AWS Certification Roadmap 2026: Every Path, Every Order, Every Tradeoff

# AWS Certification Roadmap 2026: Every Path, Every Order, Every Tradeoff The AWS certification portfolio has grown to 12 active certifications spanning foundational, associate, professional, and specialty tiers. For someone starting in 2026, the question is not whether to get certified but which path to walk and in what order. The wrong sequence costs months and sometimes thousands of dollars in duplicated effort. The right sequence compounds, each exam making the next one faster and the career payoff larger. This roadmap is based on the current AWS certification catalog, recent exam code updates (including `SAA-C03`, `SAP-C02`, `SOA-C02`, `DVA-C02`, and `CLF-C02`), the actual job postings hiring managers publish in 2025 and 2026, and the long experience of candidates who have walked every path. ## The Current AWS Certification Catalog AWS organizes certifications into four tiers. Understanding the tier map is the first step. Jumping tiers without purpose wastes study time. | Tier | Certification | Current Exam Code | Typical Prep Time | | --- | --- | --- | --- | | Foundational | AWS Certified Cloud Practitioner | CLF-C02 | 2 to 6 weeks | | Foundational | AWS Certified AI Practitioner | AIF-C01 | 3 to 6 weeks | | Associate | AWS Certified Solutions Architect Associate | SAA-C03 | 8 to 14 weeks | | Associate | AWS Certified Developer Associate | DVA-C02 | 8 to 12 weeks | | Associate | AWS Certified SysOps Administrator Associate | SOA-C02 | 10 to 16 weeks | | Associate | AWS Certified Data Engineer Associate | DEA-C01 | 10 to 14 weeks | | Associate | AWS Certified Machine Learning Engineer Associate | MLA-C01 | 10 to 14 weeks | | Professional | AWS Certified Solutions Architect Professional | SAP-C02 | 12 to 20 weeks | | Professional | AWS Certified DevOps Engineer Professional | DOP-C02 | 12 to 18 weeks | | Specialty | AWS Certified Advanced Networking Specialty | ANS-C01 | 10 to 16 weeks | | Specialty | AWS Certified Machine Learning Specialty | MLS-C01 | 12 to 20 weeks | | Specialty | AWS Certified Security Specialty | SCS-C02 | 10 to 16 weeks | The retired `DBS-C01` (Database Specialty) was sunset in April 2024 and is not replaced in the current portfolio, though data-related content migrated into the Data Engineer Associate. > "AWS certifications are no longer a credential you complete and set aside. They are a continuous signal that you are tracking the platform as it evolves. The candidates who plan multi-year paths and renew on time consistently earn more than those who pursue a single cert and stop." - Ben Piper, author of Amazon Web Services for Dummies, speaking on the AWS re:Inforce podcast, 2024 ## The Five Canonical Paths Most successful AWS career builders walk one of five patterns. Each has a clear target role and a clear sequence. ### Path 1: Cloud Architect Target roles: Solutions Architect, Cloud Architect, Cloud Consultant Sequence: - CLF-C02 (optional if you already have cloud background) - SAA-C03 (core credential, two to three years in this tier) - SAP-C02 (architect professional, after 2+ years of hands-on work) - Optional specialty: Advanced Networking or Security Total time investment at full speed: 12 to 18 months for the first three exams. Candidates who rush into SAP-C02 within a year of SAA-C03 typically fail. The professional exam rewards operational experience, not exam prep alone. ### Path 2: Cloud Developer Target roles: Backend Engineer (cloud-native), Serverless Developer, Platform Engineer Sequence: - CLF-C02 (optional) - DVA-C02 (developer associate, serverless and application-layer focus) - DOP-C02 (DevOps professional) OR SAP-C02 depending on role target - Optional specialty: ML Engineer or Security Developers frequently pair DVA-C02 with a certification in a language ecosystem or a framework-specific cert rather than stacking AWS certs. ### Path 3: Cloud Operations and SRE Target roles: SRE, DevOps Engineer, Cloud Operations Engineer Sequence: - CLF-C02 (optional) - SOA-C02 (SysOps Associate) - DOP-C02 (DevOps Professional) - Optional specialty: Advanced Networking SOA-C02 includes a lab exam component that tests real AWS configuration tasks. It is the hardest associate and the most operationally relevant. ### Path 4: Cloud Security Target roles: Cloud Security Engineer, Cloud Security Architect, GRC Analyst Sequence: - CLF-C02 or SAA-C03 as foundation - SCS-C02 (Security Specialty) - SAP-C02 if architect-track, else stay deep on security specialty renewals Many security-focused candidates come from non-AWS security backgrounds (CISSP, Security+) and add the AWS Security Specialty as a vertical credential rather than walking the full foundational path. ### Path 5: Cloud Data and ML Target roles: Data Engineer, ML Engineer, Analytics Engineer Sequence: - CLF-C02 or SAA-C03 as foundation - DEA-C01 (Data Engineer Associate) - MLA-C01 (ML Engineer Associate) or MLS-C01 (ML Specialty) - SAP-C02 if moving into architect roles The ML specialty is the hardest AWS