AWS · Certification path · SAP-C02
SAP-C02: Solutions Architect - Professional
70 stages in study order, about 32 hours to complete, drawn from Networking, Data engineering, Security, Core architecture and Operations and delivery. Each stage names the section of the SAP-C02 exam guide it practises.
The path, in study order
- 1Guard RailsNetworking · World 1 · Task 1.2, Task 2.3
- 2Shortcut to S3Networking · World 1 · Task 1.1, Task 2.3
- 3Across the FenceNetworking · World 2 · Task 1.1
- 4Hub and SpokeNetworking · World 2 · Task 1.1
- 5Tunnel VisionNetworking · World 2 · Task 1.1, Task 4.2
- 6Dedicated LineNetworking · World 2 · Task 1.1, Task 4.2
- 7Service BridgeNetworking · World 2 · Task 1.1
- 8Routing DomainsNetworking · World 3 · Task 1.1, Task 1.2
- 9Belt and BracesNetworking · World 3 · Task 1.1, Task 1.3
- 10Shared ServicesNetworking · World 3 · Task 1.1, Task 1.4
- 11Name GameNetworking · World 3 · Task 1.1
- 12Two RegionsNetworking · World 3 · Task 1.1, Task 2.4
- 13Inspection LaneNetworking · World 4 · Task 1.1, Task 1.2
- 14Bump in the WireNetworking · World 4 · Task 2.3
- 15Transit VIFNetworking · World 4 · Task 1.1
- 16Wide AreaNetworking · World 4 · Task 1.1
- 17Global EdgeNetworking · World 4 · Task 2.5
- 18Sealed LinksNetworking · World 5 · Task 1.1
- 19Right PipeData engineering · Data World 2 · Task 4.2
- 20Change CaptureData engineering · Data World 2 · Task 4.2
- 21Right Engine, Right PriceData engineering · Data World 5 · Task 2.6
- 22Trust Both WaysSecurity · Security World 1 · Task 1.2
- 23Inside the BoundarySecurity · Security World 1 · Task 1.2
- 24Who Are YouSecurity · Security World 1 · Task 1.2
- 25Access Denied, Why?Security · Security World 1 · Task 3.2
- 26Fence the OrgSecurity · Security World 2 · Task 1.4
- 27Resource SideSecurity · Security World 2 · Task 1.4
- 28Landing ZoneSecurity · Security World 2 · Task 1.4
- 29Same EverywhereSecurity · Security World 2 · Task 1.4
- 30Key Policy FirstSecurity · Security World 3 · Task 1.2
- 31Whose Key Is ItSecurity · Security World 3 · Task 1.2
- 32Rule OrderSecurity · Security World 4 · Task 1.2
- 33One PaneSecurity · Security World 5 · Task 1.2
- 34Before It HappensSecurity · Security World 6 · Task 1.2
- 35Automatic ResponseSecurity · Security World 6 · Task 3.2
- 36Volumes That FitFreeCore architecture · Architecture World 1 · Task 2.5
- 37Shared by ManyCore architecture · Architecture World 1 · Task 4.3
- 38Objects at ScaleCore architecture · Architecture World 1 · Task 2.5, Task 2.6
- 39Bridge to the HarbourCore architecture · Architecture World 1 · Task 4.2
- 40Back It UpCore architecture · Architecture World 1 · Task 1.3, Task 2.2
- 41Storage DeskCore architecture · Architecture World 1 · Task 3.3
- 42Pick the EngineCore architecture · Architecture World 2 · Task 2.5, Task 4.3, Task 4.4
- 43Survive the ZoneCore architecture · Architecture World 2 · Task 2.4, Task 3.4
- 44Aurora's WayCore architecture · Architecture World 2 · Task 2.2, Task 2.4, Task 4.4
- 45Cache ItCore architecture · Architecture World 2 · Task 2.5, Task 3.3
- 46Database DeskCore architecture · Architecture World 2 · Task 3.3, Task 3.4
- 47Pick the ComputeCore architecture · Architecture World 3 · Task 1.5, Task 2.5, Task 3.3
- 48Balance the LoadCore architecture · Architecture World 3 · Task 2.4
- 49Scale on a SignalCore architecture · Architecture World 3 · Task 2.4, Task 3.3
- 50Lose a ZoneCore architecture · Architecture World 3 · Task 2.4, Task 3.4
- 51Across RegionsCore architecture · Architecture World 3 · Task 1.3, Task 2.2, Task 3.4
- 52Fleet DeskCore architecture · Architecture World 3 · Task 3.3, Task 3.4
- 53Pick the PlatformCore architecture · Architecture World 4 · Task 4.3, Task 4.4
- 54Task and ServiceCore architecture · Architecture World 4 · Task 4.3
