AWS Certified SAA Study Guide: Services & DevTools To Know
Tags: aws, development, tooling, solutionsarchitect
Published: 2023-07-08 01:25:36

Hey there AWS Enthusiasts! This blog is long overdue, but as promised, I wanted to walk you all through some very helpful tips if you’re preparing for the AWS Certified Solutions Architect - Associate Exam. This comprehensive study guide will provide helpful tips on areas such as High Availability, Fault Tolerance, Encryption, Resilience, and Security, as well as Compute, Networking, Storage, Database AWS services, and AWS deployment and management services. 

Whether you have prior AWS experience or you're new to the platform, following this guide and dedicating time to studying and practicing will greatly enhance your chances of success. Remember to supplement your studies with official AWS documentation, whitepapers, and practical hands-on experience. Good luck with your exam preparation!

I’ll start off by being 100% honest here and mention that I did not study for the FULL four (4) weeks that I originally allotted, which is NOT what you should do! Instead, I studied for roughly 2 weeks, and this is primarily because of my experience with AWS and having the confidence to just for it, and it worked in my favor - this time! However, I wanted to give you all a thorough breakdown of what my original study plan resembled, in hopes that this may help for those that are struggling as to where to start! Soooo….here we go!

BEFORE you do anything, be sure to download the AWS SAA OFFICIAL Exam Guide found [here](https://d1.awsstatic.com/training-and-certification/docs-sa-assoc/AWS-Certified-Solutions-Architect-Associate_Exam-Guide.pdf)!!!

For starters, _my_ general rule when studying for certifications is to ONLY use a total of three (3) resources (whitepapers are considered a stand-alone doc to me, and so the several that I read were not included in my total count) as to not overwhelm myself with a ton of info. The resources that I leveraged are as follows:

1. [Adrian Cantrill’s SAA Course](https://learn.cantrill.io/) (as a refresher)
2. [Tutorials Dojo Practice Exams](https://tutorialsdojo.com/) (Review Mode & Section-Based Quizzes x2)
3. [Neal Davis’s AWS SAA Cheat Sheet ONLY](https://tutorialsdojo.com/)




## **Part 1 - For the Newbies**

Now, if you’re totally a newbie to AWS and you’re stuck as to where to start, check out this comprehensive guide below, which is broken down for 10-12 weeks of studying time. If you intend to also leverage practice exams, I would recommend that you take at least 6-8 practice exams (2x). The Tutorials Dojo exams will challenge you for sure, but they are absolutely WORTH it!

**Week 1-2**:

_**AWS Fundamentals**_: Start by learning the basics of AWS services, including EC2, S3, IAM, VPC, and RDS. Understand the core concepts and get hands-on experience through AWS [Well-Architected Labs](https://www.wellarchitectedlabs.com/). As a general note, labs that are categorized as ‘100’ are introductory, and highly recommended if you lack practical hands-on experience. 

**Week 3-4**: **Optional, but recommended**

**_AWS Certified Cloud Practitioner_**: Prepare for and pass the AWS Certified Cloud Practitioner exam. This certification will provide a super solid foundation for further AWS knowledge, and will cover the basis for what you will be diving into starting in Week 5 of your learning path. If you already have the certification or choose not to attempt the cert, you should definitely try to focus on completing more labs and continuing with practice exams in **review mode**.

**Week 5-6**:
Focus on understanding core services and their features, and ways that they would be used in a production environment. If necessary, revisit the level 100 labs that may have been challenging for you. At this point, you should be starting the section-based quizzes if leveraging Tutorials Dojo.

**Week 7-8**:

**_AWS Security_**: I would highly recommend that you take it up a notch with the labs and focus on levels '200-300', which are intermediate. At this point in your learning journey, you should be diving into IAM, AWS Organizations, AWS Key Management Service (KMS), AWS Web Application Firewall (WAF), AWS Shield, AWS Secrets Manager, etc. You need to thoroughly understand best practices for securing AWS resources and when to use certain technologies within your environment when designing for resilience. As a side note, definitely understand what it means for an architecture to be “loosely” coupled. You should also know the key differences between **_monolithic architectures vs microservices_** - You’ll thank me later 😀! The exam will absolutely test your knowledge on this!