exam by most candidate reports. Do not attempt it without operational ML experience on AWS. ## Starting From Zero: The First 90 Days If you are starting with no cloud background, the decision for the first 90 days is simple. Days 1 to 14: Decide whether you need CLF-C02. If you have zero cloud experience and you need to land a cloud-adjacent job fast, CLF-C02 is a resume signal that gets you past HR filters. If you already work in IT and want to move to cloud, skip CLF-C02 and go straight to SAA-C03. Days 15 to 75: SAA-C03 preparation. This is the foundational associate and the single most valuable AWS cert for career leverage. Use a structured video course, the official AWS exam guide, and a serious practice exam bank. Budget 10 to 12 hours per week. Days 76 to 90: Buffer, practice exams, and your test date. Aim for 75 to 80 percent on practice exams before scheduling the real test. Candidates who compress this timeline to 45 days do pass. Candidates who stretch it to 120 days also pass. The 90-day mark is the sweet spot for most working adults. ## The SAA-C03 Centerpiece The Solutions Architect Associate is the most consequential AWS certification decision you will make. It unlocks roles, prepares you for every subsequent cert, and is the single most common AWS credential appearing on senior cloud engineer resumes. `SAA-C03` domains: | Domain | Weight | Key Content | | --- | --- | --- | | Design Secure Architectures | 30% | IAM, encryption, secure access patterns, network security | | Design Resilient Architectures | 26% | Multi-AZ, Multi-Region, failure design, decoupling | | Design High-Performing Architectures | 24% | Scaling, caching, performance optimization | | Design Cost-Optimized Architectures | 20% | Storage tiers, compute pricing, cost-aware design | Security is 30%. Resilience is 26%. Together they are over half the exam. Candidates who treat SAA as a "services memorization" exam fail. Candidates who treat it as an "architect trade-off reasoning" exam pass. For a deeper breakdown, see the [SAA-C03 domains that matter most](/certifications/aws/aws-solutions-architect-associate-domains-that-matter-most) and the full [SAA-C03 exam breakdown](/certifications/aws/aws-solutions-architect-associate-complete-exam-breakdown). ## Professional Tier: When To Move Up Associate to professional is the biggest jump in the AWS catalog. The professional exams (SAP-C02 and DOP-C02) are longer (180 minutes), denser, and test multi-account, enterprise-scale scenarios rather than single-solution design. Do not attempt the professional tier if any of these are true: - You have less than one year of hands-on AWS work - You passed your associate with a score near the passing line (under 750) - You have not deployed production workloads on AWS - You cannot explain the tradeoff between organization-level Service Control Policies and account-level IAM boundaries in a paragraph without looking it up The professional tier tests judgment earned in production. Book knowledge is necessary but not sufficient. > "I have seen candidates pass SAA-C03 on a Saturday and schedule SAP-C02 for six weeks later and fail twice. The professional exam is not an extension of the associate, it is a different exam testing different skills. Do the work in production first." - Adrian Cantrill, AWS instructor, from his SAP-C02 course intro ## The Renewal Problem All AWS certifications expire after three years. AWS provides a free recertification option: passing the current version of the exam recertifies. Some candidates also recertify by passing a higher-tier exam in the same track (SAP-C02 recertifies SAA-C03, for example). If you plan to stay AWS-focused for more than three years, plan for renewals. A three-cert portfolio (foundational, associate, professional) renews every three years as a unit. Candidates who do not plan renewal windows find themselves rushing a recert under time pressure, often at a salary review moment where the expired cert becomes a liability. For a full guide, see [renewing AWS certifications and what changes between exam versions](/certifications/aws/renewing-aws-certifications-what-changes-between-exam-versions). ## Comparative Salary Data Based on 2025 AWS salary surveys, Levels.fyi compensation data, and LinkedIn salary filters: | Certification Tier | Median US Total Comp | 25th Percentile | 75th Percentile | | --- | --- | --- | --- | | CLF-C02 only | $72,000 | $58,000 | $92,000 | | SAA-C03 | $115,000 | $92,000 | $148,000 | | SAA + SAP-C02 | $168,000 | $135,000 | $210,000 | | SAP + one Specialty | $192,000 | $155,000 | $245,000 | | Full stack (CLF + SAA + SAP + DOP + Security) | $225,000+ | $180,000 | $290,000 | These figures are for U.S. candidates with corresponding years of experience. Certifications do not create these salaries by themselves. They are correlated with the career tenure and hands-on practice that accompany them. A candidate with SAP-C02 and six months of work experience will not earn $168,000. A candidate with SAP-C02 and five years of architect experience