- 55Pods and NodesCore architecture · Architecture World 4 · Task 4.3, Task 4.4
- 56Images and RegistriesCore architecture · Architecture World 4 · Task 4.3
- 57Containers That ScaleCore architecture · Architecture World 4 · Task 2.4, Task 3.3
- 58Container DeskCore architecture · Architecture World 4 · Task 3.3, Task 4.3
- 59Queue or TopicCore architecture · Architecture World 5 · Task 2.4, Task 4.4
- 60Scale on the BacklogCore architecture · Architecture World 5 · Task 2.4
- 61Fan OutCore architecture · Architecture World 5 · Task 2.4, Task 4.4
- 62Functions Under LoadCore architecture · Architecture World 5 · Task 4.4
- 63Front DoorCore architecture · Architecture World 5 · Task 4.4
- 64The Seven RsCore architecture · Architecture World 6 · Task 4.1, Task 4.3
- 65Discover and TrackCore architecture · Architecture World 6 · Task 4.1, Task 4.2
- 66Lift and ShiftCore architecture · Architecture World 6 · Task 4.2
- 67Pay Less, Size RightCore architecture · Architecture World 6 · Task 1.5, Task 2.6, Task 3.5
- 68Modernise ItCore architecture · Architecture World 6 · Task 4.3, Task 4.4
- 69Migration DeskCore architecture · Architecture World 6 · Task 4.2, Task 3.5
- 70Alarm ActionsOperations and delivery · Ops World 1 · Task 3.1
Articles on SAP-C02
SAP-C02 · Networking
Transit gateway route tables: association and propagation, with one packet
Association picks the table a packet is looked up in. Propagation picks which tables know a VPC. Follow one packet to see how a transit gateway segments.
Ends at Routing Domains Paid5 min read · video coming
SOA-C03 · Core architecture
gp3, io2, st1 or sc1: choosing an EBS volume by the numbers
gp3 includes 3,000 IOPS at any size, io2 is the sub-millisecond volume, st1 sells throughput by the TiB, and the instance sets the last ceiling.
Ends at Volumes That FitFree5 min read · video coming
SAA-C03 · Networking
Why can't my private subnet reach S3? Gateway and interface endpoints
With no internet gateway or NAT, a private subnet can still reach AWS services. A gateway endpoint adds a route; an interface endpoint adds an address.
Ends at Shortcut to S3 Paid5 min read · video coming
Guide sections the path practises
| Section | As the guide words it | Stages |
|---|---|---|
| Task 1.1 | Architect network connectivity strategies | 15 |
| Task 1.2 | Prescribe security controls | 11 |
| Task 1.3 | Design reliable and resilient architectures | 3 |
| Task 1.4 | Design a multi-account AWS environment | 5 |
| Task 1.5 | Determine cost optimization and visibility strategies | 2 |
| Task 2.2 | Design a solution to ensure business continuity | 3 |
| Task 2.3 | Determine security controls based on requirements | 3 |
| Task 2.4 | Design a strategy to meet reliability requirements | 10 |
| Task 2.5 | Design a solution to meet performance objectives | 6 |
| Task 2.6 | Determine a cost optimization strategy to meet solution goals and objectives | 3 |
| Task 3.1 | Determine a strategy to improve overall operational excellence | 1 |
| Task 3.2 | Determine a strategy to improve security | 2 |
| Task 3.3 | Determine a strategy to improve performance | 8 |
| Task 3.4 | Determine a strategy to improve reliability | 5 |
| Task 3.5 | Identify opportunities for cost optimizations | 2 |
| Task 4.1 | Select existing workloads and processes for potential migration | 2 |
| Task 4.2 | Determine the optimal migration approach for existing workloads | 8 |
| Task 4.3 | Determine a new architecture for existing workloads | 9 |
| Task 4.4 | Determine opportunities for modernization and enhancements | 9 |
A domain and a path are separate products. What you own is the union of what you bought, so a stage you already own is never sold to you twice: the game offers the cheapest way to unlock the stage in front of you. Path $30, exam $300.