Chapter 9 of 9
Bringing It All Together: Solving Full SAA‑C03 Scenarios
Now it’s time to think like the exam: complex customer stories, competing requirements, and multiple “good” answers. This capstone module walks through end‑to‑end scenarios that force you to balance security, resilience, performance, and cost the way AWS expects.
Step 1: How the SAA-C03 Exam Uses Full Scenarios
Full Scenario Questions
SAA-C03 leans heavily on long, multi‑paragraph scenarios that mix networking, security, storage, databases, cost, and operations in one question.
What Is Really Tested?
You are tested less on naming services and more on recognizing tradeoffs and picking the design that best matches the scenario’s primary constraint.
Scenario Pattern
Most items include business context, existing architecture, new requirements, constraints, and then a question like: "Which solution meets the requirements with the least cost or effort?"
Your Job
Extract the primary goal, find hard constraints, note soft preferences, then map these to AWS services and patterns you know from earlier modules.
Step 2: A 5-Step Method for Any Scenario
1. Start at the End
Read the last sentence first to find the question stem and the key optimization word: LEAST cost, MOST secure, HIGHEST availability, or MINIMIZE operations.
2. Find Hard Constraints
Highlight phrases like "must not change code", "must keep same IPs", or "must avoid public internet". These instantly eliminate some options.
3. Identify the Domain
Decide if the core problem is networking, security, storage, performance, or cost. This narrows the set of reasonable AWS patterns.
4–5. Patterns and Tradeoffs
Match the scenario to 1–2 AWS patterns, then compare answer choices by the optimization word, discarding those that break constraints.
Step 3: Scenario Walkthrough – Hybrid Connectivity and Cost
Scenario Summary
On‑prem video transcoding app must keep using NFS for 12 months. Company wants AWS storage, high durability/availability, low ops overhead, and cost‑aware access over time.
Key Constraints
Hard constraints: keep existing app, must use NFS, need durable and highly available storage. Pattern: hybrid storage plus NFS hints at Storage Gateway or EFS.
Option Analysis
Option 1 needs app changes (S3 API). Option 3 adds VPN and EFS complexity. Option 4 is a single point of failure. Option 2 (file gateway + S3 lifecycle) fits all needs.
Takeaway
When you see "on‑prem NFS app, no code change, move storage to AWS", think AWS Storage Gateway file gateway backed by S3 and lifecycle policies.
Step 4: You Try – Identify Constraints and Domain
Read the Scenario
Financial startup, EC2 web app, single RDS MySQL instance. Users see slow pages at peak. Budget is tight, app is read‑heavy by day, write‑heavy at night, and they want minimal app changes.
Your Task
Identify hard constraints, the primary domain, and 1–2 AWS patterns that might help. Focus on performance plus cost, with minimal changes.
Check Yourself
Hard constraints: tight budget, avoid major changes. Domain: performance with cost pressure. Likely patterns: RDS read replicas and/or ElastiCache for read scaling.
Step 5: Quiz – Choosing Among "Good" Answers
Use the 5‑step method to pick the best answer.
A SaaS company runs a multi‑AZ web application on EC2 with an Application Load Balancer. Static content (images, CSS, JS) is served directly from the web servers. Users around the world report slow load times. The company wants to improve **global performance** and **reduce load on the application servers** with **minimal changes** and **low cost**. Which solution is MOST appropriate?
- Create an Amazon CloudFront distribution with the ALB as the origin. Configure cache behaviors for static content.
- Move the static content to Amazon S3 in a single Region and have users access it directly via S3 URLs.
- Increase the EC2 instance size in each Availability Zone and add more instances to the Auto Scaling group.
- Create a second copy of the application stack in another Region and configure latency‑based routing in Amazon Route 53.
Show Answer
Answer: A) Create an Amazon CloudFront distribution with the ALB as the origin. Configure cache behaviors for static content.
**Option 1 is correct.** CloudFront globally caches static content, reduces load on EC2, and requires minimal changes (point CloudFront at the ALB, adjust cache behaviors). It directly targets global latency and offloading. - **Option 2**: Moving static content to S3 helps offload, but without CloudFront users far from the Region still see higher latency. Also may require more app changes (URLs). - **Option 3**: Scaling EC2 improves capacity but not global network latency; also increases cost. - **Option 4**: Multi‑Region active‑active is complex and expensive, overkill for the requirement of simple global performance improvement and offload.
