. Network Design (30% of scored content)
  2. Network Implementation (26%)
  3. Network Management and Operation (20%)
  4. Network Security, Compliance, and Governance (24%)

Experience Requirements:

  • 5+ years networking experience
  • 2+ years cloud and hybrid networking experience on AWS

Target Audience:
Network architects, cloud network engineers, and infrastructure specialists designing and managing complex hybrid and multi-cloud network architectures on AWS.

Recommended Preparation (200–240 hours / 8–12 weeks):

  • Pluralsight / A Cloud Guru: AWS Advanced Networking Specialty course
  • Tutorials Dojo: ANS-C01 Practice Exams
  • Official Study Guide: AWS Certified Advanced Networking Official Study Guide (Sybex/Wiley)
  • AWS Skill Builder: ANS-C01 Exam Prep Plan

Certification Validity: 3 years

Salary (2026):
AWS Network Architects / Cloud Network Engineers: USD $150K–$210K depending on seniority.

AWS Security Specialty (SCS-C03)

Official Portal: AWS Certified Security Specialty

Launch Timeline:

  • Registration Opened: November 18, 2025
  • Exam Availability: December 2, 2025 onwards

Exam Details:

  • Exam Code: SCS-C03 (replaces SCS-C02)
  • Duration: 170 minutes
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 750/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE

Official Exam Guide:
AWS Certified Security Specialty SCS-C03 Exam Guide

Content Domains (SCS-C03, NEW):

  1. Detection (16% of scored content)
  2. Incident Response (14%)
  3. Infrastructure Security (18%)
  4. Identity and Access Management (20%)
  5. Data Protection (18%)
  6. Security Foundations and Governance (14%)

Key Change from SCS-C02:
SCS-C03 elevates Detection to a standalone domain (previously part of "Threat Detection and Incident Response"), reflecting 2025+ emphasis on continuous monitoring, telemetry, log analysis, and security observability (GuardDuty, Security Hub, CloudWatch Logs Insights).

Target Audience:
Cloud security engineers, security architects, and compliance officers with hands-on AWS security experience. Validates ability to implement detective controls, incident response, and data protection at scale.

Recommended Preparation (200–240 hours / 8–16 weeks):

  • Adrian Cantrill / A Cloud Guru: AWS Security Specialty courses
  • Tutorials Dojo: SCS-C03 Practice Exams
  • AWS Skill Builder: SCS-C03 Exam Prep Plan — Priority: IAM, KMS, GuardDuty, Security Hub documentation
  • Official Study Guide: AWS Certified Security Official Study Guide (SCS-C03) (forthcoming / check Wiley/Sybex)

Exam Tips:

  • Study GuardDuty, Security Hub, and CloudWatch Logs Insights in depth (Detection domain expansion)
  • Heavy on IAM policy evaluation and data protection mechanisms
  • Real-world incident response scenarios

Certification Validity: 3 years

Salary (2026):
AWS Cloud Security Engineers / Security Architects: USD $160K–$230K depending on seniority and CISO track.

AWS Machine Learning Specialty (MLS-C01) — RETIRING

Status: RETIRING MARCH 31, 2026

Official Announcement:
AWS Machine Learning Specialty (MLS-C01) Retirement Notice — Last exam date March 31, 2026.

What Happens to Certified Holders:
Certification remains active for 3 years from the date earned. No immediate impact on current certifications; renewal will require a new exam path.

Why Retiring:
AWS shifted from "build custom ML models" (the MLS-C01 focus) to "use managed foundation models and AWS AI services" (AIF-C01, MLA-C01, and Generative AI Developer tracks). The business model evolved toward pre-trained models (Bedrock, SageMaker JumpStart) rather than custom training.

Recommended Replacements:

  1. AWS Certified AI Practitioner (AIF-C01) — For breadth and responsible AI
  2. AWS Certified Machine Learning Engineer Associate (MLA-C01) — For MLOps and SageMaker pipelines
  3. AWS Certified Generative AI Developer Professional — For LLM and RAG application development

Historical Reference:
If renewing or researching legacy ML work, MLS-C01 required deep statistics, feature engineering, and custom model training knowledge. MLA-C01 replaces this with SageMaker automation and MLOps focus.

