Amazon Web Services (AWS) offers one of the most comprehensive and respected cloud certification programs in the industry. With over 1.4 million active certifications worldwide, AWS credentials are a proven way to validate your cloud skills, boost your earning potential, and advance your career. But with 12 certifications across four levels, knowing where to start — and what comes next — can feel overwhelming.
This guide maps out every current AWS certification in a clear, structured roadmap. Whether you're a complete beginner or a seasoned architect looking to specialize, you'll find the right path forward.
How AWS Certifications Are Organized
AWS groups its certifications into four levels, each representing a different depth of cloud expertise:
| Level | Experience | Exam Cost | Duration |
|---|---|---|---|
| Foundational | No prior experience needed | $100 USD | 90 minutes |
| Associate | ~1 year hands-on | $150 USD | 130 minutes |
| Professional | 2+ years hands-on | $300 USD | 180 minutes |
| Specialty | Deep domain expertise | $300 USD | 170 minutes |
All certifications are valid for 3 years. After earning any AWS certification, you receive a 50% discount voucher for your next exam.
The Visual Roadmap
Here's how the full AWS certification landscape flows from beginner to expert:
Foundational Certifications
These entry-level certifications require no prior cloud or IT experience. They're perfect for career changers, students, or business professionals looking to build cloud literacy.
1. AWS Certified Cloud Practitioner (CLF-C02)
| Exam Code | CLF-C02 |
| Duration | 90 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $100 USD |
| Ideal For | Complete beginners, business roles, career changers |
The Cloud Practitioner is the most popular starting point in the AWS ecosystem. It validates a foundational, high-level understanding of AWS Cloud, core services, pricing, security, and architecture concepts. You don't need a technical background to earn this one — it's designed for everyone from sales professionals to project managers who want cloud literacy.
What you'll learn:
- AWS Cloud concepts, value proposition, and the Well-Architected Framework
- Core AWS services — compute (EC2, Lambda), storage (S3), databases (RDS, DynamoDB), and networking (VPC)
- Security and compliance fundamentals — IAM, shared responsibility model
- Billing, pricing models, and support plans
Who should take this: Anyone new to the cloud. If you have zero IT experience, this is your on-ramp. Even experienced IT professionals often start here to formalize their AWS knowledge.
Practice free AWS Cloud Practitioner questions →
2. AWS Certified AI Practitioner (AIF-C01)
| Exam Code | AIF-C01 |
| Duration | 90 minutes |
| Questions | 65 |
| Cost | $100 USD |
| Ideal For | Business analysts, product managers, AI-curious professionals |
The AI Practitioner is AWS's newest foundational certification, validating knowledge of artificial intelligence, machine learning, and generative AI concepts. Unlike the Cloud Practitioner which covers broad cloud topics, this exam focuses entirely on AI/ML frameworks, use cases, and AWS AI services.
What you'll learn:
- AI/ML fundamentals — supervised vs. unsupervised learning, deep learning, NLP
- Generative AI concepts — foundation models, prompt engineering, RAG (Retrieval Augmented Generation)
- AWS AI/ML services — Amazon Bedrock, SageMaker, Rekognition, Comprehend, Lex
- Responsible AI practices and ethical considerations
Practice free AWS AI Practitioner questions →
Associate Certifications
Associate-level exams validate core AWS skills and typically require around one year of hands-on experience. These are role-based certifications that align with specific job functions.
3. AWS Certified Solutions Architect — Associate (SAA-C03)
| Exam Code | SAA-C03 |
| Duration | 130 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $150 USD |
| Ideal For | Cloud architects, solutions engineers, technical consultants |
The Solutions Architect Associate is the most popular AWS certification and consistently ranks among the top cloud certifications globally. It validates your ability to design cost-effective, scalable, and resilient distributed systems on AWS.
Key exam domains:
- Design Secure Architectures (30%) — IAM, VPC, encryption, Organizations
- Design Resilient Architectures (26%) — Multi-AZ, Auto Scaling, RDS failover
- Design High-Performing Architectures (24%) — EC2 types, caching, database selection
- Design Cost-Optimized Architectures (20%) — Pricing models, right-sizing, serverless
Must-know services: EC2, S3, RDS, Aurora, DynamoDB, Lambda, VPC, CloudFront, Route 53, IAM, KMS, SQS, SNS, ECS/Fargate, and API Gateway.
Who should take this: Anyone pursuing a cloud architecture or solutions engineering career. This is the single most valuable AWS certification for most IT professionals. You don't need deep coding skills, but familiarity with programming concepts helps.
