🔒
Secure Architectures
Domain 1 · 30% of exam
Set 1 of 3
Identity & Access Management
IAM policies, roles, SCPs, cross-account access, federation, STS, Cognito, IAM Identity Center
75 Questions1:52:30
Set 2 of 3
Data Protection & Key Management
KMS, Secrets Manager, ACM, S3/EBS/RDS encryption, Macie, CloudHSM
75 Questions1:52:30
Set 3 of 3
Infrastructure Security & Threat Detection
Security Groups/NACLs, WAF/Shield, GuardDuty, Inspector, Detective, Security Hub
75 Questions1:52:30
🔁
Resilient Architectures
Domain 2 · 26% of exam
Set 1 of 3
High Availability & Fault Tolerance
Multi-AZ, Auto Scaling, ELB (ALB/NLB/GWLB), Route 53 routing policies, Global Accelerator
75 Questions1:52:30
Set 2 of 3
Disaster Recovery & Backup
RTO/RPO strategies, AWS Backup, DRS, Global Tables, Aurora Global Database, ARC
75 Questions1:52:30
Set 3 of 3
Decoupling & Resilient Design Patterns
SQS/SNS, Step Functions, EventBridge, circuit breakers, ECS/EKS resiliency, multi-region active-active
75 Questions1:52:30
⚡
High-Performing Architectures
Domain 3 · 24% of exam
Set 1 of 3
Compute & Storage Performance
EC2 instance families, placement groups, EBS types, EFS modes, S3 performance, FSx for Lustre
75 Questions1:52:30
Set 2 of 3
Database & Caching Performance
RDS read replicas, Aurora, DynamoDB DAX/GSI, ElastiCache, Redshift performance tuning
75 Questions1:52:30
Set 3 of 3
Networking, CDN & Serverless Performance
CloudFront, Global Accelerator, ENA/EFA, Lambda tuning, API Gateway caching
75 Questions1:52:30
💰
Cost-Optimized Architectures
Domain 4 · 20% of exam
Set 1 of 3
Compute Pricing Models
On-Demand vs RI vs Savings Plans vs Spot, rightsizing, Compute Optimizer, Graviton
75 Questions1:52:30
Set 2 of 3
Storage & Data Transfer Optimization
S3 storage classes/lifecycle, EBS gp3 migration, VPC endpoints, data transfer costs
75 Questions1:52:30
Set 3 of 3
Cost Management & Governance
Cost Explorer, Budgets, Anomaly Detection, Trusted Advisor, tagging, consolidated billing
75 Questions1:52:30