CERTALYTH Certified Cloud Architect – Associate

CCCA-A · CT-CA-A · AWS Cloud Architecture

Design secure, resilient, and cost-aware cloud solutions.

AWS Certified Solutions Architect – Associate (SAA-C03)

40 hoursCertificate with unique codeMultiple-choice exam

399EUR

Full bundle: course PDF + online exam + certification.

Recertification every 3 years: 99 EUR

Instant access after payment
Schedule your online exam
Publicly verifiable certificate

About the course

Develop cloud architecture skills: identity and security, networking, availability, scaling, and cost optimization. Aligned with the AWS Certified Solutions Architect – Associate (SAA-C03) exam.

Focus: Cloud architecture: security, resilience, performance, and cost optimization.

What you'll learn

Build identity and security foundations

Design resilient and available architectures

Optimize performance at every layer

Balance cost with operational simplicity

Sample questions (free)

A sample from the official exam set — correct answers are revealed only during the actual exam.

CERTALYTH Certified Cloud Architect – Associate

About the course

What you'll learn

Sample questions (free)

An IAM policy attached to a user explicitly allows s3:GetObject on a bucket. A resource policy on that S3 bucket explicitly denies s3:GetObject for that same user. When the user attempts to retrieve an object, which statement best describes the effective permission and why?

A security architect needs to ensure member accounts in an AWS Organization cannot create publicly accessible S3 buckets, even if individual account IAM policies allow it. Which mechanism provides the most appropriate control and why?

You must allow EC2 instances in private subnets to retrieve objects from S3 without routing traffic to the internet via a NAT gateway. Which design provides secure, low-latency access with minimal additional cost?

A high-throughput application needs to encrypt many small objects and will perform thousands of encryption/decryption operations per second. Directly calling KMS for each operation risks throttling. Which design most effectively balances security, performance, and KMS limits?

You need to enforce that all objects uploaded to an S3 bucket are server-side encrypted with an AWS KMS customer managed key (CMK). Which bucket policy condition will reliably enforce this for PutObject requests?