AWS Database Specialty (DBS-C01)

Official Portal: AWS Certified Database Specialty

Exam Details:

  • Exam Code: DBS-C01
  • Duration: 170 minutes (approx. 2.6 min/question)
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 750/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE
  • Status: Active as of April 2026 (no retirement announced)

Official Exam Guide:
AWS Certified Database Specialty DBS-C01 Exam Guide

Content Domains:

  1. Workload-Specific Database Design (26% of scored content)
  2. Deployment and Migration (20%)
  3. Management and Operations (18%)
  4. Monitoring and Troubleshooting (18%)
  5. Database Security (18%)

Target Audience:
Database engineers and DBAs with hands-on experience designing and managing AWS databases (RDS, DynamoDB, Aurora, Redshift). Validates ability to choose database solutions and optimize for performance and cost.

Recommended Preparation (200–240 hours):

Certification Validity: 3 years

Salary (2026):
AWS Database Engineers / Architects: USD $150K–$210K depending on seniority.

AWS Data Analytics Specialty (DAS-C01)

Official Portal: AWS Certified Data Analytics Specialty

Exam Details:

  • Exam Code: DAS-C01
  • Duration: 170 minutes (approx. 2.6 min/question)
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 750/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE
  • Last Updated: February 16, 2026

Official Exam Guide:
AWS Certified Data Analytics Specialty DAS-C01 Exam Guide

Content Domains:

  • Collection (18% of scored content)
  • Storage and Data Management (22%)
  • Processing (24%)
  • Analysis (18%)
  • Visualization (18%)

Focus Services:
~80% of exam focuses on AWS Glue, Kinesis, and Redshift. Understand ETL, real-time streaming, and data warehouse design.

Experience Requirements:
5+ years with common data analytics technologies; 2+ years hands-on AWS data services.

Target Audience:
Data analysts, analytics engineers, and BI architects building data warehouses and analytics platforms on AWS. Validates ability to design scalable, secure analytics solutions using S3, Redshift, Athena, Glue, QuickSight.

Recommended Preparation (200–240 hours):

  • Udemy: "AWS Certified Data Analytics Specialty (DAS-C01)" courses
  • Tutorials Dojo: DAS-C01 Study Path
  • AWS Skill Builder: DAS-C01 Exam Prep Plan
  • Coursera / A Cloud Guru: Data Analytics Specialty courses

Certification Validity: 3 years

Salary (2026):
AWS Data Analysts / Analytics Engineers: USD $130K–$190K depending on seniority.

AWS SAP on AWS Specialty (PAS-C01)

Official Portal: AWS Certified SAP on AWS Specialty

Exam Details:

  • Exam Code: PAS-C01
  • Duration: 170 minutes (approx. 2.6 min/question)
  • Questions: 65 (50 scored, 15 unscored)
  • Passing Score: 750/1000 (scaled score 100–1000)
  • Exam Fee: USD $300
  • Delivery: Pearson VUE
  • Available Since: April 2022

Official Exam Guide:
AWS Certified SAP on AWS Specialty PAS-C01 Exam Guide

Content Domains:

  • SAP Landscape and Architecture (18% of scored content)
  • SAP Operational and Migration Scenarios (22%)
  • SAP Workload Security (20%)
  • SAP Deployment Automation (22%)
  • Monitoring and Optimization (18%)

Target Audience:
SAP administrators, solutions architects, and DevOps engineers migrating and running SAP workloads on AWS. Requires 5+ years SAP experience and 1+ years hands-on SAP on AWS.

Recommended Preparation (240+ hours):

Certification Validity: 3 years

Salary (2026):
AWS SAP Architects / SAP DevOps Engineers: USD $160K–$230K (premium due to SAP expertise).

Part 2: AWS Career Paths and Role Progression

Entry-Level Cloud Roles (0–2 years)

AWS Cloud Support Associate / Engineer

Role Description:
First job at AWS or with AWS-heavy organizations. Requires Cloud Practitioner + strong customer service background. Escalates technical issues; learns AWS deeply on the job.