**Breaking Down Resilient Architectures Even Further**:
Let’s side-track here and talk about the importance of designing for high availability, scalability, and resilience, all whilst ensuring your workloads are secure. Take a look at this 3-Tier Architecture that I created for AWS for one of my previous tutorials. **What could I have done differently? What might I be missing? How would you design the same or similar architecture as a Solutions Architect?** These are thoughts that should be flowing through your brain as you’re studying for the cert, and so you MUST be familiar and comfortable with architectural design:

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/vzob0mob9tba2kszgrai.png)

**Week 9-10**:

**_Compute Services_**: Take a deeper dive on Amazon EC2, AWS Lambda, and AWS Batch. Understand instance types, scaling options, serverless computing, and containerization with AWS. I’ll repeat this once more - UNDERSTAND SCALING OPTIONS! Regarding containerization, you should definitely understand AWS ECS & ECR, and use cases for leveraging AWS Fargate. While you’re at it, [take a look](https://www.youtube.com/watch?v=8BtmzVG_GdI) at understanding the basics of what a container is, and dive into a super-simple [Docker tutorial](https://www.docker.com/101-tutorial/) as it will HELP in understanding containerization concepts!

**Networking Services**: Some of the services to keep in mind for networking are Amazon VPC (think about subnetting, elastic IPs, security group rules, etc), AWS Direct Connect, Amazon Route 53, and AWS Global Accelerator. Understand networking concepts, traffic routing, and hybrid connectivity. I can’t emphasize this enough in that you absolutely need to understand networking and the OSI model in general. If you have a general understanding of each layer of the **OSI model**, it will be much easier for you to apply cloud networking concepts to your studying. 

**Week 11-12**:

**_Storage and Database Services_**: I can tell you all right now that understanding S3 is a game changer! You need to understand encryption techniques, storage options, access control, and so forth. You CANNOT skip the basics of S3. You have to learn this service in detail! You should also keep in mind other services such as Amazon EBS, Amazon DynamoDB, & Amazon RDS (take a deep dive on **when** an organization should leverage RDS and consider cost optimization as well as other tradeoffs). Understand data durability, backups, and replication. Let me repeat that last line…UNDERSTAND backups and replication - This means, you need to understand the basis of Disaster Recovery, failovers, which AWS services provide the best optimization for data restoration, etc. A VERY helpful resource can be found [here](https://docs.aws.amazon.com/whitepapers/latest/disaster-recovery-workloads-on-aws/disaster-recovery-options-in-the-cloud.html).

**_AWS Management Services_**: You should be practicing with AWS CloudFormation, AWS CloudWatch, AWS Systems Manager, and AWS Trusted Advisor at a minimum at this point during your studies. Understand infrastructure as code, monitoring, and management tools. You should also continue working on the labs. Challenge yourself to work on the **level 400** (Advanced) labs only during these few weeks. Trust me, they will be worth it to get deeper hands-on experience with development tools!

**Review and Practice**: Recap all the topics covered in the previous weeks and take multiple practice exams. Challenge yourself to sit in a timed, 2-hour setting when taking the practice exams. You should start timing yourself around Week 8 during your learning journey to mentally prepare for the actual exam setting! 



## **Part 2 - For those with AWS hands-on experience**

Now, if you’re someone that has some AWS experience and/or extensive AWS experience, I would recommend that you take a look at this 4-6 week condensed guide below, as this may work best you:


**Week 1**:

**_AWS Well-Architected Framework_**: Review the six pillars of the Well-Architected Framework in-depth. You should have a thorough understanding of each pillar at this point.

**_AWS Global Infrastructure_**: Take a deeper dive on AWS Regions, Availability Zones (AZs), and edge locations. Understand the concepts of fault tolerance, high availability, and data durability. You should also be practicing daily with the exams and Well-Architected labs, level 400 (Advanced). Dive deeper into performance efficiency and reliability from the Well-Architected Framework.

_**AWS Identity and Access Management (IAM)**_: You most likely have a strong understanding of IAM, including users, groups, roles, policies, and permissions. Take it up a notch and think about IAM concepts being applied at the Organizational level or for users that require least privilege. It should be much easier for you to practice creating IAM users and managing access control. You should also try to do this via the CLI and not just within the AWS Management Console, such as the example below:

```
aws iam create-group --group-name Admins
```


**Week 2**:

_**AWS Elastic Compute Cloud (EC2)**_: Dive deeper into EC2 and understand best practices for storage options and pricing models. Cost Optimization should be reviewed heavily during this week, along with comparisons for S3 vs EFS, vs FSx (at a minimum). Understand how to configure EC2 instances for high availability and fault tolerance via the CLI.

**_Amazon Virtual Private Cloud (VPC)_**: Review VPC components, such as subnets, route tables, security groups, and network ACLs. Learn how to design secure and scalable VPC architectures. You should be heavily focused on Operational Excellence, Security, & Reliability from the AWS Well Architected Framework. 

