| Specialty |
Machine Learning |
MLS-C01 |
$300 |
3 years |
| Specialty |
Database |
DBS-C01 |
$300 |
3 years |
| Specialty |
Data Analytics |
DAS-C01 |
$300 |
3 years |
| Specialty |
SAP on AWS |
PAS-C01 |
$300 |
3 years |
That is 14 certifications. Pursuing all of them without a deliberate sequence is one of the most common and most damaging mistakes I see on engineering resumes. The certifications are not equally valuable at every stage of a career, and the order in which you earn them signals professional maturity to senior hiring managers.
Why Certification Order Signals More Than the Certifications Themselves
When I review resumes at the architect and principal engineer level, I look at the sequence. An engineer who went CLF-C02 → SAA-C04 → SAP-C02 → SCS-C02 tells me they understood the AWS learning path and built systematically. An engineer with CLF-C02, MLS-C01, and SAP-C02 in the same year — with no Associate under their belt — tells me they were chasing exam vouchers, not building knowledge.
At Lockheed Martin, cloud certification was a direct input to labor category determination under government contracts. Under certain task orders, Associate-certified engineers billed at one rate; Professional-certified engineers billed at a higher rate that justified additional oversight responsibilities. The certification was not cosmetic — it had direct compensation implications tied to contract language.
The lesson: certifications matter most when they form a coherent narrative. They need to match your hands-on experience and follow a logical progression.
Stage 1: Entry Point — CLF-C02 or Skip It Entirely
The AWS Certified Cloud Practitioner (CLF-C02) is the only certification you should consider skipping if you already have hands-on AWS experience. Here is the honest breakdown:
Take CLF-C02 if:
- You are transitioning from a non-technical role (project management, sales, finance) into cloud
- Your current employer has a bulk voucher program and the exam is free to you
- You need a credential within 4-6 weeks for a specific job application or contract requirement
Skip CLF-C02 and go directly to SAA-C04 if:
- You have 6+ months of hands-on AWS experience, even in a developer or junior sysadmin capacity
- You have worked with EC2, S3, IAM, and VPC in any professional or lab context
- You are a software developer who has deployed applications to AWS
CLF-C02 covers billing models, the shared responsibility model, and broad service descriptions. It is not tested at depth. The exam is 65 questions, 90 minutes, and costs $100. If you have any real AWS exposure, the 4-6 weeks you would spend on CLF-C02 study is better invested toward SAA-C04.
One context where CLF-C02 is genuinely useful: teams where non-engineering roles (product managers, scrum masters, compliance officers) need a verified baseline of cloud literacy. During my engagement at Cigna Healthcare, we put the entire project management organization through CLF-C02 as a precondition for joining cloud migration project teams. It created a shared language that meaningfully reduced miscommunication between engineering and business stakeholders.
Stage 2: The Core — SAA-C04 Is the Certification That Changes Careers
The AWS Solutions Architect Associate (SAA-C04) is the most consequential certification in the AWS catalog for the majority of cloud professionals. This is the one that matters.
Why SAA-C04 is the right first serious certification:
The exam covers the four domains that appear in every real production environment:
- Domain 1: Secure Architectures (30%) — IAM, KMS, Secrets Manager, VPC security groups, NACLs, encryption at rest and in transit
- Domain 2: Resilient Architectures (26%) — Multi-AZ deployments, Auto Scaling, ELB, Route 53 health checks, RDS Multi-AZ vs Read Replicas
- Domain 3: High-Performing Architectures (24%) — CloudFront, ElastiCache, DynamoDB, Aurora, EBS volume types
- Domain 4: Cost-Optimized Architectures (20%) — Reserved vs Spot vs On-Demand, S3 storage classes, Compute Optimizer
These four domains map directly to the Well-Architected Framework pillars. SAA-C04 forces you to internalize the framework in a practical way — not by memorizing the whitepaper, but by applying it to service selection scenarios.