Practice free AWS Solutions Architect questions →
4. AWS Certified Developer — Associate (DVA-C02)
| Exam Code | DVA-C02 |
| Duration | 130 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $150 USD |
| Ideal For | Software developers, backend engineers, DevOps practitioners |
The Developer Associate certification validates your ability to develop, test, deploy, and debug AWS cloud-based applications. It has a strong emphasis on serverless development, CI/CD pipelines, and AWS SDKs.
Key exam domains:
- Development with AWS Services (32%) — Lambda, API Gateway, DynamoDB, S3, SDKs
- Security (26%) — IAM, Cognito, Secrets Manager, encryption
- Deployment (24%) — CodePipeline, CodeBuild, CodeDeploy, CloudFormation, SAM
- Troubleshooting and Optimization (18%) — CloudWatch, X-Ray, performance tuning
Who should take this: Software developers building applications on AWS. If your daily work involves writing code that interacts with AWS services (Lambda functions, DynamoDB queries, S3 operations), this is your cert. Overlaps significantly with the SA Associate, so earning both is a strong combination.
Practice free AWS Developer Associate questions →
5. AWS Certified CloudOps Engineer — Associate (SOA-C03)
| Exam Code | SOA-C03 |
| Duration | 130 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $150 USD |
| Ideal For | Cloud ops specialists, system admins, support engineers |
Formerly the SysOps Administrator Associate, this certification was renamed to reflect the evolving nature of cloud operations. It validates skills in monitoring, maintaining, and securing AWS workloads with a focus on operational excellence.
Key exam domains:
- Monitoring, Logging, and Remediation — CloudWatch, CloudTrail, EventBridge, automated responses
- Reliability and Business Continuity — Backup strategies, disaster recovery, fault tolerance
- Deployment, Provisioning, and Automation — CloudFormation, Systems Manager, OpsWorks
- Security and Compliance — Config, GuardDuty, Security Hub, access management
- Networking and Content Delivery — VPC configuration, Route 53, CloudFront
- Cost and Performance Optimization — Trusted Advisor, Compute Optimizer, cost allocation
Who should take this: Operations engineers, system administrators, and anyone responsible for keeping AWS workloads running smoothly in production. If you manage infrastructure day-to-day rather than designing or coding it, this is your path.
Practice free AWS CloudOps Engineer questions →
6. AWS Certified Data Engineer — Associate (DEA-C01)
| Exam Code | DEA-C01 |
| Duration | 130 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $150 USD |
| Ideal For | Data engineers, analytics engineers, ETL developers |
The Data Engineer Associate certification validates your ability to design, build, and manage data pipelines and data stores on AWS. It covers the full data lifecycle — ingestion, transformation, storage, and orchestration.
Key exam domains:
- Data Ingestion and Transformation — Kinesis, Glue, EMR, batch vs. streaming
- Data Store Management — S3, Redshift, DynamoDB, RDS, data modeling
- Data Operations and Support — Pipeline orchestration, Step Functions, MWAA
- Data Security and Governance — Lake Formation, encryption, access controls, data quality
Who should take this: Anyone working with data pipelines, warehouses, or lakes on AWS. If you're building ETL jobs, managing Redshift clusters, or orchestrating Glue workflows, this certification validates your expertise.
Practice free AWS Data Engineer Associate questions →
7. AWS Certified Machine Learning Engineer — Associate (MLA-C01)
| Exam Code | MLA-C01 |
| Duration | 130 minutes |
| Questions | 65 |
| Cost | $150 USD |
| Ideal For | ML engineers, data scientists, MLOps engineers |
The Machine Learning Engineer Associate validates your ability to implement, deploy, and operationalize ML workloads in production. It focuses heavily on Amazon SageMaker and the practical engineering side of machine learning.
Key exam domains:
- Data Preparation for ML — Feature engineering, data validation, SageMaker Processing
- ML Model Development — Training, tuning, built-in algorithms, custom containers
- Deployment and Orchestration — SageMaker endpoints, batch transform, MLOps pipelines
- ML Solution Monitoring and Maintenance — Model drift, A/B testing, retraining
Who should take this: Engineers and data scientists who build and deploy ML models on AWS. Requires at least 1 year of experience with SageMaker and ML engineering services. This is a technical, hands-on certification — not conceptual like the AI Practitioner.
