SAA-C0330% of the exam
Design Secure Architectures
Secure access to AWS resources, secure workloads and applications, and the right data security controls for a given requirement.
What this domain is worth
Amazon Web Services publishes this domain at 30% of SAA-C03. On a 50-question scored exam that is roughly 15 questions. It is the heaviest of the 4 domains, which is why our mock exams allocate questions by weight rather than evenly.
What it covers
IAM and access control
3Roles, policies, federation, permission boundaries and cross-account access.
Practise IAM and access control →Network security
3Security groups, NACLs, VPC endpoints, WAF, Shield and private connectivity.
Practise Network security →Data protection
3Encryption at rest and in transit, KMS key policies, secrets management and certificates.
Practise Data protection →Governance and audit
2Organizations, SCPs, CloudTrail, Config and multi-account guardrails.
Practise Governance and audit →