AWS Certified Solutions Architect - Professional Exam Prep

This domain covers designing AWS architectures that address complex organizational networking, security, resilience, multi-account governance, and cost visibility requirements. It emphasizes selecting appropriate AWS services and patterns to support hybrid connectivity, centralized control, disaster recovery, and cost optimization.

• Task 1.1: Architect network connectivity strategies
• AWS Global Infrastructure
• AWS networking concepts
• Task 1.2: Prescribe security controls
• AWS Identity and Access Management (IAM) and AWS IAM Identity Center
• Route tables, security groups, and network ACLs
• Task 1.3: Design reliable and resilient architectures

Key references: AWS SAP-C02 official exam guide · ExamPal shared topic tree

This domain covers designing new AWS solutions to meet business requirements for deployment, continuity, security, reliability, performance, and cost optimization. It emphasizes selecting services and patterns that support automation, resilience, least privilege, high availability, and efficient resource use.

• Task 2.1: Design a deployment strategy to meet business requirements
• Infrastructure as code (IaC)
• Continuous integration and continuous delivery (CI/CD)
• Task 2.2: Design a solution to ensure business continuity
• AWS Global Infrastructure
• AWS networking concepts
• Task 2.3: Determine security controls based on requirements

Key references: AWS SAP-C02 official exam guide · ExamPal shared topic tree

This domain covers improving existing AWS solutions over time, including optimization, refinement, and adaptation to changing business or technical needs. It focuses on iterative architectural changes that preserve or improve operational excellence, security, reliability, performance efficiency, and cost optimization.

• Task 3.1: Determine a strategy to improve overall operational excellence
• Alerting and automatic remediation strategies
• Disaster recovery planning
• Task 3.2: Determine a strategy to improve security
• Data retention, data sensitivity, and data regulatory requirements
• Automated monitoring and remediation strategies (for example, AWS Config rules)
• Task 3.3: Determine a strategy to improve performance

Key references: AWS SAP-C02 official exam guide · ExamPal shared topic tree

This domain covers selecting workloads for migration, choosing migration approaches, designing target architectures, and identifying modernization opportunities. It emphasizes AWS migration, networking, identity, governance, compute, storage, database, serverless, and integration services used to move and modernize existing workloads.

• Task 4.1: Select existing workloads and processes for potential migration
• Migration assessment and tracking tools (for example, AWS Migration Hub)
• Portfolio assessment
• Task 4.2: Determine the optimal migration approach for existing workloads
• Data migration options and tools (for example, AWS DataSync, AWS Transfer Family, AWS Snow Family, S3 Transfer Acceleration)
• Application migration tools (for example, AWS Application Discovery Service, AWS Application Migration Service)
• Task 4.3: Determine a new architecture for existing workloads

Key references: AWS SAP-C02 official exam guide · ExamPal shared topic tree