Training course

This is a free, self-paced reading course for SAP-C02: AWS Certified Solutions Architect – Professional, the senior architect credential for people who already ship real workloads on AWS and now have to design across many accounts, many Regions, and many teams at once. The associate exam asks whether you know what a service does. This one asks whether you know when to reach for it, when to leave it alone, and what breaks in the long run. Almost every question is a multi-paragraph scenario with four technically workable answers, and you are ranking them against stated constraints, cost, operational overhead, availability, security posture, time to value. That ranking discipline, not the service list, is what the course is built to teach.

The course is organized as one module per official exam domain, in the order AWS publishes them, and each module carries the domain’s published weight. On SAP-C02 those weights are lopsided in a way worth planning around: designing for organizational complexity and designing new solutions together account for 55% of the exam, so they get the bulk of the course. The other two domains lean hardest on operational experience rather than recall. Every lesson ends with its key terms and suggested further reading, so the course works as a reference on the second pass as well as a syllabus on the first.

SAP-C02 Professional level 4 modules Domain-weighted Self-paced Free account

What the course covers

Design Solutions for Organizational Complexity

Module 1 · 26%

Multi-account architecture, hybrid networking, federation, cross-account security controls, and enterprise-scale cost visibility. AWS Organizations, Control Tower, Transit Gateway, IAM Identity Center, service control policies, Direct Connect, and the cost-management stack rarely appear alone here. The exam puts them in the same scenario and asks which combination satisfies the constraint the business actually stated.

Design for New Solutions

Module 2 · 29%

The largest domain, and the one where the best-fit reasoning is tested most heavily. Greenfield architecture end to end: compute selection, storage and database choice, integration patterns, deployment strategy, business continuity, security controls, and cost optimization decided at design time rather than retrofitted afterwards.

Continuous Improvement for Existing Solutions

Module 3 · 25%

Operational excellence, security uplift, performance tuning, reliability improvements, and cost reduction on estates that are already running and cannot simply be rebuilt. Observability, automated response, right-sizing, migrations to purpose-built databases, and Well-Architected reviews live here.

Accelerate Workload Migration and Modernization

Module 4 · 20%

The seven Rs, portfolio analysis, and the AWS migration tooling: MGN, DMS, SCT, DataSync, Storage Gateway, and Snow. Then the modernization patterns that follow a lift-and-shift: containerize, refactor to serverless, adopt purpose-built databases, and introduce managed AI and ML where it earns its place rather than where it is merely available.

How to use it

Read a module, then take the matching portion of the SAP-C02 practice exam rather than saving every question for the end. On this exam the score matters less than the post-mortem: for each item you missed, decide whether you did not know the service behavior or whether you knew it and still ranked the options against the wrong constraint. Those are different problems with different fixes, and only the first one is solved by reading more. The second is solved by re-reading the scenario and finding the sentence that was doing the deciding. The course modules themselves open once you are signed in to a free Certifym account.

Nothing here substitutes for having lived with an AWS estate. The scenarios assume you have watched a migration slip, argued about a Transit Gateway topology, and seen what a NAT gateway does to a bill. Use the modules as a map of where your experience is thin, then go build in those places. For exam logistics (item count, the 180-minute window, the 750-of-1000 cut score, cost, and validity) see the SAP-C02 certification guide.

SAP-C02: AWS Certified Solutions Architect - Professional

One module per SAP-C02 exam domain, weighted the way AWS weights them.

A self-paced reading course for SAP-C02: AWS Certified Solutions Architect - Professional, the senior architect credential for people who already ship real workloads on AWS and now have to design across many accounts, many Regions, and many teams at once. The course is organized as one module per official exam domain, in the order AWS publishes them, and each module carries the domain's published weight, so the time you spend maps to the time the exam spends.

You work through designing for organizational complexity, designing new solutions, continuous improvement for existing solutions, and accelerating workload migration and modernization. Every lesson ends with its key terms and further reading, so the course keeps working as a reference on the second pass as well as a syllabus on the first.

SAP-C02 assumes associate-level AWS fluency, so the lessons do not spend their length explaining what a service does. They spend it on judgment: which combination of controls satisfies the constraint the business actually stated, what a recovery objective demands of the replication mechanism, when a second Region is justified and when it is an over-build, and which migration strategy survives the deadline. Certifym is an independent study publisher and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc.

