AWS SAA-C03 in 8 weeks: a study plan that actually works

Eight weeks is the sweet spot for SAA-C03 if you've already got some AWS exposure — say a year of production work, or six months of side-project tinkering. Less than that and you're cramming. More than that and you forget the early stuff before exam day. I've watched a dozen people pass on this schedule and a handful fail; the failures all skipped the same parts. So here's the plan, plus the parts you should not skip.

Quick framing: the SAA-C03 is 65 questions, 130 minutes, $150, and the passing scaled score is 720/1000. Four domains, with security weighted heaviest at 30%. AWS doesn't publish pass rates but the community consensus is roughly 60–65% first-attempt. Eight weeks at 8–10 hours a week is enough if you spend the time on the right things.

Week 1: orientation, not memorization

Don't open Tutorials Dojo yet. Don't buy a course. Read the official AWS exam guide PDF cover to cover — yes, the boring 10-page one. It tells you the four domains, the weights, and the in-scope services list. Most candidates skip this and end up studying things that aren't on the exam.

Then spin up an AWS Free Tier account if you don't have one and click through the console for VPC, EC2, S3, RDS, IAM. The goal this week is a mental map, not knowledge. You should be able to find the security group setting on an EC2 instance without Googling.

If you're brand new to AWS, push the timeline to 12 weeks and start with CLF-C02 prep instead. Trying to do SAA-C03 with zero AWS background in 8 weeks is how people fail.

Weeks 2–3: compute, networking, storage

This is the core. Pick one course — Adrian Cantrill if you have time and want depth, Stephane Maarek if you want speed, AWS Skill Builder's official learning path if you prefer the source. Don't do all three. Pick one and finish it.

Week 2 is compute and networking. EC2 instance families (you don't need every code, but know the families: T for burstable, M general, C compute, R memory, I storage). Auto Scaling Groups, ALB vs NLB vs Gateway LB. VPC, subnets, route tables, NAT Gateway vs NAT instance, security groups vs NACLs. This is where most people over-study. You don't need to know BGP. You don't need to know the difference between Direct Connect and Site-to-Site VPN at packet level. You need to know which one to pick in a scenario.

Week 3 is storage. Spend more time here than you think. S3 storage classes are tested ruthlessly — Standard, Standard-IA, One Zone-IA, Glacier Instant, Glacier Flexible, Glacier Deep Archive, Intelligent-Tiering. Memorize retrieval times and minimum storage durations. EBS volume types (gp3 vs gp2, io2, st1, sc1). EFS vs FSx (and which FSx — Lustre, Windows, NetApp ONTAP, OpenZFS).

The under-studied topic that bites people: S3 lifecycle policies. The exam loves multi-stage lifecycle questions where you transition from Standard to IA to Glacier on specific day boundaries. Get a piece of paper and draw out the timeline. You'll see one of these on the real exam, probably more.

Week 4: databases and caching

RDS, Aurora, DynamoDB, ElastiCache. Spend extra time on RDS Multi-AZ vs read replicas — they solve different problems and the exam mixes them up in scenarios where both feel right.

Aurora Serverless v2, Aurora Global Database, DynamoDB Global Tables, DAX. Know when each is the answer. ElastiCache Redis vs Memcached: Redis for persistence, replication, and pub/sub; Memcached for simple multi-threaded caching with horizontal scaling.

Build something real this week. A small app on EC2 talking to RDS, with ElastiCache in front. Break it. Restore from a snapshot. Promote a read replica. The exam asks scenario questions; building the scenario teaches you faster than reading about it.

Week 5: security and identity

Security is 30% of the exam — the heaviest single domain. Don't shortchange this week.

IAM policies, roles, trust relationships, resource policies, permission boundaries, SCPs in Organizations. Know the evaluation logic: explicit deny beats explicit allow beats default deny. KMS, Secrets Manager, Parameter Store — they overlap in fuzzy ways and the exam tests where they don't.

Then the security services: GuardDuty, Security Hub, Inspector, Macie, WAF, Shield (Standard vs Advanced), Network Firewall. You don't need deep operational knowledge. You need to pick the right one given a scenario. Macie is for S3 data classification; Inspector is for EC2/ECR vulnerabilities; GuardDuty is for threat detection across the account.

Week 6: integration, monitoring, edge

The "everything else" week. SQS (standard vs FIFO), SNS, EventBridge, Step Functions. CloudWatch metrics, alarms, logs, Logs Insights. CloudTrail, Config, Trusted Advisor. CloudFront, Global Accelerator, Route 53 routing policies (simple, weighted, latency, failover, geolocation, geoproximity, multi-value).

Disaster recovery patterns — the four flavors (backup-restore, pilot light, warm standby, multi-site active-active) and the RTO/RPO trade-offs each implies. AWS Backup, AWS DataSync, Storage Gateway, Snowball / Snowmobile. Snowmobile rarely shows up but it's a free win when it does.

By Friday of week 6 you should have finished your course and have a list of weak topics. Go fix them over the weekend.

Week 7: practice exams

Now Tutorials Dojo. Their question quality is what most people credit for passing. Stephane Maarek's practice exams on Udemy are also good. AWS Skill Builder has official practice questions that are closer to the real exam phrasing but offer fewer of them.

Three timed practice exams this week minimum. Not untimed. Timed, full 130 minutes, no pausing, no looking things up. Score every one. Read every explanation, even for questions you got right (you may have been right for the wrong reason). Keep a running list of services or topics where you keep losing points.

If you're scoring above 80% by Friday, schedule the real exam for week 8. If you're at 70–79%, you can probably push through but study your weak list hard. Below 70% — push the appointment to week 10. Don't burn the $150 because the calendar says it's time.

Week 8: targeted review and exam day

Don't learn anything new this week. Review your weak list. Take one more timed practice exam mid-week. Rest the day before — do not cram. Sleep matters more than the last 4 hours of study.

Schedule the exam for morning if you're a morning person. Pearson VUE or OnVUE — pick the test center if home environment is iffy (kids, pets, roommates, bad lighting all cause OnVUE to fail check-in). Bring two IDs. Show up early. Use the bathroom before you start.

Common mistakes to avoid

Over-studying networking. Direct Connect, Transit Gateway internals, BGP — interesting, low yield. The exam asks "use Direct Connect or Site-to-Site VPN" not "configure BGP route preferences." Spend that time on S3 instead.

Under-studying S3 lifecycle and storage classes. This is the highest-density topic on the exam and the one most people skim. Memorize the table.

Skipping IAM policy reading. You will see at least one JSON policy snippet. Practice reading them.

Trying to memorize every service. AWS has 200+ services. The exam tests roughly 40. Stick to the exam guide's list.

If you want timed practice that mirrors the real format, run a SAA-C03 timed simulation on CertLabPro or browse the question bank. Eight weeks done right beats sixteen weeks done sloppy. Start with the exam guide tomorrow morning.