Practice free AWS ML Engineer Associate questions →
Professional Certifications
Professional-level certifications represent the highest tier of role-based AWS credentials. They require 2+ years of hands-on experience and test advanced, complex scenario-based problem solving.
8. AWS Certified Solutions Architect — Professional (SAP-C02)
| Exam Code | SAP-C02 |
| Duration | 180 minutes |
| Questions | 75 (multiple choice / multiple response) |
| Cost | $300 USD |
| Ideal For | Senior architects, principal engineers, cloud consultants |
The Solutions Architect Professional is widely considered the most challenging AWS certification. It validates advanced knowledge in designing complex, multi-account, enterprise-scale architectures. Questions are long, scenario-heavy, and require deep understanding of trade-offs between services.
Key exam domains:
- Design Solutions for Organizational Complexity — Multi-account strategies, cross-region architectures, hybrid connectivity
- Design for New Solutions — Migration strategies, application modernization, serverless at scale
- Continuous Improvement for Existing Solutions — Cost optimization, performance tuning, security hardening
- Accelerate Workload Migration and Modernization — Migration Hub, DMS, replatforming strategies
Who should take this: Experienced architects who design solutions across an entire organization. If you're making enterprise-level architecture decisions, guiding migrations, or establishing cloud standards for your company, this is the ultimate validation. Earning it also automatically recertifies your SA Associate.
This certification consistently ranks among the top-paying IT certifications globally.
Practice free AWS Solutions Architect Professional questions →
9. AWS Certified DevOps Engineer — Professional (DOP-C02)
| Exam Code | DOP-C02 |
| Duration | 180 minutes |
| Questions | 75 (multiple choice / multiple response) |
| Cost | $300 USD |
| Ideal For | Senior DevOps engineers, platform engineers, SREs |
The DevOps Engineer Professional validates advanced expertise in provisioning, operating, and managing distributed systems on AWS with a focus on automation, CI/CD, and operational resilience.
Key exam domains:
- SDLC Automation — CodePipeline, CodeBuild, CodeDeploy, blue/green and canary deployments
- Configuration Management and IaC — CloudFormation, CDK, Systems Manager, OpsWorks
- Resilient Cloud Solutions — Auto-healing, multi-region HA, chaos engineering
- Monitoring and Logging — CloudWatch, X-Ray, OpenSearch, centralized logging
- Incident and Event Response — Automated remediation, EventBridge, Lambda triggers
- Security and Compliance — Secrets rotation, compliance automation, GuardDuty
Who should take this: Engineers who build and maintain CI/CD pipelines, automate infrastructure, and ensure operational excellence at scale. Requires strong knowledge of both the Developer Associate and CloudOps Engineer domains. Earning it also recertifies the CloudOps Engineer Associate.
Practice free AWS DevOps Engineer Professional questions →
10. AWS Certified Generative AI Developer — Professional (AIP-C01)
| Exam Code | AIP-C01 |
| Duration | 170 minutes |
| Questions | 65 |
| Cost | $300 USD |
| Ideal For | AI/ML engineers, full-stack developers building GenAI apps |
The Generative AI Developer Professional is one of AWS's newest certifications, launched to meet the explosive demand for generative AI skills. It validates the ability to design, develop, and optimize generative AI solutions using AWS services.
Key exam domains:
- Fundamentals of Generative AI — Foundation models, transformers, fine-tuning, prompt engineering
- Planning and Designing Gen AI Solutions — Amazon Bedrock, model selection, RAG architectures
- Developing Gen AI Applications — Agents, knowledge bases, guardrails, evaluation
- Responsible AI — Bias detection, content filtering, safety mechanisms
Who should take this: Developers and engineers actively building generative AI applications with Amazon Bedrock, LangChain, or similar frameworks. This is a deeply technical exam that assumes strong development skills and AI/ML knowledge.
Practice free AWS Generative AI Developer questions →
Specialty Certification
Specialty certifications demonstrate deep expertise in a focused technical domain. They're ideal for professionals who want to be recognized as subject-matter experts.
11. AWS Certified Security — Specialty (SCS-C03)
| Exam Code | SCS-C03 |
| Duration | 170 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $300 USD |
| Ideal For | Security engineers, compliance specialists, cloud security architects |
The Security Specialty validates your expertise in creating and implementing security solutions in the AWS Cloud. It tests deep knowledge of data protection, encryption, identity management, incident response, and logging strategies.