Module 1: Design Solutions for Organizational Complexity 26% of exam

The domain about designing for an enterprise rather than a workload. You start with the account as the primary isolation boundary — AWS Organizations, organizational units, delegated administration, service control policies and resource control policies, and the landing zone that makes every new account arrive already governed. From there the material moves to identity: federation through IAM Identity Center, permission sets, attribute-based access control, and the cross-account trust patterns that let one account reach another safely.The second half is the network and the money. Hybrid connectivity with Direct Connect and Site-to-Site VPN and the resiliency tiers that go with them; Transit Gateway, Cloud WAN, and the route table design that expresses segmentation; DNS and PrivateLink across accounts; address planning with IPAM; centralized logging and detective controls; encryption and key management at organizational scale; and cost visibility, allocation, and commitment governance across many accounts.

1.1 Multi-account strategy and AWS Organizations 5 min Free preview
1.2 Service control policies, RCPs, and the permission evaluation chain 5 min 🔒
1.3 Landing zones, Control Tower, and governed account provisioning 5 min 🔒
1.4 Federation and IAM Identity Center at enterprise scale 5 min 🔒
1.5 Cross-account access patterns and trust design 5 min 🔒
1.6 Hybrid connectivity: Direct Connect, VPN, and resiliency models 5 min 🔒
1.7 Network topologies at scale: Transit Gateway, peering, and Cloud WAN 5 min 🔒
1.8 DNS across accounts, Regions, and on-premises 5 min 🔒
1.9 PrivateLink service publishing and IP address management 5 min 🔒
1.10 Centralized logging, audit, and detective controls 5 min 🔒
1.11 Encryption and key management across an organization 5 min 🔒
1.12 Enterprise cost visibility and allocation 5 min 🔒
1.13 Commitments, pricing models, and cost governance 5 min 🔒

Module 2: Design for New Solutions 29% of exam

The largest domain, and the one where best-fit reasoning is tested hardest. It opens with the design method itself — finding the deciding constraint in a long scenario and ranking four workable options against it — then works through business continuity, where recovery time and recovery point objectives map deterministically onto backup and restore, pilot light, warm standby, and multi-site designs, and onto the replication mechanism that delivers them.From there the material covers greenfield architecture end to end: compute selection across instances, containers, and functions; scaling and capacity design; storage and data lifecycle; relational and purpose-built databases; decoupling and event-driven integration; edge delivery and global routing; security architecture designed in rather than retrofitted; deployment and release architecture; analytics and streaming pipelines; cost decided at design time; and fault isolation, cells, and graceful degradation.

2.1 From requirements to ranking: the design method the exam tests 5 min 🔒
2.2 Business continuity: RTO, RPO, and the four disaster recovery strategies 6 min Free preview
2.3 Multi-Region architecture and data replication choices 5 min 🔒
2.4 Compute selection: instances, containers, and functions 5 min 🔒
2.5 Elasticity, scaling, and capacity design 5 min 🔒
2.6 Storage selection and data lifecycle 5 min 🔒
2.7 Relational database design: RDS, Aurora, and failover behavior 5 min 🔒
2.8 Purpose-built databases and access pattern design 5 min 🔒
2.9 Decoupling and event-driven integration 5 min 🔒
2.10 Edge delivery, global routing, and API entry points 5 min 🔒
2.11 Security architecture at design time 5 min 🔒
2.12 Deployment and release architecture 5 min 🔒
2.13 Analytics and streaming data pipeline design 5 min 🔒
2.14 Cost optimization decided at design time 5 min 🔒
2.15 Fault isolation, cells, and graceful degradation 5 min 🔒

Module 3: Continuous Improvement for Existing Solutions 25% of exam

Improvement work on estates that are already running and cannot simply be rebuilt. The module starts with the Well-Architected review as a way to produce a prioritized list rather than an opinion, then with observability, because you cannot safely change what you cannot measure. It covers event-driven operations and automated remediation, and the reliability work of finding single points of failure, fixing health checks and retries, and proving recovery instead of assuming it.The rest is tuning and hardening: compute performance and instance right-typing, database performance and in-place modernization, network and data transfer optimization, storage lifecycle and tiering, security posture uplift and least privilege on live workloads, patch and configuration management at scale with continuous compliance evidence, cost reduction that survives, and the operational process improvements and metrics that tell you whether any of it worked.