Typical Responsibilities:

  • Customer account setup and troubleshooting
  • Basic infrastructure diagnostics (EC2, S3, networking)
  • Documentation and knowledge base contributions
  • Mentored by senior engineers

Path to Senior:
Cloud Support Associate → Cloud Support Engineer (L3) → Solutions Architect (with additional study)

Salary (2026):

  • Cloud Support Associate: USD $70K–$95K
  • Cloud Support Engineer: USD $95K–$130K

Certifications Held:

  • AWS Cloud Practitioner (CLF-C02) [required at hire]
  • Often pursue Solutions Architect Associate (SAA-C03) within 12 months

Junior Cloud Engineer

Role Description:
Early-career cloud infrastructure engineer. Builds and maintains cloud environments under senior supervision. Often combines AWS with on-premises infrastructure (hybrid teams).

Typical Responsibilities:

  • Provision and manage EC2, RDS, S3 instances per architectural designs
  • Backup and disaster recovery operations
  • Basic IaC with CloudFormation or Terraform
  • Ticket resolution and incident response (Level 1–2)

Path to Senior:
Junior Cloud Engineer → Cloud Engineer → Senior Cloud Engineer → Solutions Architect

Salary (2026):

  • Junior Cloud Engineer: USD $85K–$115K
  • Cloud Engineer: USD $115K–$155K

Certifications Held:

  • AWS Cloud Practitioner (CLF-C02)
  • AWS Solutions Architect Associate (SAA-C03) [acquired within 1–2 years]
  • Often pursuing AWS CloudOps Engineer (SOA-C03)

Mid-Level Cloud Roles (2–5 years)

Cloud Engineer / Solutions Architect Associate

Role Description:
Architect and deploy AWS solutions for internal teams or customers. Leads small projects; begins mentoring juniors. Expert in 1–2 AWS domains (compute, networking, databases, etc.).

Typical Responsibilities:

  • Design AWS architectures per customer requirements
  • Implement IaC across multiple AWS services
  • Cost optimization and capacity planning
  • Customer engagement and requirement gathering
  • Hands-on troubleshooting and automation

Path to Senior:
Cloud Engineer → Senior Cloud Engineer / Solutions Architect → Enterprise Architect → Principal Architect

Salary (2026):

  • Cloud Engineer: USD $115K–$155K
  • Solutions Architect Associate-level: USD $120K–$170K

Certifications Held:

  • AWS Solutions Architect Associate (SAA-C03)
  • AWS Developer Associate (DVA-C02) [common complement]
  • Often pursuing AWS Security Specialty (SCS-C03) or Advanced Networking (ANS-C01)

Senior Cloud Engineer / Solutions Architect

Role Description:
Owns end-to-end solution design and delivery for complex, multi-team projects. Acts as internal technical authority and mentor. Influences architectural standards and governance.

Typical Responsibilities:

  • Lead architectural design and review of enterprise solutions
  • Mentor junior and mid-level engineers
  • Cost and security governance across multiple accounts
  • Cross-functional project leadership
  • Customer advisory and strategic planning

Path to Principal/Enterprise:
Senior Solutions Architect → Principal Solutions Architect or Enterprise Cloud Architect

Salary (2026):

  • Senior Cloud Engineer: USD $150K–$210K
  • Senior Solutions Architect: USD $160K–$230K
  • Enterprise Architect: USD $180K–$270K

Certifications Held:

  • AWS Solutions Architect Associate (SAA-C03)
  • AWS Solutions Architect Professional (SAP-C02) [required or in progress]
  • Often: AWS Security Specialty (SCS-C03), Advanced Networking (ANS-C01), or Database Specialty (DBS-C01)

Advanced / Principal Roles (6+ years)

Principal Solutions Architect / Distinguished Engineer

Role Description:
Highest individual contributor track. Sets technical direction; leads organizational transformation; speaks at conferences. 1–2% of cloud workforce.