Salary impact: According to Global Knowledge's 2025 IT Skills and Salary Report, AWS Solutions Architect Associate holders in the United States earn a median salary of $126,000. That is approximately $18,000 above the non-certified cloud engineer baseline for equivalent experience levels. In enterprise government contracting roles — the environment I spent significant time in at Lockheed Martin and Patterson UTI — SAA-C04 is often the minimum credential for a "Cloud Engineer" labor category.
Preparation timeline: 8-12 weeks of structured study for candidates with 6-12 months of AWS hands-on experience. The exam is 65 questions (50 scored, 15 unscored), 130 minutes, with a passing score of 720 out of 1000. The fee is $150.
Our free AWS Cloud course covers every SAA-C04 domain with hands-on labs mapped to each exam objective, including VPC network design, IAM policy construction, and Multi-AZ architecture patterns using the AWS Free Tier.
Stage 3: Choosing Your Associate-Level Specialization
After SAA-C04, your next certification should match your day-to-day role — not what you think sounds impressive.
AWS Developer Associate (DVA-C02)
Relevant if you write application code that runs on AWS. The exam covers Lambda function development, DynamoDB data modeling, API Gateway configuration, CodePipeline CI/CD, and X-Ray tracing. At NantHealth, the engineers who held DVA-C02 consistently wrote better serverless architectures because the exam forced them to understand execution environments, cold start behavior, and IAM execution roles at a deeper level than most developers bother with.
Exam: 65 questions, 130 minutes, $150, passing score 720/1000.
AWS SysOps Administrator Associate (SOA-C02)
Relevant if you manage infrastructure operations: patching, monitoring, incident response, cost allocation, and compliance. SOA-C02 is the only Associate exam that includes a hands-on exam component (a lab environment where you must complete tasks in a live AWS account). This makes it the most practically rigorous Associate certification AWS offers.
At BP Refinery, our operations team targeted SOA-C02 specifically because the hands-on lab component aligned with how we evaluated operational competency internally. An engineer who passed SOA-C02 had demonstrated they could actually perform the tasks, not just recognize the right answer.
Exam: 65 questions plus hands-on labs, 180 minutes total, $150, passing score 720/1000.
AWS Data Engineer Associate (DEA-C01)
Introduced in 2023 and now well-established by 2026, DEA-C01 covers Glue, Athena, Kinesis, Lake Formation, Redshift, and EMR. If your work involves data pipelines, analytics infrastructure, or data warehousing on AWS, this is the certification that validates it. Data engineering roles on AWS command $135,000-$165,000 median in the US market; DEA-C01 is increasingly a baseline expectation for these positions.
AWS Machine Learning Engineer Associate (MLA-C01)
Released in late 2024, MLA-C01 is the Associate-level bridge between general cloud knowledge and ML infrastructure. It covers SageMaker pipeline construction, model deployment patterns (real-time vs batch vs asynchronous inference), MLflow integration, and Bedrock API usage for generative AI workloads. If your organization is building AI products on AWS — and most organizations are — this certification is becoming relevant faster than the market currently recognizes.
Stage 4: Professional Tier — SAP-C02 vs DOP-C02
The Professional tier requires a fundamentally different preparation mindset. SAP-C02 and DOP-C02 questions are multi-paragraph scenarios involving 4-6 AWS services interacting across accounts, regions, and organizational boundaries. You are not choosing between four services; you are evaluating trade-offs between architectural approaches that each have legitimate merits.
Solutions Architect Professional (SAP-C02)
SAP-C02 is the highest-value credential for architects and senior engineers moving into design and advisory roles. The exam tests cross-account governance with AWS Organizations and SCPs, Transit Gateway topology design for large-scale network environments, complex migration patterns using DMS and Application Migration Service, and enterprise landing zone construction with AWS Control Tower.
At Lockheed Martin, the architects leading cloud migration programs were expected to hold SAP-C02 or equivalent experience that could be demonstrated in technical interviews. The certification served as a pre-screen that reduced the volume of candidates who could not engage at the required technical depth.
Prerequisites: No formal requirement, but realistically you need 2+ years of hands-on AWS architecture experience and SAA-C04.
Exam: 75 questions (65 scored), 180 minutes, $300, passing score 750/1000.
