Highest-weight domain. Covers the broadest range of AWS services. Expect ~19 questions focused on architecture decisions, trade-offs, and integration patterns.
What This Domain Tests
- Selecting the right compute, storage, database, and networking services for given requirements
- Designing scalable, highly available, and fault-tolerant architectures
- Applying security, encryption, and access controls to new workloads
- Choosing between serverless, container, and EC2-based architectures
- Designing event-driven and decoupled architectures
- Applying IaC best practices with CloudFormation and CDK
Subdomain Breakdown
| Subdomain | Key Services |
|---|---|
| 2.1 Design a deployment strategy to meet business requirements | IaC, CI/CD, change management, Systems Manager, deployment and rollback strategies |
| 2.2 Design a solution to ensure business continuity | Global infrastructure, RTO/RPO, DR, backup, replication, failover |
| 2.3 Determine security controls based on requirements | IAM, network controls, encryption, endpoints, credentials, managed security services |
| 2.4 Design a strategy to meet reliability requirements | Multi-AZ/Region, replication, quotas, scaling, loosely coupled integration |
| 2.5 Design a solution to meet performance objectives | Monitoring, storage/compute/database selection, caching, buffering, rightsizing |
| 2.6 Determine a cost optimization strategy | Cost visibility, pricing models, storage tiers, data transfer, rightsizing |
Task names aligned to the official SAP-C02 exam guide. The guide may change; recheck before exam day.
Files in This Domain
Compute/
- EC2-Advanced-General.md — placement groups, Spot, Reserved, instance types
- ECS-General.md — Fargate, task definitions, service discovery
- EKS-General.md — managed node groups, Fargate profiles, networking
- Lambda-General.md — concurrency, layers, destinations, SnapStart
- AutoScaling-General.md — scaling policies, predictive, warm pools
Networking/
- CloudFront-General.md — distributions, origins, cache behaviors, security
- APIGateway-General.md — REST vs HTTP vs WebSocket, throttling, caching
- ELB-General.md — ALB, NLB, GWLB — when to use each
- GlobalAccelerator-General.md — anycast, traffic dials, vs CloudFront
Storage/
- S3-Advanced-General.md — storage classes, lifecycle, replication, encryption
- EFS-General.md — shared file storage, performance modes, replication
- FSx-General.md — FSx for Windows, Lustre, NetApp ONTAP, OpenZFS
- EBS-General.md — volume types, snapshots, encryption, multi-attach
Databases/
- RDS-Aurora-General.md — Multi-AZ, read replicas, Aurora Global, Serverless
- DynamoDB-General.md — partitions, GSI, streams, DAX, Global Tables
- ElastiCache-General.md — Redis vs Memcached, caching patterns
- OpenSearch-General.md — search, log analytics, domain design
- Purpose-Built-Database-Selector.md — DocumentDB, Keyspaces, Neptune, Redshift, Timestream and selection cues
Serverless/
- StepFunctions-General.md — Standard vs Express, state types, error handling
- EventBridge-General.md — event buses, rules, pipes, scheduler
- SQS-SNS-General.md — queues, topics, fan-out, DLQ, FIFO
- Kinesis-General.md — Data Streams, Firehose, Data Analytics
Standalone
- MSK-General.md — managed Kafka, use cases vs Kinesis
- CloudFormation-General.md — stacks, StackSets, drift, nested stacks
- CDK-General.md — constructs, stacks, pipelines, vs CloudFormation
- Deployment-Strategies-General.md — CodePipeline, CodeBuild, CodeDeploy, rollout and rollback patterns
Key Architecture Patterns
Three-Tier Web Application
Internet → CloudFront → ALB → ECS/EC2 (Auto Scaling) → Aurora Multi-AZ
↓
ElastiCache (Redis)Serverless API
Client → API Gateway → Lambda → DynamoDB
↓
SQS → Lambda → downstream processingEvent-Driven Architecture
Producer → EventBridge → Rules → Multiple consumers
├── Lambda (real-time processing)
├── SQS (buffered processing)