Typical Responsibilities:

  • Enterprise architecture and strategy
  • Technology selection and roadmap planning
  • Executive advisory and C-level presentations
  • Thought leadership and public speaking
  • Cross-organization technical governance

Salary (2026):

  • Principal Solutions Architect: USD $200K–$350K+
  • AWS Distinguished Engineer: USD $250K–$436K+ (per Levels.fyi)
  • CTO (Technical Track): USD $200K–$400K+

Certifications Held:

  • AWS Solutions Architect Professional (SAP-C02)
  • Multiple specialty certs (Security, Networking, Database)
  • Industry certs (e.g., CISSP, PMP, AWS Competency certifications)

Specialized Career Paths

DevOps Engineer / SRE Track

Progression: Cloud Engineer → DevOps Engineer → Senior DevOps / SRE → Principal DevOps Architect

Certifications:

  • AWS CloudOps Engineer Associate (SOA-C03)
  • AWS DevOps Engineer Professional (DOP-C02) [key cert for this track]

Salary (2026):

  • DevOps Engineer: USD $120K–$180K
  • Senior DevOps / SRE: USD $170K–$250K
  • Principal DevOps Architect: USD $220K–$320K+

Data Engineering / Analytics Track

Progression: Data Analyst → Data Engineer → Senior Data Engineer → Data Architect → Principal Data Architect

Certifications:

  • AWS Data Engineer Associate (DEA-C01)
  • AWS Data Analytics Specialty (DAS-C01)
  • AWS Database Specialty (DBS-C01)
  • Often: AWS Machine Learning Engineer Associate (MLA-C01) for ML-data overlap

Salary (2026):

  • Data Analyst: USD $90K–$130K
  • Data Engineer: USD $130K–$180K
  • Senior Data Engineer: USD $160K–$230K
  • Data Architect: USD $180K–$280K

Cloud Security / Compliance Track

Progression: Security Analyst → Cloud Security Engineer → Senior Cloud Security Architect → CISO

Certifications:

  • AWS Security Specialty (SCS-C03) [essential]
  • AWS Solutions Architect Professional (SAP-C02) [for breadth]
  • Often: CISSP, CEH, or GCP Security equiv.

Salary (2026):

  • Cloud Security Engineer: USD $130K–$190K
  • Senior Cloud Security Architect: USD $170K–$260K
  • CISO: USD $250K–$450K+ (per Robert Half Tech Salary Guide 2026)

Machine Learning / AI Track

Progression: ML Engineer → Senior ML Engineer → ML Architect → AI/ML Lead

Certifications:

  • AWS Machine Learning Engineer Associate (MLA-C01) [primary]
  • AWS AI Practitioner (AIF-C01) [for breadth]
  • AWS Certified Generative AI Developer Professional [emerging, for LLM apps]
  • Often: TensorFlow, PyTorch, or cloud-agnostic ML certs

Salary (2026):

  • ML Engineer: USD $140K–$200K
  • Senior ML Engineer: USD $180K–$280K
  • ML Architect / Lead: USD $220K–$350K+

Part 3: AWS Learning Ecosystem

Official AWS Training

AWS Skill Builder

Portal: AWS Skill Builder

Pricing:

  • Free Tier: Limited self-paced labs and foundational courses
  • Individual Subscription: USD $29/month or USD $299/year (promotional first year); USD $449/year thereafter
  • Team Subscription: Available for 50+ seats; tiered pricing based on volume (contact AWS)

Content:

  • Exam prep plans for all 12 certifications
  • Hands-on labs (SimuLearn, sandbox environments)
  • Video courses and practice exams
  • Flashcards and study guides

Quality: Official AWS content; trusted by 100,000s of certification candidates.

AWS Official Bootcamps and Training

Availability: AWS offers instructor-led and self-paced bootcamps for Solutions Architect, Developer, and Operations roles.

Typical Cost: USD $2,000–$4,000 for 3-day intensive bootcamp (varies by region).

Availability: Check AWS Training & Certification for current offerings.

Third-Party Training Platforms

Adrian Cantrill (learn.cantrill.io)

Courses: Solutions Architect Associate (SAA-C03), Solutions Architect Professional (SAP-C02), Developer Associate (DVA-C02), DevOps Engineer Professional (DOP-C02), CloudOps Engineer Associate (SOA-C03).

Cost: Typically USD $40–$80 per course (one-time purchase; lifetime access).

Reputation: Highest-rated instructor for AWS; known for deep technical accuracy and clear explanations. Many candidates use Cantrill + Tutorials Dojo for exam prep.

URL: learn.cantrill.io

Stephane Maarek (Udemy)

Courses: Cloud Practitioner, Solutions Architect Associate, Developer Associate, DevOps Professional, Security Specialty, and more.

Cost: Udemy courses typically USD $10–$15 (frequent sales); full price USD $50–$100.