DevOps Engineer Professional (DOP-C02)
DOP-C02 is the right path if your focus is platform engineering, CI/CD architecture, infrastructure automation, and reliability engineering. The exam covers CodePipeline with approval gates and cross-account artifact sharing, OpsWorks stack lifecycle management, ElasticBeanstalk deployment strategies (blue/green, rolling, immutable), Systems Manager automation documents, and CloudFormation StackSets for multi-account/multi-region deployments.
If your roadmap points toward DevOps Lead, Platform Engineer, or SRE roles, DOP-C02 is more directly relevant than SAP-C02.
Our architecture blueprints collection includes reference architectures for enterprise CI/CD pipelines, multi-account landing zones, and cross-region disaster recovery patterns — the exact scenarios tested in both Professional exams.
Stage 5: Specialty Certifications — When and Which
Specialty certifications are the most powerful credentials in the AWS catalog for compensation, but only when they are backed by real expertise. I have reviewed resumes where candidates held SCS-C02 (Security Specialty) but could not correctly answer basic questions about IAM policy evaluation logic. Hiring managers at the enterprise level will probe your specialty credentials aggressively.
Target these specialties based on your role:
| If you work in... |
Target specialty |
| Security, compliance, FedRAMP, HIPAA, Zero Trust |
SCS-C02 — Security Specialty |
| Network architecture, Direct Connect, Transit Gateway |
ANS-C01 — Advanced Networking |
| ML engineering, model training, SageMaker deployment |
MLS-C01 — Machine Learning |
| Database administration, migration, performance tuning |
DBS-C01 — Database |
| Analytics engineering, data lake design, BI infrastructure |
DAS-C01 — Data Analytics |
| SAP workloads on AWS (common in large enterprise) |
PAS-C01 — SAP on AWS |
Security Specialty (SCS-C02) note from enterprise experience: At Cigna Healthcare, our environment was subject to HIPAA audit requirements, and at Lockheed Martin we operated under CMMC Level 2 obligations. SCS-C02 was the credential that hiring managers specifically requested for cloud security architect roles in both environments. The exam covers GuardDuty finding types, Security Hub standard controls, AWS Config rule construction, KMS key policy evaluation, and IAM Access Analyzer. If you are working in regulated industries — healthcare, defense, financial services — SCS-C02 is worth prioritizing over a second Associate.
The Recommended Sequence by Career Profile
Profile A: Career Changer with No Prior Cloud Experience
CLF-C02 (weeks 1-6) → SAA-C04 (weeks 7-18) → DVA-C02 or SOA-C02 (weeks 19-30) based on target role.
Profile B: Developer with Some AWS Exposure
SAA-C04 (weeks 1-10) → DVA-C02 (weeks 11-20) → DOP-C02 Professional (weeks 21-36).
Profile C: Infrastructure/Operations Engineer
SAA-C04 (weeks 1-10) → SOA-C02 (weeks 11-22) → DOP-C02 Professional (weeks 23-38).
Profile D: Architect Targeting Senior/Principal Roles
SAA-C04 (weeks 1-10) → SAP-C02 (weeks 11-28) → SCS-C02 or ANS-C01 specialty based on practice area.
Profile E: Security or Compliance Specialist
SAA-C04 (weeks 1-10) → SCS-C02 Specialty (weeks 11-26) — Security Specialty does not require Associate-level certification as a formal prerequisite, but the content assumes it.
Our career development resources include certification study plans, exam voucher strategies for budget-conscious professionals, and practice exam sets aligned to the 2026 exam versions.
Preparing Efficiently: What Actually Works
Use the Exam Guide, Not Random YouTube Playlists
Every AWS exam has an official exam guide published at aws.amazon.com/certification. The exam guide lists the exact domains, the objective statements, and the appendix of in-scope services. Build your study plan from this document, not from content creators who may be covering exam versions that have been retired.
For SAA-C04 specifically, AWS publishes the exam guide at aws.amazon.com/certification/certified-solutions-architect-associate. It is free, updated when exam content changes, and tells you exactly what to study.
