All 4 domains
16 official task statements
135–185 hrs suggested study
-
Domain 01
26%
This domain tests enterprise-scale design: connecting and governing many AWS accounts, VPCs and on-premises networks at once. It covers network connectivity strategies, cross-account security controls, reliable multi-account architectures and the design of a well-governed multi-account environment.
Inside this domain
- Architect network connectivity strategies
- Prescribe security controls
- Design reliable and resilient architectures
- Design a multi-account AWS environment
Watch for Peering mesh
- Task statements
- 4
Read the domain guide →
-
Domain 02
29%
This is the largest SAP-C02 domain. It covers designing greenfield architectures from requirements: deployment strategies, business continuity, security, reliability and performance, justifying every choice against competing constraints.
Inside this domain
- Design a deployment strategy to meet business requirements
- Design a solution to ensure business continuity
- Determine security controls based on requirements
- Design a strategy to meet reliability requirements
- and 1 more task statements
Watch for Active-active for loose RTO
- Task statements
- 5
Read the domain guide →
-
Domain 03
25%
This domain covers improving workloads already in production: raising operational excellence, security, performance and reliability, and finding cost-optimization opportunities, usually by changing an existing design rather than starting over.
Inside this domain
- Determine a strategy to improve overall operational excellence
- Determine a strategy to improve security
- Determine a strategy to improve performance
- Determine a strategy to improve reliability
- and 1 more task statements
Watch for Rewrite to serverless
- Task statements
- 5
Read the domain guide →
-
Domain 04
20%
This domain covers moving workloads to AWS and modernizing them: selecting what to migrate, choosing the right migration strategy from the 7 Rs, using the migration tooling, and modernizing to containers, serverless and managed services.
Inside this domain
- Select existing workloads and processes for potential migration
- Determine the optimal migration approach for new and existing workloads
Watch for Refactor under deadline
- Task statements
- 2
Read the domain guide →
Domain names, weights and task statements come from Amazon Web Services's official outline (SAP-C02 exam guide (current)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.