Certification guide
SOA-C03AWS Certified CloudOps Engineer - Associate: the honest guide
SOA-C03 is the AWS associate exam about keeping things running. It replaced the SysOps Administrator Associate exam at the end of September 2025, and the change was more than a rename: containers came into scope, multi-account and multi-Region operation carry more weight, and the automation and infrastructure-as-code material grew.
One change matters before you book. The old exam was known for its hands-on exam labs, and SOA-C03's exam guide lists two response types and nothing else, multiple choice and multiple response. There is no console to work in during the exam. That makes it shorter to sit and no easier to pass, because the questions still assume you have done the work somewhere.
The format is 65 questions in 130 minutes, of which 50 are scored and 15 are unscored trial questions that are not identified. Scoring is a scaled 100 to 1,000 with 720 to pass, compensatory across the whole exam. The five domains are unusually even: monitoring and remediation, reliability and business continuity, and deployment and automation sit at 22 percent each, networking and content delivery at 18, and security and compliance at 16.
If you hold the older SysOps Administrator Associate certification, it keeps its name. AWS applies the CloudOps Engineer title only to people who pass SOA-C03, and it is not changed retroactively.
Who CloudOps Engineer Associate is for
A good fit if
- You run AWS workloads for a living and want the certification that matches operations rather than design.
- You are a systems administrator or infrastructure engineer moving from on-premises work into an AWS estate.
- You are on call for something that runs on AWS and want the alarms, logs and recovery paths to stop being someone else's expertise.
- You already hold Solutions Architect Associate and keep meeting operational questions your certification did not prepare you for.
Probably not, if
- You have no hands-on AWS time. AWS recommends a year on the platform plus a year in a related operations role, and this exam has the strongest reputation of the associates for exposing candidates who studied services rather than operating them.
- You want a design credential. The exam guide puts designing distributed architectures, designing CI/CD pipelines and designing hybrid networking out of scope for this candidate. Solutions Architect Associate is the exam that asks those questions.
- You are chasing the certification that appears most often in job adverts. That is still Solutions Architect Associate, and it is the safer single choice if you are only sitting one associate exam.
Is CloudOps Engineer Associate worth it?
For someone already doing cloud operations, yes, and it is the associate exam that most closely resembles the job. Monitoring, alarming, backup and restore, patching through Systems Manager, scaling policies and the networking that ties it together are the daily work, and the exam asks about them in the shape they arrive in.
For someone moving from on-premises systems administration into cloud, it is a strong second certification and a hard first one. Cloud Practitioner gives you the vocabulary, and this exam then rewards the operational instincts you already have, which is a better fit than starting with an architecture exam that asks you to design systems you have not yet run.
For someone with no operations background, no. The recommended experience is two overlapping years for a reason, and the questions are written for someone who has already been paged at three in the morning. Study material can teach you what CloudWatch is; it cannot easily teach you which alarm you would have wanted.
What the exam actually asks you to do
Multiple choice and multiple response only. No simulations, no labs, and nothing to configure.
Item formats
- Multiple choice
- Multiple response
Nothing here needs a lab. Reading carefully and eliminating options is the whole skill. AWS, SysOps Administrator exam guide ↗
Domain breakdown and official weightings
From the official AWS exam guides. Monitoring, Logging, Analysis, Remediation, and Performance Optimization is the heaviest domain at 22 percent, followed by Reliability and Business Continuity at 22 percent.
- Monitoring, Logging, Analysis, Remediation, and Performance Optimization22%
- Reliability and Business Continuity22%
- Deployment, Provisioning, and Automation22%
- Security and Compliance16%
- Networking and Content Delivery18%
Study plans by experience level
Working AWS operations engineer
5 to 7 weeksat 6 to 8 hours
- 1Week 1: read the SOA-C03 exam guide, including the comparison with SOA-C02 if you studied the old blueprint. Mark every task statement you could not perform in a console today.
- 2Weeks 2 to 3: the three 22 percent domains, one per block. Monitoring and remediation first: metric filters, composite alarms, Logs Insights queries, EventBridge rules that trigger a Systems Manager automation document.
- 3Week 4: reliability and business continuity. Backup plans, point-in-time restore, cross-Region replication, Route 53 health checks and failover, and what your recovery time objective actually costs.
- 4Week 5: deployment and automation. CloudFormation stack sets across accounts, drift detection, Systems Manager patch baselines, and the container material that SOA-C03 added.
- 5Week 6: networking and security together. VPC endpoints, transit gateway basics, NAT versus internet gateway routing, and the security controls that are examinable as operations rather than as policy.
- 6Week 7: the free official question set and timed full-length sets. Book when unfamiliar questions clear the line.
Systems administrator moving from on-premises to AWS
10 to 14 weeksat 6 to 8 hours
- 1Weeks 1 to 2: open an account, set a billing alarm, and build the equivalent of one small production service. Two EC2 instances behind a load balancer in two availability zones, an RDS instance, and a security group you wrote yourself.
- 2Weeks 3 to 5: IAM and the account model. Roles rather than users, cross-account access, service control policies, and why a multi-account structure exists at all. Much of this exam assumes it.
- 3Weeks 6 to 9: instrument the thing you built. CloudWatch metrics and alarms, an agent on the instances, log groups with retention set, an EventBridge rule, and an automated remediation that actually fires.