Step 6: Balancing Security vs. Availability vs. Cost
Optimization Words Matter
Phrases like "most secure", "highest availability", "least operational overhead", or "lowest cost" tell you which tradeoff wins when answers conflict.
Security and Availability
Most secure: private subnets, least privilege, encryption, VPC endpoints. Highest availability: Multi‑AZ (and sometimes Multi‑Region), avoid single points of failure.
Operations and Cost
Least operational overhead favors managed services (RDS, Systems Manager). Lowest cost favors right‑sizing, Savings Plans, S3 storage classes, and sometimes Spot or serverless.
Tie‑Breaker Questions
Eliminate answers that violate the optimization word or constraints. Then choose the simplest AWS‑native pattern that matches the requirement.
Step 7: Time Management and Question Triage
Know Your Pace
You have about 2 minutes per question. Use a fast first pass for easier items, and flag long or confusing scenarios for a second pass.
Guess + Flag Rule
If you are stuck after about 90 seconds on a long scenario, make your best guess, flag it, and move on. You can return later with a clearer mind.
Reflect on Habits
Ask yourself: when do I tend to waste time? Plan in advance how you will avoid rereading and overthinking individual questions.
Step 8: Flashcards – Key Patterns and Signals
Flip these cards to reinforce key scenario patterns and exam signals.
- Signal: On‑prem app must keep using NFS, no code changes, move storage to AWS.
- Use AWS Storage Gateway **file gateway** with NFS shares backed by S3. Add S3 lifecycle for cost optimization when access becomes infrequent.
- Signal: Global users, slow static content, want better performance and offload EC2.
- Use **Amazon CloudFront** with ALB or S3 as origin. Cache static content at edge locations to reduce latency and server load.
- Signal: Read‑heavy RDS workload, slow reads, minimal app changes, tight budget.
- Consider **RDS read replicas** and/or **ElastiCache** for read scaling. Also consider right‑sizing RDS before more complex changes.
- Optimization word: "Most secure" or "meet compliance requirements".
- Favor private subnets, least‑privilege IAM, encryption with KMS, VPC endpoints, and blocking direct public access even if cost or complexity increases.
- Optimization word: "Highest availability" or "minimize downtime".
- Use **Multi‑AZ** architectures (and sometimes Multi‑Region). Avoid single EC2 instances, single‑AZ RDS, or single NAT instances.
- Optimization word: "Least operational overhead".
- Prefer **managed services** (RDS, DynamoDB, CloudWatch, Systems Manager, AWS Backup) over self‑managed EC2 solutions.
- Optimization word: "Lowest cost" or "cost‑optimized".
- Look for right‑sizing, Savings Plans or RIs, S3 storage classes, Spot Instances (when interruption is OK), and serverless patterns.
- Exam tactic: Long scenario, you feel stuck after 90 seconds.
- Apply guess + flag: make your best elimination‑based guess, flag the question, move on, and revisit later if time allows.
Key Terms
- SAA-C03
- The current AWS Certified Solutions Architect – Associate exam version as of 2026, focused on designing cost‑effective, secure, reliable, and performant architectures on AWS.
- Multi-AZ
- An architecture pattern where resources (such as RDS or EC2 Auto Scaling groups) are spread across multiple Availability Zones in a Region for high availability.
- CloudFront
- AWS content delivery network (CDN) that caches content at edge locations globally to reduce latency and offload origin servers.
- Question stem
- The main part of an exam question that states what you are being asked to do, often found in the last sentence of a scenario.
- Hard constraint
- A requirement in a scenario that must not be violated (e.g., no code changes, must keep same IPs, must avoid public internet).
- Managed service
- An AWS service where AWS handles much of the operational burden (patching, scaling, backups), reducing operational overhead for customers.
- Optimization word
- A keyword in the question (e.g., "most secure", "least cost", "highest availability") that indicates which tradeoff is most important.
- AWS Storage Gateway file gateway
- A hybrid storage service that presents NFS/SMB file shares on‑premises while storing data as objects in Amazon S3.