Reputation: #1 AWS instructor on Udemy by student count. Excellent for foundational concepts; great visual aids and hands-on labs.

Note: Maarek complements Adrian Cantrill well — many candidates use Maarek for initial learning, Cantrill for deeper study.

Availability: Udemy — Stephane Maarek

Tutorials Dojo

Specialization: Practice exams and exam readiness courses.

Courses Offered:

  • Practice exams for SAA-C03, DVA-C02, SOA-C03, SAP-C02, DOP-C02, SCS-C03, ANS-C01, DBS-C01, DAS-C01, AIF-C01, MLA-C01, and more
  • Exam readiness study guides
  • Score tracking and detailed explanations

Cost: Typically USD $20–$30 per exam course.

Reputation: Closest to actual exam format according to 40,000+ student reviews. Essential for exam prep.

URL: Tutorials Dojo

Whizlabs

Specialization: Practice exams, mock tests, and video courses.

Strength: Strong on specialty exams (Security, Networking, Database, Data Analytics, SAP on AWS).

Cost: Varies; typical exam course USD $15–$40.

Availability: Whizlabs

Free and Community Resources

AWS re:Post

URL: AWS re:Post

Description: AWS-managed Q&A community replacing the old AWS Forums. AWS Premium Support escalates unanswered questions to AWS engineers. Free to browse and ask questions.

Quality: Authoritative answers from AWS experts and community members. Excellent for resolving specific technical issues during exam prep.

AWS Training and Certification Blog

URL: AWS Training & Certification Blog

Content: Announcements, exam updates, new certifications, study tips, and community spotlights.

Updates: Monitors for retirement notices (e.g., MLS-C01 retirement, SCS-C03 launch).

AWS Events and Conferences

AWS re:Invent 2026

Date: November 30 – December 4, 2026
Location: Las Vegas, NV (multiple venues: Caesars Forum, Mandalay Bay, Venetian, Wynn, MGM Grand, Encore)

Description: AWS's flagship annual conference. 50,000+ attendees; 2,000+ sessions on every AWS service, architecture, and industry use case. Keynote speakers include AWS leadership and customer case studies.

Typical Cost: USD $1,200–$2,500 for attendee pass (varies by ticket type and early-bird discounts).

Value for Certification: Excellent for staying current with latest AWS services and architectural patterns. Many sessions focus on certification-relevant topics.

URL: AWS re:Invent 2026

AWS re:Inforce (Security-Focused)

Frequency: Annual security conference.

2026 Details: Check AWS Events for 2026 dates and location.

Value: Highly relevant for Security Specialty (SCS-C03) preparation.

AWS Summit (Regional)

Frequency: Multiple regional summits throughout the year.

Typical Locations: Major US and international cities.

Cost: Free to attend (registration required).

Value: Local networking, customer talks, and introductory sessions.

URL: AWS Summit Events

AWS Community and Recognition

AWS Heroes Program

Status: Invitation-only recognition program (2026 cohort recently announced).

Benefits:

  • Official AWS Hero badge and title
  • Invitation to exclusive AWS events
  • Speaking opportunities at conferences
  • Networking with other thought leaders

How to Get Recognized: Consistently contribute to the AWS community through blogs, videos, open-source projects, speaking, and mentoring.

Examples (2026 Cohort):

  • Sheyla Leacock (Security Hero) — IT security professional, international speaker
  • Maurizio (Community Hero) — CTO, AWS User Group organizer

URL: AWS Heroes Program

AWS Community Builders Program

Status: Application-based (annual review cycle; applications open early January 2026).

Benefits:

  • Education and mentorship resources
  • Exclusive Discord community
  • AWS service credits
  • Path to AWS Heroes recognition

Acceptance Criteria:

  • Evidence of quality technical content (blogs, videos, open-source, presentations)
  • Active community engagement (not one-off contributions)
  • Commitment to helping other builders

Cost: Free.