└── Step Functions (orchestration)Multi-Region Active-Active
Route 53 / Global Accelerator
├── Region A: ALB → ECS → Aurora Global primary (writer)
└── Region B: ALB → ECS → Aurora Global secondary (read-only)
└── optional write forwarding to primary
For multi-Region writes, use a data store designed for that model (for example,
DynamoDB Global Tables) and design for its consistency/conflict semantics.Exam Tips
- Decouple with SQS/SNS/EventBridge when asynchronous processing, burst buffering, or independent consumers meet the requirements; account for retries and eventual consistency
- Serverless can fit variable or event-driven workloads; validate runtime, duration, concurrency, data, latency, and total-cost constraints
- Aurora vs RDS is workload-specific: compare engine compatibility, HA/replication needs, features, performance, operations, and cost
- DynamoDB fits access-pattern-driven key-value/document workloads; design partition keys, indexes, throughput, consistency, and hot-key behavior
- CloudFront for static content and global distribution — not just CDN, also security (WAF, Shield)
- ECS vs EKS — ECS (use the Fargate launch type for serverless compute) for AWS-native simplicity, EKS for Kubernetes compatibility
- Auto Scaling — use health checks and multiple AZs where availability requirements call for them
- Cost optimization: Spot for fault-tolerant, Savings Plans for steady-state, serverless for variable
Domain 2: New Solutions
Amazon API Gateway
Exam relevance: Domain 2 (29%). API Gateway is the front door for serverless APIs. Know REST vs HTTP vs WebSocket, throttling, caching, and integration types.
1. API Types Type …
read moreDomain 2: New Solutions
Amazon CloudFront
Exam relevance: Domain 2 (29%). CloudFront is more than a CDN — it’s a security layer, edge compute platform, and global distribution mechanism. Know origins, cache …
read moreDomain 2: New Solutions
Amazon DynamoDB
Exam relevance: Domain 2 (29%). DynamoDB is a managed key-value/document database that can provide low-latency access at scale when the access pattern, partition key, capacity, …
read moreDomain 2: New Solutions
Amazon EBS
Exam relevance: Domain 2 (29%). EBS is the block storage behind most EC2 workloads. At the Professional level, focus on volume type selection, snapshot mechanics, and encryption — …
read moreDomain 2: New Solutions
Amazon EC2 Advanced
Exam relevance: Domain 2 (29%). At the professional level, focus on purchasing options, placement groups, instance types for specific workloads, and Spot integration patterns.
1. …
read moreDomain 2: New Solutions
Amazon ECS
Exam relevance: Domain 2 (29%). ECS is the AWS-native container orchestration service. Know Fargate vs EC2 launch types, task definitions, service discovery, and deployment …
read moreDomain 2: New Solutions
Amazon EFS
Exam relevance: Domain 2 (29%). EFS is the shared POSIX file system for Linux workloads. Know performance modes, throughput modes, and when to use EFS vs EBS vs FSx.
1. Overview …
read moreDomain 2: New Solutions
Amazon EKS
Exam relevance: Domain 2 (29%). EKS is the managed Kubernetes service. Know node types, networking (VPC CNI), IAM integration (IRSA), and when to choose EKS over ECS.
1. Overview …
read moreDomain 2: New Solutions
Amazon ElastiCache
Exam relevance: Domain 2 (29%). ElastiCache is the in-memory caching layer. Know Redis vs Memcached, caching patterns, and when to use DAX instead.
1. Redis vs Memcached Feature …
read moreDomain 2: New Solutions
Amazon EventBridge
Exam relevance: Domains 2, 3. EventBridge is the event routing backbone. Know event buses, rules, pipes, scheduler, and cross-account patterns.
1. Overview Amazon EventBridge is a …
read moreDomain 2: New Solutions
Amazon FSx
Exam relevance: Domain 2 (29%). FSx covers four file system types. Know which to use for Windows, HPC, NetApp, and OpenZFS workloads.
