1. Home
  2. Amazon
  3. SOA-C03 Exam Syllabus

Amazon SOA-C03 Exam Syllabus

Start Free SOA-C03 Exam Practice After Reviewing the Topics

Before starting your SOA-C03 exam preparation, it is recommended to review the complete Amazon AWS Certified CloudOps Engineer - Associate exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free SOA-C03 questions. We also provide premium SOA-C03 practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

Amazon SOA-C03 Exam Objectives

Section Objectives
Monitoring, Logging, Analysis, Remediation, and Performance Optimization Task 1.1: Implement metrics, alarms, and filters by using AWS monitoring and logging
services.
• Skill 1.1.1: Configure AWS monitoring and logging by using AWS services (for
example, Amazon CloudWatch, AWS CloudTrail, Amazon Managed Service for
Prometheus).
• Skill 1.1.2: Configure and manage the CloudWatch agent to collect metrics and
logs from EC2 instances, Amazon ECS clusters, or Amazon Elastic Kubernetes
Service (Amazon EKS) clusters.
• Skill 1.1.3: Configure, identify, and troubleshoot CloudWatch alarms that can
invoke AWS services directly or through Amazon EventBridge (for example, by
creating composite alarms and identifying their invokable actions).
• Skill 1.1.4: Create, implement, and manage customizable and shareable
CloudWatch dashboards that display metrics and alarms for AWS resources
across multiple accounts and AWS Regions.
• Skill 1.1.5: Configure AWS services to send notifications to Amazon Simple
Notification Service (Amazon SNS) and to invoke alarms that send notifications
to Amazon SNS.
Task 1.2: Identify and remediate issues by using monitoring and availability metrics.
• Skill 1.2.1: Analyze performance metrics and automate remediation strategies
by using AWS services and functionality (for example, CloudWatch, AWS User
Notifications, Lambda, Systems Manager, CloudTrail, auto scaling).
• Skill 1.2.2: Use EventBridge to route, enrich, and deliver events, and
troubleshoot any issues with event bus rules.
• Skill 1.2.3: Create or run custom and predefined Systems Manager Automation
runbooks (for example, by using AWS SDKs or custom scripts) to automate
tasks and streamline processes on AWS. 
Task 1.3: Implement performance optimization strategies for compute, storage, and
database resources.
• Skill 1.3.1: Optimize compute resources and remediate performance problems
by using performance metrics, resource tags, and AWS tools.
• Skill 1.3.2: Analyze Amazon Elastic Block Store (Amazon EBS) performance
metrics, troubleshoot issues, and optimize volume types to improve
performance and reduce cost.
• Skill 1.3.3: Implement and optimize S3 performance strategies (for example,
AWS DataSync, S3 Transfer Acceleration, multipart uploads, S3 Lifecycle
policies) to enhance data transfer, storage efficiency, and access patterns.
• Skill 1.3.4: Evaluate and select shared storage solutions (for example, Amazon
Elastic File System [Amazon EFS], Amazon FSx), and optimize the solutions (for
example, EFS lifecycle policies) for specific use cases and requirements.
• Skill 1.3.5: Monitor Amazon RDS metrics (for example, Amazon RDS
Performance Insights, CloudWatch alarms, and modify configurations to
increase performance efficiency (for example, Performance Insights proactive
recommendations, RDS Proxy).
• Skill 1.3.6: Implement, monitor, and optimize EC2 instances and their
associated storage and networking capabilities (for example, EC2 placement
groups).
Reliability and Business Continuity Task 2.1: Implement scalability and elasticity.
• Skill 2.1.1: Configure and manage scaling mechanisms in compute
environments.
• Skill 2.1.2: Implement caching by using AWS services to enhance dynamic
scalability (for example, CloudFront, Amazon ElastiCache).
• Skill 2.1.3: Configure and manage scaling in AWS managed databases (for
example, Amazon RDS, DynamoDB). 
Task 2.2: Implement highly available and resilient environments.
• Skill 2.2.1: Configure and troubleshoot Elastic Load Balancing (ELB) and
Amazon Route 53 health checks.
• Skill 2.2.2: Configure fault-tolerant systems (for example, Multi-AZ
deployments).
Task 2.3: Implement backup and restore strategies.
• Skill 2.3.1: Automate snapshots and backups for AWS resources (for example,
EC2 instances, RDS DB instances, EBS volumes, S3 buckets, DynamoDB tables)
