All 5 domains
13 official task statements
90–135 hrs suggested study
-
Domain 01
22%
This is the largest CloudOps domain. It covers instrumenting AWS workloads with CloudWatch and CloudTrail, analyzing logs and audit data to find problems, automatically remediating issues, and optimizing performance across compute, storage and other resources.
Inside this domain
- Implement metrics, alarms, filters, and remediation using AWS monitoring and logging services
- Perform analysis and troubleshooting using logs and auditing data
- Implement performance optimization strategies for compute, storage, and other resources
Watch for Memory without the agent
- Task statements
- 3
Read the domain guide →
-
Domain 02
22%
This domain covers keeping AWS workloads available and recoverable: scaling with Auto Scaling and load balancing, building highly available multi-AZ designs, and implementing backup, restore and disaster-recovery strategies.
Inside this domain
- Implement scalability and elasticity
- Implement highly available and resilient environments
- Implement backup and restore strategies
Watch for Read replica for failover
- Task statements
- 3
Read the domain guide →
-
Domain 03
22%
This domain covers provisioning and maintaining AWS resources and automating their management: infrastructure as code with CloudFormation and the CDK, AMIs and launch templates, and Systems Manager automation.
Inside this domain
- Provision and maintain cloud resources
- Automate the management of existing resources
Watch for Patch by hand
- Task statements
- 2
Read the domain guide →
-
Domain 04
16%
This domain covers operating AWS securely: managing identity and access, enforcing compliance, and protecting data and infrastructure with encryption, secrets management and network protection.
Inside this domain
- Implement and manage security and compliance policies
- Implement strategies to protect data and infrastructure
Watch for IAM to restrict Regions
- Task statements
- 2
Read the domain guide →
-
Domain 05
18%
This domain covers operating AWS networking: configuring and optimizing VPC connectivity, setting up DNS and content delivery with Route 53 and CloudFront, and troubleshooting network connectivity problems.
Inside this domain
- Implement and optimize networking features and connectivity
- Configure domains, DNS services, and content delivery
- Troubleshoot network connectivity issues
Watch for Blame the security group only
- Task statements
- 3
Read the domain guide →
Domain names, weights and task statements come from Amazon Web Services's official outline (SOA-C03 exam guide, in use since 30 September 2025 (current)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.