Build in AWS — Every Day
The single most consistent differentiator between candidates who pass on the first attempt and those who do not is hands-on lab time. Candidates who only read and watch videos consistently underestimate how the exam tests service interaction rather than service definitions.
Minimum lab requirements I recommend:
- Build a three-tier architecture (ALB → EC2 Auto Scaling Group → RDS Multi-AZ) from CLI — not the console
- Configure cross-account IAM role assumption using `sts:AssumeRole`
- Set up a VPC with public subnets, private subnets, NAT Gateway, and VPC Flow Logs
- Configure S3 bucket replication with KMS encryption across regions
- Deploy a CloudFormation nested stack template with parameter overrides
Scheduled Practice Exams with Review Discipline
Take timed, full-length practice exams from week 6 onward and review every wrong answer — not just the correct answer, but why each distractor is wrong. AWS exam questions frequently include "almost correct" options that fail because of a single architectural nuance (Multi-AZ vs Read Replica behavior on failover, for example).
Target 80%+ on practice exams consistently before scheduling the real exam. Aiming for exactly 72% to pass is how candidates end up retaking the exam.
FAQ
Do I need AWS certifications to get a cloud job in 2026?
Certifications are not required, but they are functionally necessary for the majority of cloud roles that post publicly. A resume without any AWS certification competing against one with SAA-C04 will lose at the application screening stage in most enterprise environments. The certification signals baseline knowledge to recruiters who cannot assess technical depth from a resume alone. At organizations I have hired for, SAA-C04 was listed as "required" in the job requisition for entry-level cloud engineer roles. That said, hands-on experience with a demonstrable portfolio — GitHub repositories, deployed projects, documented architecture decisions — can substitute for certifications in startup or product company environments where technical interviews are more rigorous.
How long does it take to go from zero AWS experience to SAA-C04?
For someone with a general IT or software development background but no specific AWS experience, a realistic timeline is 10-14 weeks of structured study at 8-12 hours per week. That includes reading AWS documentation, hands-on lab work, and weekly practice exams. For someone completely new to cloud concepts, add 4-6 weeks for cloud fundamentals before starting SAA-C04 preparation. The CLF-C02 exam can serve that foundational role, or you can use the AWS Skill Builder free tier to complete the Cloud Essentials learning path without sitting a separate exam.
Is the AWS Certified Solutions Architect Professional worth it without the Associate?
You can sit SAP-C02 without holding SAA-C04, but I do not recommend it for candidates who earned SAA-C04 less than 12 months ago or who lack 2+ years of AWS architecture experience. The Professional exam assumes Associate-level knowledge as a baseline and tests the ability to evaluate architectural trade-offs — not just identify correct service choices. Candidates who attempt SAP-C02 without the mental model built by SAA-C04 preparation tend to spend more total study time than they would have if they had taken the sequential path. The $300 exam fee and 180-minute sitting make failed attempts expensive in both time and money.
Which AWS certification pays the most in 2026?
Specialty certifications, particularly the Security Specialty (SCS-C02) and Machine Learning Specialty (MLS-C01), carry the highest individual salary premiums — typically $20,000-$30,000 above the Associate-level baseline in the US market, according to the 2025 Global Knowledge Salary Survey. However, specialties are most valuable when held in combination with the Professional tier. An engineer with SAP-C02 + SCS-C02 is positioned for principal architect and cloud security architect roles that command $175,000-$220,000 in major US markets. The certification combination matters more than any single credential in isolation.
How do AWS certifications interact with multi-cloud credentials like Azure and GCP?
AWS certifications do not grant credit or exemptions toward Azure or GCP certifications — each vendor's certification program is independent. However, the architectural concepts transfer. An engineer with SAA-C04 who transitions to Azure will find that AZ-104 (Azure Administrator) and AZ-305 (Azure Solutions Architect Expert) cover analogous concepts: identity, networking, compute, storage, and resilience patterns. At NantHealth, our multi-cloud architecture team required engineers to hold at least one Associate-level certification on each platform they touched. The combination of SAA-C04, AZ-104, and Google Professional Cloud Architect positions an engineer for senior roles at organizations running heterogeneous cloud environments, which describes the majority of large enterprise accounts in 2026.