by using AWS services (for example, AWS Backup).
• Skill 2.3.2: Use various methods to restore databases (for example, point-intime restore) to meet recovery time objective (RTO), recovery point objective
(RPO), and cost requirements.
• Skill 2.3.3: Implement versioning for storage services (for example, Amazon S3,
Amazon FSx).
• Skill 2.3.4: Follow disaster recovery procedures.
Deployment, Provisioning, and Automation Task 3.1: Provision and maintain cloud resources.
• Skill 3.1.1: Create and manage AMIs and container images (for example, EC2
Image Builder).
• Skill 3.1.2: Create and manage stacks of resources by using CloudFormation
and the AWS Cloud Development Kit (AWS CDK).
• Skill 3.1.3: Identify and remediate deployment issues (for example, subnet
sizing issues, CloudFormation errors, permissions issues).
• Skill 3.1.4: Provision and share resources across multiple Regions and accounts
(for example, AWS Resource Access Manager [AWS RAM], CloudFormation
StackSets).
• Skill 3.1.5: Implement deployment strategies and services.
• Skill 3.1.6: Use and manage third-party tools to automate resource deployment
(for example, Terraform, Git). 
Task 3.2: Automate the management of existing resources.
• Skill 3.2.1: Use AWS services to automate operational processes (for example,
Systems Manager).
• Skill 3.2.2: Implement event-driven automation by using AWS services and
features (for example, Lambda, S3 Event Notifications).
Security and Compliance Task 4.1: Implement and manage security and compliance tools and policies.
• Skill 4.1.1: Implement AWS Identity and Access Management (IAM) features
(for example, password policies, multi-factor authentication [MFA], roles,
federated identity, resource policies, policy conditions).
• Skill 4.1.2: Troubleshoot and audit access issues by using AWS tools (for
example, CloudTrail, IAM Access Analyzer, IAM policy simulator).
• Skill 4.1.3: Implement multi-account strategies securely.
• Skill 4.1.4: Implement remediation based on the results of AWS Trusted
Advisor security checks.
• Skill 4.1.5: Enforce compliance requirements (for example, Region and service
selections).
Task 4.2: Implement strategies to protect data and infrastructure.
• Skill 4.2.1: Implement and enforce a data classification scheme.
• Skill 4.2.2: Implement, configure, and troubleshoot encryption at rest (for
example, AWS Key Management Service [AWS KMS]).
• Skill 4.2.3: Implement, configure, and troubleshoot encryption in transit (for
example, AWS Certificate Manager [ACM]).
• Skill 4.2.4: Securely store secrets by using AWS services.
• Skill 4.2.5: Configure reports and remediate findings from AWS services (for
example, Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector). 
Networking and Content Delivery Task 5.1: Implement and optimize networking features and connectivity.
• Skill 5.1.1: Configure a VPC (for example, subnets, route tables, network ACLs,
security groups, NAT gateways, internet gateway, egress-only internet
gateway).
• Skill 5.1.2: Configure private networking connectivity.
• Skill 5.1.3: Audit AWS network protection services (for example, Route 53
Resolver DNS Firewall, AWS WAF, AWS Shield, AWS Network Firewall) in a
single account.
• Skill 5.1.4: Optimize the cost of network architectures.
Task 5.2: Configure domains, DNS services, and content delivery.
• Skill 5.2.1: Configure DNS (for example, Route 53 Resolver).
• Skill 5.2.2: Implement Route 53 routing policies, configurations, and query
logging.
• Skill 5.2.3: Configure content and service distribution (for example, CloudFront,
AWS Global Accelerator).
Task 5.3: Troubleshoot network connectivity issues.
• Skill 5.3.1: Troubleshoot VPC configurations (for example, subnets, route
tables, network ACLs, security groups, transit gateways, NAT gateways).
• Skill 5.3.2: Collect and interpret networking logs to troubleshoot issues (for
example, VPC flow logs, ELB access logs, AWS WAF web ACL logs, CloudFront
logs, container logs).
• Skill 5.3.3: Identify and remediate CloudFront caching issues.
• Skill 5.3.4: Identify and troubleshoot hybrid connectivity issues and private
connectivity issues.
• Skill 5.3.5: Configure and analyze CloudWatch network monitoring services.
Official Information https://aws.amazon.com/certification/certified-cloudops-engineer-associate/