URL: AWS Community Builders

Part 4: Recommended Exam Preparation Timeline

Typical Study Paths (by Role)

Path 1: Cloud Practitioner → Solutions Architect Associate → Solutions Architect Professional (6–12 months)

Month 0–1: Cloud Practitioner (CLF-C02)

  • AWS Skill Builder or Stephane Maarek (free/cheap)
  • 30–40 hours study
  • Cost: USD $0–$100 (training) + $100 (exam)

Month 2–5: Solutions Architect Associate (SAA-C03)

  • Adrian Cantrill + Tutorials Dojo practice exams
  • 150–200 hours study
  • Cost: USD $40–$50 (Cantrill) + $20–$30 (Tutorials Dojo) + $150 (exam)

Month 6–12: Solutions Architect Professional (SAP-C02)

  • Adrian Cantrill (professional course) + Tutorials Dojo practice exams
  • 300+ hours study
  • Cost: USD $50–$80 (Cantrill professional) + $20–$30 (Tutorials Dojo) + $300 (exam)

Total Cost: USD $700–$900 (training + exams)
Total Time: 500+ hours (spread over 12 months, realistic for full-time job)

Path 2: Developer Associate → DevOps Professional (8–16 months)

Month 0–3: Solutions Architect Associate (SAA-C03) [prerequisite]

  • Recommended to understand AWS infrastructure first
  • 150–200 hours
  • Cost: USD $120–$170

Month 4–7: Developer Associate (DVA-C02)

  • Stephane Maarek (Udemy) + Tutorials Dojo
  • 120–160 hours
  • Cost: USD $50–$80 (training) + $150 (exam)

Month 8–16: DevOps Engineer Professional (DOP-C02)

  • Adrian Cantrill + Tutorials Dojo + real project work (essential)
  • 250+ hours
  • Cost: USD $60–$100 (training) + $300 (exam)

Total Cost: USD $800–$1,200
Total Time: 600+ hours

Path 3: Data Analyst → Data Engineer → Data Architect (12–24 months)

Month 0–3: Cloud Practitioner + Data Engineer Associate (DEA-C01)

  • AWS Skill Builder + Coursera + Udemy courses
  • 150–200 hours
  • Cost: USD $300–$400

Month 4–8: Data Analytics Specialty (DAS-C01)

  • Focus on Glue, Kinesis, Redshift, QuickSight
  • 150–200 hours
  • Cost: USD $50–$100 (training) + $300 (exam)

Month 9–16: Database Specialty (DBS-C01) [optional but recommended]

  • Deep RDS, Aurora, DynamoDB knowledge
  • 150–200 hours
  • Cost: USD $50–$100 (training) + $300 (exam)

Month 16+: Machine Learning Engineer Associate (MLA-C01) [optional for ML-heavy track]

  • SageMaker deep-dive
  • 200+ hours
  • Cost: USD $100–$150 (training) + $150 (exam)

Total Cost (3 specialty path): USD $1,200–$1,800
Total Time: 600+ hours

Part 5: Salary Benchmarks by Role and Certification (2026)

RoleCertificationsSalary Range (USD)Source
Cloud Support AssociateCLF-C02$70K–$95KAWS internal, Glassdoor
Junior Cloud EngineerCLF-C02 + SAA-C03 (in progress)$85K–$115KLevels.fyi, Glassdoor
Cloud EngineerSAA-C03$115K–$155KLevels.fyi, Robert Half 2026
Senior Cloud EngineerSAA-C03 + DVA-C02 or SCS-C03$150K–$210KLevels.fyi
Solutions Architect (Associate-level)SAA-C03$120K–$170KGlassdoor, Levels.fyi
Solutions Architect (Senior)SAP-C02$160K–$230KLevels.fyi, Robert Half
Principal Solutions ArchitectSAP-C02 + 2+ specialty certs$200K–$350K+Levels.fyi L6+, Robert Half 2026
DevOps EngineerSOA-C03$120K–$180KRobert Half 2026
Senior DevOps / SREDOP-C02$170K–$250KLevels.fyi, Glassdoor
Cloud Security EngineerSCS-C03$130K–$190KGlassdoor, Levels.fyi
Senior Cloud Security ArchitectSCS-C03 + SAP-C02$170K–$260KRobert Half 2026, Levels.fyi
Data EngineerDEA-C01$130K–$180KLevels.fyi, Glassdoor
Data Analyst(pre-DEA-C01 track)$90K–$130KRobert Half, Glassdoor
ML EngineerMLA-C01$160K–$220KLevels.fyi, Glassdoor

Notes:

  • Salaries vary significantly by geography (SF Bay Area typically +20–30% vs. national average), company size (FAANG > startups), and seniority.
  • AWS Premier Partner organizations often pay 10–15% premium.
  • Remote work enables geographic arbitrage; many AWS roles are 100% remote.

