AWS Certification Path
AWS certification is best understood as a portfolio of role paths rather than a staircase that every candidate climbs in the same order. Current AWS certifications include business, foundational, associate, professional, and specialty credentials covering architecture, operations, development, data, machine learning, generative AI, security, and strategy.
For cloud architecture and operations, several credentials form a particularly coherent route: Cloud Practitioner for broad orientation, Solutions Architect Associate for design fundamentals, CloudOps Engineer Associate for operational depth, and Solutions Architect Professional or DevOps Engineer Professional for senior responsibilities. Security Specialty can deepen protection skills, while Advanced Networking Specialty remains relevant only as a time-limited option because AWS is retiring it at the end of 2026.
The current path also contains important version changes. SOA-C03 now represents AWS Certified CloudOps Engineer – Associate. SAP-C02 is still active in early October 2026, but SAP-C03 registration opens later in the month and general delivery begins November 17. Candidates should build around the role while checking the exam version they can actually schedule.
Cloud Practitioner is useful orientation, not a universal prerequisite
CLF-C02 supports AWS Certified Cloud Practitioner and gives newcomers a broad view of cloud concepts, AWS services, security and shared responsibility, architecture principles, pricing, billing, and support. It is most valuable for people who need the platform vocabulary before choosing a technical specialization.
CLF-C02 cloud fundamentals are relevant to technical and nontechnical professionals, but experienced engineers do not need to treat CLF-C02 as a gatekeeper. Someone already designing networks, operating Linux systems, or administering another cloud may be able to start directly with an associate credential after filling AWS-specific knowledge gaps.
The key outcome at the foundation level is orientation. Candidates should be able to recognize the major service categories, understand why managed services exist, explain basic cloud economics and responsibility boundaries, and follow an AWS architecture conversation without confusing product names with design principles.
SAA-C03 is the broad architecture foundation
SAA-C03 supports AWS Certified Solutions Architect – Associate and remains one of the broadest technical entry points into AWS. It validates the ability to design secure, resilient, high-performing, and cost-aware architectures using AWS services and the principles behind the Well-Architected Framework.
SAA-C03 architecture decisions reward candidates who can compare design options. A serverless service, container platform, virtual machine, managed database, or object store is not “better” in isolation. The architect has to consider traffic patterns, operational burden, failure modes, security, recovery requirements, performance, and cost.
That breadth makes SAA-C03 useful even for candidates who later specialize. Operations engineers benefit from understanding why the system was designed a certain way. Security specialists need to understand service boundaries and data flows. Developers make better implementation choices when they understand the architecture around the code.
SOA-C03 reframes operations as CloudOps engineering
SOA-C03 supports AWS Certified CloudOps Engineer – Associate. The name change from SysOps Administrator to CloudOps Engineer reflects a broader view of operations: observability, reliability, remediation, automation, business continuity, security, networking, deployment, and performance all belong in the role.
A CloudOps engineer is responsible for how systems behave after they are deployed. That means building monitoring that reveals meaningful failure, creating repeatable provisioning, automating routine operations, managing backup and recovery, investigating performance, enforcing security controls, and reducing the amount of fragile manual intervention.
SAA-C03 and SOA-C03 therefore complement each other without forming a mandatory sequence. Architecture focuses on choosing designs that satisfy requirements. CloudOps focuses on keeping those designs observable, reliable, recoverable, and supportable. Professionals who own both design and operations may benefit from both credentials.
Professional architecture is transitioning from SAP-C02 to SAP-C03
SAP-C02 currently supports AWS Certified Solutions Architect – Professional, and it remains available through November 16, 2026. AWS has already announced SAP-C03, with registration opening October 27 and general exam delivery beginning November 17.
The timing matters for candidates studying now. Someone already well prepared for SAP-C02 may choose to complete it before the cutoff. Someone beginning a long professional-level preparation cycle may prefer to orient toward SAP-C03, which expands attention to newer architecture concerns including generative AI and agentic systems, modern resilience patterns, DevSecOps, observability, and cloud-native design.
The underlying professional skill remains architectural judgment under complexity. Candidates must design across organizations and accounts, migrations, security, governance, cost, business continuity, networking, operations, and application requirements. The exam version changes the current technology emphasis; it does not remove the need to reason about tradeoffs.
