AWS Certified Solutions Architect - Associate
SAA-C03
Money Back Guarantee
98% Success Rate
Real Questions
1
Design Secure Architectures 30%
1.1
Design secure access to AWS resources
4 subtopics1.1.1IAM Users and Root Users Security
1.1.2Role-Based Access Control
1.1.3Multi-Account Security Strategy
1.1.4Resource Policies
Learning Objectives
- Apply AWS security best practices to IAM users and root users
- Design a flexible authorization model that includes IAM users, groups, roles, and policies
- Design a role-based access control strategy
- Design a security strategy for multiple AWS accounts
- Determine the appropriate use of resource policies for AWS services
- Determine when to federate a directory service with IAM roles
1.2
Design secure workloads and applications
3 subtopics1.2.1VPC Security Architecture
1.2.2Application Security Services
1.2.3External Network Connections
Learning Objectives
- Design VPC architectures with security components
- Determine network segmentation strategies
- Integrate AWS services to secure applications
- Secure external network connections to and from the AWS Cloud
1.3
Determine appropriate data security controls
3 subtopics1.3.1Encryption at Rest
1.3.2Encryption in Transit
1.3.3Data Backup and Recovery
Learning Objectives
- Align AWS technologies to meet compliance requirements
- Encrypt data at rest
- Encrypt data in transit
- Implement access policies for encryption keys
- Implement data backups and replications
- Implement policies for data access, lifecycle, and protection
- Rotate encryption keys and renew certificates
Domain Hands-on Skills
Configure IAM policies and rolesSet up VPC security groups and NACLsImplement KMS encryptionConfigure AWS WAF rulesSet up cross-account access
Common Mistakes to Avoid
- Using root account for daily operations
- Overly permissive security group rules
- Not enabling MFA on privileged accounts
- Confusing security groups with NACLs
- Not implementing least privilege principle
2
Design Resilient Architectures 26%
3
Design High-Performing Architectures 24%
4