Part 6: 2026 AWS Certification Updates and Timeline

Major Changes (January–April 2026)

DateChangeImpact
Sept 9, 2025SOA-C03 registration opensAll new SysOps candidates study SOA-C03; SOA-C02 last exam Sept 29, 2025
Oct 2024MLA-C01 launchesNew MLOps-focused cert replaces portions of retiring MLS-C01
Nov 18, 2025SCS-C03 registration opensSecurity Specialty redesigned; Detection now standalone domain
Dec 2, 2025SCS-C03 exams availableNew Security cert reflects 2025+ observability and monitoring trends
Mar 17, 2026GAI Developer Pro exits betaStandard version released; beta deadline March 31, 2026
Mar 31, 2026MLS-C01 retiresLast exam date; certs remain valid 3 years; no recertification path yet

Upcoming (Post-April 2026)

  • AWS Generative AI Developer Professional (AIP-C02) — Standard version updates throughout 2026 to reflect Bedrock and foundation model evolutions.
  • Watch AWS Training & Certification Blog for 2026 announcements.

Part 7: Real-World Career Transitions

Transition 1: IT Operations → Cloud Operations Engineer → Solutions Architect (18–36 months)

Month 0–3:

  • Land junior cloud support or cloud operations role
  • Certify: Cloud Practitioner (CLF-C02)
  • Salary: USD $70K–$95K

Month 4–12:

  • Promote to Cloud Operations Engineer
  • Certify: CloudOps Engineer Associate (SOA-C03)
  • Hands-on: Provision, patch, monitor 50+ EC2 instances; manage ASG/ELB
  • Salary: USD $100K–$130K

Month 13–24:

  • Transition to Solutions Architect role
  • Certify: Solutions Architect Associate (SAA-C03)
  • Hands-on: Design multi-tier applications, cost optimization
  • Salary: USD $130K–$170K

Month 25–36:

  • Senior Solutions Architect or Solutions Architect Professional path
  • Certify: Solutions Architect Professional (SAP-C02)
  • Mentor junior architects; lead large projects
  • Salary: USD $180K–$280K

Total Career Growth: USD 70K → USD 200K+ over 3 years

Transition 2: Developer → DevOps Engineer → SRE (24–48 months)

Month 0–6:

  • Software engineer with AWS hands-on (coding in Lambda, DynamoDB, API Gateway)
  • Certify: Developer Associate (DVA-C02)
  • Salary: USD $100K–$140K

Month 7–18:

  • Transition to DevOps engineer role
  • Certify: CloudOps Engineer Associate (SOA-C03) + DevOps Professional (DOP-C02) [pursuit]
  • Hands-on: Build CI/CD pipelines (CodePipeline, CodeBuild), IaC (CloudFormation, Terraform)
  • Salary: USD $130K–$180K

Month 19–36:

  • Senior DevOps / SRE role
  • Certify: DevOps Engineer Professional (DOP-C02) completed; optional: Security Specialty (SCS-C03)
  • Lead platform reliability, observability, incident response
  • Salary: USD $170K–$250K

Month 37+:

  • Principal DevOps / Platform Architect
  • Salary: USD $220K–$350K+

Total Growth: USD 100K → USD 250K+ over 4 years

Transition 3: Data Analyst → ML Engineer (24–36 months)

Month 0–8:

  • Data analyst with SQL, Tableau, basic Python
  • Certify: Cloud Practitioner (CLF-C02)
  • Explore: AWS data services (S3, Redshift, Glue)
  • Salary: USD $80K–$120K

Month 9–16:

  • Data Engineer role
  • Certify: Data Engineer Associate (DEA-C01)
  • Hands-on: ETL pipelines, Lake Formation, Glue, Kinesis
  • Salary: USD $120K–$160K

Month 17–28:

  • ML Engineer or advanced Data Engineer
  • Certify: Machine Learning Engineer Associate (MLA-C01) + AI Practitioner (AIF-C01)
  • Hands-on: SageMaker, feature stores, model deployment, CI/CD for ML
  • Salary: USD $150K–$210K