DOP-C02 is the senior automation and delivery route
DOP-C02 supports AWS Certified DevOps Engineer – Professional and is the natural senior route for professionals responsible for delivery automation, infrastructure as code, observability, incident response, resilient operations, and the systems that move changes safely into production.
DOP-C02 DevOps practices are most useful when candidates think in terms of operating models rather than individual services. A mature deployment process needs version control, testing, approvals, rollback, security checks, artifact management, environment consistency, monitoring, and a way to learn from failure.
DevOps at professional level also spans organizational boundaries. The candidate should understand how accounts, permissions, pipelines, operational data, incident response, and governance work together across teams. Automation is valuable because it makes good operational decisions repeatable, not because every manual step is automatically bad.
Security Specialty deepens a cross-cutting responsibility
SCS-C03 supports AWS Certified Security – Specialty and remains a focused route for experienced professionals responsible for securing AWS workloads and architectures. Security cuts across identity, data protection, infrastructure, logging, detection, incident response, and governance rather than living in one service.
Candidates should understand how AWS identity and resource policies interact, how encryption and key management affect data, how network design changes exposure, how logs support investigations, and how security services fit into preventive and detective control layers. The best study approach is to trace a workload’s attack surface and control points end to end.
Security Specialty can complement architecture, operations, development, or networking experience. It is most valuable when the candidate already knows enough about the underlying AWS environment to understand what is being protected and how a control changes the system.
Advanced Networking is active but retiring
ANS-C01 supports AWS Certified Advanced Networking – Specialty, but AWS has announced that the exam will retire on December 31, 2026. Certifications earned before retirement remain valid for their normal period, but new certifications will not be issued after the exam ends.
That makes ANS-C01 a legitimate but time-sensitive choice for candidates who are already prepared and whose work centers on complex AWS and hybrid networking. AWS advanced networking covers design, implementation, management, operation, and security of large-scale networking environments.
Candidates who are just beginning a long networking study plan should weigh the retirement date carefully. The technical knowledge—routing, hybrid connectivity, DNS, automation, multi-region design, network security, and troubleshooting—will remain valuable even after the credential retires, but the certification itself has a fixed remaining window.
Developer, data, and AI paths branch away from the architecture core
AWS also has current paths that should not be forced into an architecture-and-operations sequence. AWS Certified Developer – Associate validates application development on AWS, while AWS Certified Data Engineer – Associate focuses on data pipelines and data-platform responsibilities. The AI portfolio includes AI Practitioner, Machine Learning Engineer Associate, Generative AI Developer Professional, and the new AI Business Strategist beta.
These credentials may combine naturally with architecture or operations experience, but they represent different ownership. A developer is accountable for application behavior and integration. A data engineer owns reliable data movement and transformation. An ML engineer owns model and AI lifecycle concerns. A business strategist owns adoption and value decisions rather than infrastructure.
This is why a complete AWS path should be viewed as a branching map. A broad foundation can be shared, but the next credential should follow the work a candidate wants to perform.
Build a path around responsibility and current exam status
For many infrastructure professionals, a practical route begins with CLF-C02 only if foundational AWS knowledge is needed, then moves to SAA-C03 or SOA-C03 depending on whether design or operations is the stronger responsibility. Senior practitioners can then choose professional architecture or DevOps based on the problems they own.
Specialty credentials should deepen a real concentration rather than pad a résumé. Security Specialty makes sense for people who routinely make security decisions. ANS-C01 only makes sense now for networking specialists who can complete it before retirement. Adjacent developer, data, and AI credentials become useful when the role crosses into those domains.
Version awareness is part of the plan. SAP-C02 is current today but has a scheduled replacement in November. ANS-C01 is current but retiring in December. MLA-C01 has already ended in English while MLA-C02 beta is underway. Candidates should verify the AWS certification page and exam guide close to booking.
Whichever branch a candidate chooses, the Well-Architected ideas of security, reliability, performance efficiency, cost awareness, operational excellence, and sustainability remain useful reference points. They provide a common language for architecture reviews and incident learning even when a specific exam changes version. Certification study becomes more durable when service knowledge is connected to those design principles rather than memorized as a long catalog of features.
The durable part of the AWS certification path is not the code printed on an exam appointment. It is the progression from understanding the platform to owning architecture, operations, delivery, security, data, development, or AI outcomes. Use the current exam version to validate that work, and let the role—not an arbitrary badge order—determine what comes next.
- Category: All Certifications Certifications