3.1 Well-Architected reviews and turning findings into a plan 5 min 🔒
3.2 Observability uplift: metrics, logs, traces, and alarms 5 min 🔒
3.3 Event-driven operations and automated remediation 5 min 🔒
3.4 Improving reliability on a running estate 5 min 🔒
3.5 Compute performance tuning and instance right-typing 5 min 🔒
3.6 Database performance and in-place modernization 5 min 🔒
3.7 Network performance and data transfer optimization 5 min 🔒
3.8 Storage optimization on running estates 5 min 🔒
3.9 Security posture uplift on existing workloads 5 min 🔒
3.10 Patch, configuration, and compliance management at scale 5 min 🔒
3.11 Cost reduction on running estates 5 min 🔒
3.12 Operational process improvement and measuring the result 5 min 🔒

Module 4: Accelerate Workload Migration and Modernization 20% of exam

Portfolio discovery and the seven Rs, then the programme mechanics: wave sequencing, landing zone readiness, the operating model, and the business case. The tooling follows — Application Migration Service for rehosting, DMS and Schema Conversion for databases including change data capture and short cutover windows, and DataSync, Storage Gateway, Transfer Family, and the Snow family for bulk and hybrid data movement.The module then covers the parts migrations actually fail on: network and address planning across the boundary, DNS and allow lists at cutover, the cutover window itself with entry criteria, validation by the people who can judge it, and a rollback that has been tested. It closes with modernization — containerizing and decomposing incrementally, moving to serverless and purpose-built stores where the case is specific, and adding managed analytics and AI only where a stated requirement justifies it.

4.1 Portfolio discovery and the seven Rs 5 min 🔒
4.2 Migration planning: waves, readiness, and the operating model 5 min 🔒
4.3 Rehosting servers with AWS Application Migration Service 5 min 🔒
4.4 Database migration with DMS and Schema Conversion 5 min 🔒
4.5 Moving large data sets: DataSync, Storage Gateway, Snow, and Transfer Family 5 min 🔒
4.6 Network migration and hybrid operation during a move 5 min 🔒
4.7 Cutover, validation, and rollback 5 min 🔒
4.8 Modernizing with containers and managed compute 5 min 🔒
4.9 Serverless and purpose-built modernization patterns 5 min 🔒
4.10 Analytics and managed AI in a modernized estate 5 min 🔒

Frequently asked questions about the SAP-C02 training course

Is the SAP-C02 training course free?

Yes. The course costs nothing to read and opens once you are signed in to a free Certifym account, no payment and no card.

How is the course structured?

One module per official SAP-C02 domain, in the order the AWS exam guide lists them, each weighted to its published percentage. Because the weights run from 20% to 29%, the first two modules are noticeably longer, that is deliberate, and it mirrors where the scored questions actually sit. Within each module the material is broken into short lessons, followed by key terms and further reading.

Does this replace AWS’s official training?

No. The AWS exam guide is the source of record for domains, weightings, and logistics, and AWS publishes its own preparation material alongside it. This course is an independent study companion written to be read quickly and paired with practice questions. It is not an AWS product and is not endorsed by AWS.

Do I need the associate certification first?

AWS does not require it. In practice most candidates come to SAP-C02 after the associate architect exam, because the professional exam assumes you already know what the services do and moves straight to trade-offs between them. If you cannot yet explain why a near-miss option fails a stated requirement, work through the SAA-C03 course before starting this one.

What should I do after finishing the course?

Move to the SAP-C02 practice exam and work through several sets rather than one. The useful signal is consistency across all four domains, a run that passes on organizational complexity and new solutions while sagging on migration is a run that would not survive a different exam form.

Is the course current with the latest SAP-C02 exam guide?

The course is built against the four-domain structure and the 26, 29, 25, and 20 percent weightings AWS publishes for SAP-C02. AWS revises exam guides periodically and re-versions the exam code when the change is large; confirm the current guide and weightings on the AWS Certification website before you schedule.

Trademark notice & independence. Certifym.net is operated by Certifym Exam Services, LLC and is not affiliated with, endorsed by, or sponsored by Amazon.com, Inc. or Amazon Web Services, Inc. AWS, Amazon Web Services, AWS Certified Solutions Architect – Professional, and SAP-C02 are trademarks of Amazon.com, Inc. or its affiliates. All references to these marks are made solely for the purpose of identifying the certification this study material prepares candidates for. The SAP-C02 exam guide and its domain structure are the property of Amazon Web Services, Inc.; candidates should download the official, current exam guide directly from the AWS Certification website and confirm current pricing and logistics there.

All course content, questions, explanations, and study material on this page are original content authored by Certifym Exam Services, LLC for study purposes. No AWS exam material has been used in their creation, and they are not represented as AWS training materials or examination questions. Studying with these materials does not guarantee a passing result on any live certification exam. Exam requirements, format, domain weights, pricing, and renewal policies are set by AWS and may change; always verify current details before scheduling your exam.