1. FSx File System Types Type Protocol Use …
read moreDomain 2: New Solutions
Amazon Kinesis
Exam relevance: Domain 2 (29%). Kinesis is the real-time streaming platform. Know Data Streams vs Firehose vs Data Analytics and when to use Kinesis vs SQS vs MSK.
1. Kinesis …
read moreDomain 2: New Solutions
Amazon MSK (Managed Streaming for Apache Kafka)
Exam relevance: Domain 2 (29%). MSK is the answer when the question mentions Kafka, existing Kafka workloads, or Kafka ecosystem tools.
1. Overview Amazon MSK is a fully managed …
read moreDomain 2: New Solutions
Amazon OpenSearch Service
Exam relevance: Domain 2 (29%). OpenSearch is the answer for full-text search and log analytics. Know ingestion patterns, domain design, and integration with CloudWatch and …
read moreDomain 2: New Solutions
Amazon RDS and Aurora
Exam relevance: Domain 2 (29%). Compare managed relational options by engine compatibility, application requirements, availability, replication, operations, and cost. Know …
read moreDomain 2: New Solutions
Amazon S3 Advanced
Exam relevance: Domains 2, 3, 4. S3 is foundational to almost every architecture. At the professional level, focus on storage classes, lifecycle, replication, encryption, and …
read moreDomain 2: New Solutions
Amazon SQS and SNS
Exam relevance: Domain 2 (29%). SQS and SNS are the decoupling backbone. Know Standard vs FIFO, fan-out patterns, DLQ, and when to use each.
1. Amazon SQS Queue Types Feature …
read moreDomain 2: New Solutions
AWS Auto Scaling
Exam relevance: Domain 2 (29%). Auto Scaling is fundamental to every HA architecture. Know scaling policies, warm pools, lifecycle hooks, and multi-service scaling.
1. Overview …
read moreDomain 2: New Solutions
AWS CloudFormation
Exam relevance: Domains 2, 3, 4. CloudFormation is the AWS-native IaC service. Know stacks, StackSets, nested stacks, drift detection, and change sets.
1. Overview AWS …
read moreDomain 2: New Solutions
AWS Global Accelerator
Exam relevance: Domain 2 (29%). Know when to use Global Accelerator vs CloudFront — a common exam trap.
1. Overview AWS Global Accelerator improves availability and performance of …
read moreDomain 2: New Solutions
AWS IoT (Core & Greengrass)
Exam relevance: Domain 2 (29%). IoT appears in event-driven and edge scenarios. Know the ingestion paths, the Greengrass vs Outposts distinction, and offline behavior.
1. Overview …
read moreDomain 2: New Solutions
AWS Lambda
Exam relevance: Domains 2, 3, 4. Lambda is the serverless compute foundation. Know concurrency, triggers, destinations, VPC integration, and SnapStart.
1. Overview AWS Lambda runs …
read moreDomain 2: New Solutions
AWS Step Functions
Exam relevance: Domains 2, 3. Step Functions is the orchestration layer for complex workflows. Know Standard vs Express, state types, error handling, and integration patterns.
1. …
read moreDomain 2: New Solutions
Deployment Strategies and CI/CD
Exam relevance: Domain 2 (29%). Official Domain 2 task 2.1 covers deployment strategy, change management, rollback, IaC, configuration management, and managed services. Choose a …
read moreDomain 2: New Solutions
Elastic Load Balancing
Exam relevance: Domain 2 (29%). Know when to use ALB vs NLB vs GWLB. This is a frequent decision point in architecture scenarios.
1. Load Balancer Types Feature ALB NLB GWLB Layer …
read moreDomain 2: New Solutions
Purpose-Built Database Selector
Exam relevance: Domain 2 (29%). Start from access patterns, consistency, latency, scale, query shape, and operational constraints. “NoSQL” and “managed” are not sufficient …
read more