Key exam domains:
- Threat Detection and Incident Response — GuardDuty, Detective, Security Hub, automated remediation
- Security Logging and Monitoring — CloudTrail, Config, VPC Flow Logs, centralized SIEM
- Infrastructure Security — WAF, Shield, NACLs, security groups, network isolation
- Identity and Access Management — IAM policies, Organizations, SSO, cross-account access
- Data Protection — KMS, CloudHSM, ACM, S3 encryption, Secrets Manager
Who should take this: Security professionals responsible for securing AWS workloads. AWS recommends having at least 2 years of hands-on experience securing AWS environments. This is often the logical next step after any Professional certification.
Practice free AWS Security Specialty questions →
12. AWS Certified Advanced Networking — Specialty (ANS-C01)
| Exam Code | ANS-C01 |
| Duration | 170 minutes |
| Questions | 65 (multiple choice / multiple response) |
| Cost | $300 USD |
| Ideal For | Network engineers, cloud architects, infrastructure specialists |
The Advanced Networking Specialty validates expert-level knowledge of designing, implementing, and managing complex AWS networking solutions. It is the most technically demanding networking certification AWS offers.
Key exam domains:
- Network Design — Multi-VPC architectures, Transit Gateway, hybrid connectivity patterns
- Network Implementation — VPN, Direct Connect, PrivateLink, Route 53 Resolver
- Network Management and Operations — Monitoring, troubleshooting, automation
- Network Security, Compliance, and Governance — WAF, Shield, Network Firewall, traffic inspection
Who should take this: Network engineers and cloud architects who design and operate complex multi-VPC, hybrid, or multi-region networks. Requires deep hands-on experience with AWS networking services beyond what the SA Professional covers.
Practice free AWS Advanced Networking Specialty questions →
Recommended Certification Paths
Not sure which order to pursue? Here are three common paths based on career goals:
Path 1: Cloud Architect
- Cloud Practitioner (CLF-C02)
- Solutions Architect — Associate (SAA-C03)
- Solutions Architect — Professional (SAP-C02)
- Security — Specialty (SCS-C03)
Path 2: Cloud Developer / DevOps
- Cloud Practitioner (CLF-C02)
- Developer — Associate (DVA-C02)
- CloudOps Engineer — Associate (SOA-C03)
- DevOps Engineer — Professional (DOP-C02)
Path 3: Data & AI/ML
- Cloud Practitioner (CLF-C02) + AI Practitioner (AIF-C01)
- Data Engineer — Associate (DEA-C01)
- Machine Learning Engineer — Associate (MLA-C01)
- Generative AI Developer — Professional (AIP-C01)
Tips for Your Certification Journey
- Start foundational, go broad, then specialize. The Cloud Practitioner gives you vocabulary and context that makes every subsequent exam easier.
- Practice is non-negotiable. AWS exams are scenario-based. Reading alone won't cut it — you need to practice with realistic questions and, ideally, hands-on labs.
- Use the 50% discount. After passing any AWS exam, you get a 50% voucher for your next one. Plan your sequence to take advantage of this.
- Don't rush to Professional. Associate certifications are valuable on their own. Most employers specifically look for SA Associate — it's the most requested AWS cert in job postings.
- Stay current. AWS regularly updates exam content. Always check the latest exam guide before studying.
- Combine certs strategically. Solutions Architect + Developer + CloudOps at the Associate level covers nearly all core AWS services and makes Professional exams significantly easier.
Start Practicing Today
The best way to prepare for any AWS certification is with hands-on practice questions that include detailed explanations. We offer free practice exams to help you build confidence:
- AWS Cloud Practitioner (CLF-C02) Practice Questions
- AWS AI Practitioner (AIF-C01) Practice Questions
- AWS Solutions Architect Associate (SAA-C03) Practice Questions
- AWS Developer Associate (DVA-C02) Practice Questions
- AWS CloudOps Engineer Associate (SOA-C03) Practice Questions
- AWS Data Engineer Associate (DEA-C01) Practice Questions
- AWS ML Engineer Associate (MLA-C01) Practice Questions
- AWS Solutions Architect Professional (SAP-C02) Practice Questions
- AWS DevOps Engineer Professional (DOP-C02) Practice Questions
- AWS Generative AI Developer Professional (AIP-C01) Practice Questions
- AWS Security Specialty (SCS-C03) Practice Questions
- AWS Advanced Networking Specialty (ANS-C01) Practice Questions
Pick your starting point, build a study plan, and begin your AWS certification journey today. Every certification you earn compounds your knowledge and opens new doors.