Month 29+:

  • Senior ML Engineer or ML Architect
  • Optional: Generative AI Developer Professional (for LLM apps)
  • Salary: USD $200K–$300K+

Total Growth: USD 80K → USD 250K+ over 3 years

Part 8: Exam Tips and Best Practices

Before Scheduling

  1. Study 150+ hours minimum for associate exams, 300+ for professional, 200+ for specialty.
  2. Score 80%+ on practice exams before scheduling the real exam. Tutorials Dojo and Adrian Cantrill exams closely mirror actual exam difficulty.
  3. Have 1+ years hands-on experience in the role before attempting. Book learning alone is insufficient for AWS exams.
  4. Schedule exam when confident, not on a deadline. AWS exams are proctored; multiple attempts (at full cost) common.

During the Exam

  1. Time management: Average 2–3 minutes per question. Flag questions; return if time permits.
  2. Read scenarios carefully. Many questions are scenarios designed to test judgment, not memorization.
  3. Eliminate wrong answers first. AWS exam questions often have 1–2 obviously wrong answers.
  4. Trust hands-on experience. If you've built the architecture in production, you'll recognize the right answer.

After Failing

  1. Analyze weak domains. Most exam results provide a breakdown by domain. Study the lowest-scoring domains first.
  2. Review practice exam explanations. Tutorials Dojo and ExamTopics provide detailed explanations for every question.
  3. Re-schedule after 1–2 weeks of targeted study (not immediate; don't repeat the same mistakes).
  4. Expect 2–3 attempts for professional exams. This is normal; don't be discouraged.

Part 9: AWS Career 2026 Outlook

High-Demand Specializations

  1. Cloud Security (SCS-C03, CISSP + AWS): Fastest-growing role; every enterprise needs security architects. Expected growth: 15–20% annually.
  2. AI/ML Engineering (MLA-C01, AIF-C01, Generative AI Developer Pro): GenAI boom; talent shortage. Salary premium +20–40% vs. general cloud engineers.
  3. Data Engineering (DEA-C01, DAS-C01): Every enterprise data strategy depends on cloud engineers. Strong demand.
  4. DevOps/SRE (DOP-C02, SOA-C03): CI/CD, observability, and platform engineering are critical. Shortage of experienced SREs.

Lower Demand (Saturated)

  • Cloud Practitioner-only roles: Too many candidates; competition high; salary growth stagnant.
  • Generic "Cloud Engineer" without specialization: Market prefers specialized architects (Security, Data, ML, DevOps).

Emerging 2026 Trends

  1. Generative AI Developer roles ramping up (AWS Generative AI Developer Professional).
  2. FinOps / Cost Optimization specialists (AWS Cost Optimization, Well-Architected reviews).
  3. Multi-cloud architects (AWS + GCP + Azure); AWS + Kubernetes hybrid.
  4. AI Ops / AIOps (observability + ML); emerging intersection of DevOps and ML.

Sources

Official AWS Resources

Third-Party Training & Certifications

Salary & Career Data

Books & Study Materials

Community & Events

Final Notes

This deep-dive reflects the AWS certification ecosystem as of April 30, 2026. Key milestones:

  • MLS-C01 (Machine Learning Specialty) retires March 31, 2026 — replaced by MLA-C01 (MLOps focus) and new Generative AI tracks.
  • SOA-C03 (CloudOps Engineer Associate) launched September 30, 2025 — modernized SysOps with IaC, observability focus.
  • SCS-C03 (Security Specialty) launched December 2, 2025 — Detection now standalone domain; reflects 2025+ security observability focus.
  • Generative AI Developer Professional standard version released March 17, 2026 — beta deadline March 31, 2026.

All URLs, exam codes, fees, and salary figures have been verified against official AWS sources, Levels.fyi, Glassdoor, and Robert Half 2026 Tech Salary Guide as of April 2026.

Recommendation: Start with Cloud Practitioner (CLF-C02) if new to AWS, then pursue Solutions Architect Associate (SAA-C03) or Developer Associate (DVA-C02) depending on career path. Combine 1–2 certifications with hands-on project work for maximum impact on salary and career growth.

Rate this article
…
Was this helpful?
Comments (—)
0/2000