AWS Certified CloudOps Engineer – Associate (SOA-C03) Study Guide: Domains and Study Plan
An AWS SOA-C03 study guide covering the five exam domains, CloudOps operations, and a practical preparation plan.
The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests how to deploy, operate, and maintain AWS workloads. Topics include monitoring and performance, reliability, automation, security, networking, and content delivery. SOA-C03 is the updated version of the SysOps Administrator – Associate path. Use its five current domains instead of studying from the older SOA-C02 outline.
This guide covers who the exam is for, its five domains, and how to prepare. Objectives and service scope can change, so use the latest AWS SOA-C03 exam guide as your source of truth.
Who is this exam for?
- Cloud operations and platform engineers responsible for monitoring, changes, automation, and incident response.
- Developers moving into operations who want a structured understanding of deployment, recovery, and day-to-day operations.
- People with cloud fundamentals who want to learn how to keep workloads running reliably.
AWS describes its target candidate as having at least one year in a related operations role, such as system administration. This is a target-candidate profile, not a registration requirement. Familiarity with cloud basics, Linux or Windows, networking, scripting, and monitoring tools is helpful.
SOA-C03 focuses on operations. DVA-C02 focuses more on application development, while DOP-C02 covers Professional-level DevOps practices.
Exam domains and weights
The weights below are percentages of scored content. SOA-C03 uses a different domain structure from the older SOA-C02 exam. In particular, performance optimization is now included in Domain 1; use the current guide when you study.
| Domain | Official name | Main focus | Weight |
|---|---|---|---|
| 1 | Monitoring, Logging, Analysis, Remediation, and Performance Optimization | Monitoring, logs, analysis, remediation, and performance | 22% |
| 2 | Reliability and Business Continuity | Scaling, high availability, and business continuity | 22% |
| 3 | Deployment, Provisioning, and Automation | Deployment, resource provisioning, and automation | 22% |
| 4 | Security and Compliance | Security controls and compliance requirements | 16% |
| 5 | Networking and Content Delivery | Connectivity, DNS, and content delivery | 18% |
The first three domains have equal weight. Do not focus only on CloudWatch alerts or backups; automation, security, and networking are also in scope.
How to study each domain
Domain 1: Monitoring, Logging, Analysis, Remediation, and Performance Optimization
Learn to configure metrics, logs, alarms, and filters; use availability and performance data to identify problems; and choose compute, storage, or database optimizations. Monitoring should help you decide when to act, not just display data.
Common mix-up: having alarms without a response plan, or watching resource metrics without checking user-facing availability and performance. For each critical service, write what to monitor, what triggers an alarm, and who takes which action.
Domain 2: Reliability and Business Continuity
Focus on scaling, high availability, and operational resilience. Understand how backups, recovery, redundancy, and failover support business continuity requirements.
Common mix-up: having backups without restore drills, or deploying across multiple Availability Zones without knowing how failover works. Use recovery time objective (RTO) and recovery point objective (RPO) to check whether a design meets business needs.
Domain 3: Deployment, Provisioning, and Automation
Learn to create, update, and manage resources with automation and infrastructure as code (IaC), including change validation, failure handling, and rollback. Understand tools such as CloudFormation and the AWS CDK as parts of a repeatable deployment process.
Common mix-up: treating manual console steps as repeatable deployment, or having no recovery plan when automation fails. Describe the flow: define the change, execute it, verify the result, and roll back if needed.
Domain 4: Security and Compliance
Study how to implement and operate access controls, data protection, patching, and auditing, as well as how to enforce compliance requirements such as Region or service selections.
Common mix-up: broad permissions, patching without a baseline, or enabling logs that nobody reviews. For each control, identify its owner, how it is checked, and how exceptions are handled.
Domain 5: Networking and Content Delivery
Focus on operating VPC connectivity, routes, security groups, DNS, and content delivery. Be able to validate the full path from a client to a target service based on the reported symptoms.
Common mix-up: checking only one security group or DNS setting instead of tracing the request end to end. Follow DNS → load balancer → target → return path, and understand how content delivery services such as CloudFront affect caching and access.
Check your readiness with three questions
- When a critical application is unavailable, which signals do you check first, and how do you narrow down the fault?
- If an automated change fails, how do you roll it back and confirm service recovery?
- Has the backup strategy been tested, and can it meet the business RTO and RPO?
If two answers are unclear, review those domains before doing more timed practice.
Suggested study order
- Monitoring and diagnosis: metrics, logs, alarms, and remediation.
- Reliability and recovery: scaling, high availability, backups, and restore drills.
- Deployment and automation: IaC, change validation, and rollback.
- Networking and content delivery: VPCs, DNS, routes, and request-path troubleshooting.
- Security and compliance: permissions, patching, audit logs, and compliance requirements.
A three-step preparation plan
- Use the SOA-C03 guide. Study task statements across all five domains; do not rely on the older SOA-C02 outline.
- Write down operational flows. For each topic, identify the signal, decision, action, verification, and rollback—not just the service purpose.
- Practice and review mistakes. Group misses by domain and cause. For recurring errors, revisit the matching task statement and AWS documentation.
Frequently asked questions
Do I need CLF-C02 or SAA-C03 first?
No prior certification is required. Cloud fundamentals and hands-on operations experience can make preparation easier. If cloud services are new to you, start with the CLF-C02 guide.
What changed from SOA-C02 to SOA-C03?
SOA-C03 is the updated exam and has five domains. Performance optimization is now part of the monitoring, logging, analysis, and remediation domain. Use the current SOA-C03 guide rather than older study materials.
Do I need to know how to code?
You do not need to be a software developer, but you should understand how scripts and automation support operations. The exam includes provisioning, automation, and IaC.
Start practicing
Once you have a basic framework for all five domains, use exam code SOA-C03 to practice by domain, then revisit the matching objectives and official materials.