- 4Weeks 10 to 12: break it and recover it. Restore the database from a backup, fail over a Route 53 record, replace an instance from a launch template, and time how long each takes you.
- 5Weeks 13 to 14: the exam guide as a checklist, then timed practice. Any line you still cannot perform is a line to work before booking.
Already hold Solutions Architect Associate
4 to 5 weeksat 5 to 6 hours
- 1Read the exam guide and mark the gaps. For most SAA holders they sit in monitoring detail, backup and restore mechanics, patch and configuration management, and the Systems Manager family, which SAA barely touches.
- 2Spend a full week inside CloudWatch and Systems Manager. Alarms, dashboards, agents, Logs Insights, Session Manager, Patch Manager, Run Command and automation documents.
- 3Spend a week on operating a multi-account estate: stack sets, Config rules, Organizations policies, and centralized logging.
- 4Spend a week on the newer scope. Containers on ECS and EKS as operational objects rather than as an architecture choice, and infrastructure as code applied across accounts.
- 5Do a timed set before booking. The knowledge overlap with SAA is large; the framing is not, and this exam keeps asking what you would do rather than what you would build.
Common mistakes
- Preparing for exam labs that are no longer there
- Courses and study plans written for SOA-C02 spend real time on the hands-on lab format. The SOA-C03 exam guide lists multiple choice and multiple response only. Check the publication date on anything you buy, because the same material is usually stale on containers and multi-account scope too.
- Studying the five domains as though they are separate
- Three of them sit at 22 percent and ask overlapping questions. A failed health check is monitoring, reliability and networking at once, and the exam frequently gives you a scenario where the domain boundary is invisible. Study by scenario rather than by chapter.
- Reading about CloudWatch instead of configuring it
- The largest domain is monitoring, logging, analysis and remediation, and it is the one where reading fails hardest. Metric filters, composite alarms and Logs Insights syntax are recognisable after an hour of use and stay slippery after a week of video.
- Skipping the account model because it looks like architecture
- Multi-account and multi-Region operation carry more weight in SOA-C03 than in the exam it replaced. Stack sets, service control policies, centralized logging and cross-account roles are operational content here, not design content, and candidates from single-account environments consistently underestimate them.
- Booking before you have recovered anything
- A retake is another $150 and a 14 day wait. Restoring a database, failing over a record and replacing a failed instance are three afternoons of work, and doing them once changes how the business continuity questions read.
What comes after passing
The certification lasts three years. You recertify by passing the current version at full price with the 50 percent benefit voucher applied, or by passing AWS Certified DevOps Engineer Professional, which recertifies this one automatically. It is also on the list AWS lets you extend by a year through paid Skill Builder activities rather than an exam.
DevOps Engineer Professional is the natural next exam, and the overlap is real: pipelines, automation, monitoring and recovery are the whole of that exam and most of this one. Solutions Architect Associate is the other common direction, taken by people who want to move from running systems to designing them.
Expect the certification to keep moving. It changed name, dropped its labs and gained containers inside one revision, so treat the three year renewal as study rather than paperwork, and read the exam guide again before you book it.
Where people go next
Costs across the full renewal cycle are on the CloudOps Engineer Associate cost page.
Frequently asked questions
What happened to the AWS SysOps Administrator certification?
AWS renamed and updated it. SOA-C02, the SysOps Administrator Associate exam, had its last testing day on 29 September 2025, and SOA-C03 launched the next day as CloudOps Engineer Associate. Existing SysOps certifications keep their original name; the new title applies only to people who pass SOA-C03.
Does SOA-C03 still have hands-on exam labs?
No. The SOA-C03 exam guide lists two response types, multiple choice and multiple response, and nothing else. There is no console session inside the exam, which is the clearest difference from the version it replaced.
Is SOA-C03 the hardest AWS associate exam?
It keeps that reputation, and the reason is experience rather than content. The exam asks what you would do when something is broken or about to break, and candidates without real console time find that harder to fake than a design question with a defensible answer.
What score do you need to pass SOA-C03?
720 on a scaled range of 100 to 1,000, measured across the whole exam. The model is compensatory, so you do not need to clear a bar in each of the five domains, and only 50 of the 65 questions count toward your score.
How much experience does AWS recommend before SOA-C03?
One year of deployment, management, troubleshooting, networking and security work on AWS, plus at least one year in a related operations role such as systems administration. It also expects containerisation basics and familiarity with at least one scripting language.
Should I take Solutions Architect Associate or CloudOps Engineer first?
Solutions Architect Associate if you want the credential more employers ask for by name, and it is the gentler exam for someone still building AWS experience. CloudOps first if you already run AWS workloads, because the exam matches your daily work and passing either earns a half-price voucher toward the other.
Keep reading
- CloudOps Engineer Associate practice questions
Free sample questions with the full explanation on every answer.
- Free CloudOps Engineer Associate practice test
10 original questions, playable now. No account, no card.
- CloudOps Engineer Associate exam format
How many questions, how long, what the items look like, and how long it stays valid.
- CloudOps Engineer Associate passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is CloudOps Engineer Associate?
An honest difficulty read from the format, the clock and the weights.
- What CloudOps Engineer Associate costs
The voucher price, the retake, and what renewal costs across the cycle.
Practice CloudOps Engineer Associate for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free CloudOps Engineer Associate questions