**_Amazon Simple Storage Service (S3)_**: Explore S3 features, including bucket policies, versioning, encryption, and cross-region replication. Understand S3 security and data consistency models. Check out the AWS CLI example below of what it looks like to specify SSE (Server Side Encryption) when uploading objects for an S3 bucket:

```
aws s3api put-object --bucket DOC-EXAMPLE-BUCKET1 --key object-key-name --server-side-encryption AES256  --body file path
```

**Week 3**:

**_AWS Auto Scaling_**: Familiarize yourself with Auto Scaling concepts and learn how to create and configure Auto Scaling groups. You should have deep knowledge of auto scaling plans, launch configurations, instance sizing/capacity thresholds, and a general understanding of how Auto Scaling enhances availability and scalability.

**_Elastic Load Balancing (ELB)_**: Study the different types of ELBs, including Classic Load Balancer, Application Load Balancer, and Network Load Balancer. NOTE: You absolutely need to understand the AWS LoadBalancer Algorithm. If you do not understand application security, scalability, availability, and performance, you will have a tough time with deciphering which load balancer option may be best when reviewing the exam questions. You need to thoroughly understand how to configure and optimize load balancing. 

**_AWS Relational Database Service (RDS)_**: Become more familiar with RDS database engines, Multi-AZ deployments, backup and restore options, and read replicas. Learn about encryption at rest and in transit. As a refresher, take a look at [this](https://wellarchitectedlabs.com/reliability/200_labs/200_bidirectional_replication_for_s3/) level 200 Well Architected Lab related to **bi-directional cross-region replication**. Regarding encryption, think deeply about when and what to encrypt. Think about encryption responsibilities. Think about encryption do’s and don'ts. I would highly recommend that you review how to encrypt an RDS instance, and that you understand the purpose of KMS keys (think about customer managed vs AWS managed keys for RDS).

**Week 4**:

**_AWS Route 53_**: The fundamentals of Route 53 should be top of mind if you have experience with creating websites that use customized endpoints, etc. You must understand DNS management, routing policies, health checks, and domain registration at a minimum. Think about various scenarios for designing resilient and highly available architectures using Route 53.

**_AWS Lambda_**: Study serverless computing and Lambda functions. Learn how to create and configure Lambda functions, and understand their integration with other AWS services. I would also add in the purpose of APIs when working with Lambda functions. Practicing with Lambda functions, SNS, & SQS will be 100% beneficial when it comes time for the exam!

**_AWS CloudFormation_**: Dive deeper into infrastructure as code and learn how to use CloudFormation templates to automate resource provisioning and management. You shouldn’t just focus on the speed that CloudFormation provides when provisioning resources. You should also understand the management and governance aspects of using it - **How does it help with lowering costs? Does it help with innovation? How does it contribute to operational excellence?**

**You should also be taking at least 1-2 practice exams per day (at a minimum) in EXAM Mode. Because you have general or extensive AWS experience, you should be challenging yourself for the full 4-6 weeks when taking the practice exams. No shortcuts!

I genuinely hope that this guide has been helpful for those that are looking to take the AWS Certified Solutions Architect - Associate exam. Remember, experience triumphs everything, so if you’re not actually practicing in the labs as suggested or maybe writing blogs about your learning journey, the exam WILL NOT be a cake walk. Practice, then practice some more, and oh yes, don’t forget to practice!! You got this 🎉!


Resources:
[Official AWS SAA Exam Guide](https://d1.awsstatic.com/training-and-certification/docs-sa-assoc/AWS-Certified-Solutions-Architect-Associate_Exam-Guide.pdf)
[Adrian Cantrill’s SAA Course](https://learn.cantrill.io/)
[Tutorials Dojo AWS SAA Practice Exams ](https://tutorialsdojo.com/)
[Neal Davis’s AWS SAA Cheat Sheet ](https://digitalcloud.training/category/aws-cheat-sheets/aws-solutions-architect-associate/)
[AWS Well-Architected Labs](https://www.wellarchitectedlabs.com/)
[What is a Container?](https://www.youtube.com/watch?v=8BtmzVG_GdI) by F5 Dev Central
[Docker 101 Tutorial](https://www.docker.com/101-tutorial/) by Docker
[Well Architected Lab](https://wellarchitectedlabs.com/reliability/200_labs/200_bidirectional_replication_for_s3/): Bi-Directional and Cross Regional Replication