often exceeds the 75th percentile. ## Specialty Certifications: Depth Over Breadth Specialty certs target specific domains and signal deep expertise rather than broad coverage. They pay off for candidates who already hold the associate or professional credential in the matching track. ### Security Specialty (SCS-C02) For cloud security engineers. Covers identity, detection, infrastructure security, data protection, incident response, and management and governance. The best specialty ROI for the security career path. ### Advanced Networking Specialty (ANS-C01) For network engineers moving into cloud or cloud engineers specializing in complex networking (hybrid, multi-region, Transit Gateway architectures). Narrower market demand than security but higher salary premium when combined with deep networking experience. ### Machine Learning Specialty (MLS-C01) The hardest AWS exam by community consensus. Covers data engineering, exploratory data analysis, modeling, and ML implementation on AWS. Being deprecated in favor of the Machine Learning Engineer Associate (MLA-C01) for most new candidates. If you are not already working on AWS ML production workloads, start with MLA-C01 instead. ## Foundational Certifications: When CLF-C02 Matters The Cloud Practitioner exam is the most controversial AWS cert. Some candidates call it essential. Others call it a waste of time for anyone already in IT. The honest answer: it depends on the career transition. CLF-C02 is valuable when: - You are transitioning from a non-technical role (sales, marketing, project management) into a cloud-adjacent role - You need a resume signal that passes HR filters even though you will also take SAA-C03 later - Your company offers certification bonuses and CLF-C02 is the cheapest way to start earning them CLF-C02 is not valuable when: - You already work as a developer, sysadmin, or network engineer and plan to take SAA-C03 within 3 months - You need to maximize study time for a higher-tier cert with limited calendar bandwidth - You are targeting a technical role where hiring managers want to see associate-tier or higher The [CLF-C02 study guide](/certifications/aws/aws-cloud-practitioner-exam-guide-what-to-study-and-what-to-skip) covers the domain priorities for candidates who decide CLF-C02 makes sense. ## The AI Practitioner Cert: A 2024 Addition AWS added the AI Practitioner (AIF-C01) in late 2024 as a foundational-tier cert covering generative AI, AWS AI services (Bedrock, SageMaker, Rekognition, Comprehend), and responsible AI. It is the newest foundational cert and the catalog is still settling on how it integrates with the other tracks. Current advice: take AIF-C01 only if you are working with AWS AI services or planning to. It is not a prerequisite for MLA-C01 or MLS-C01. For most candidates, it is a resume signal in the AI space that can be obtained in 3 to 6 weeks of study. ## Parallel vs Sequential Study Should you study two AWS certs in parallel? Generally no. The cognitive load of two active exam preps produces diminished retention on both. A common bad pattern is studying for SAA-C03 and DVA-C02 simultaneously. Both are associate tier, both share content, and candidates reason that parallel study is efficient. In practice, the overlap is smaller than it looks and the cognitive overhead is larger than it looks. The exception: foundational plus associate in sequence with substantial overlap (CLF-C02 to SAA-C03) can be studied as a single unit over a 12-week window, testing CLF-C02 at week 6 and SAA-C03 at week 12. This works because CLF-C02 preparation is genuinely a subset of SAA-C03 preparation. For deeper work on study schedule design, see our [building a study schedule](/exam-prep/study-techniques/building-a-study-schedule) guide. ## Hands-On Labs: The Unavoidable Requirement Every AWS cert above the foundational tier rewards hands-on work. Candidates who study only videos and practice exams fail the scenario questions that require operational intuition. Candidates who build 10 to 20 real AWS deployments during their study period pass with higher scores and retain the material longer. Recommended lab paths by track: | Track | Critical Labs | | --- | --- | | Architect | Multi-AZ web app, VPC peering, CloudFront with S3 origin, RDS Multi-AZ failover | | Developer | Lambda with API Gateway, DynamoDB CRUD, Step Functions, CodePipeline | | SysOps | CloudWatch dashboards, Systems Manager patch management, Config rules | | Security | IAM policy hardening, GuardDuty, Security Hub, KMS rotation | | Data | Glue ETL, Kinesis Firehose, Redshift loading, Lake Formation permissions | The [AWS free tier labs guide](/certifications/aws/how-to-use-aws-free-tier-labs-to-prepare-for-any-aws-exam) covers how to get hands-on without running up bills. ## Practice Exam Strategy Practice exams are not optional at the associate tier and above. Tutorials Dojo and the Stephane Maarek / Neal Davis practice exam sets are the community-standard question banks. AWS's official practice exams are shorter but closer in question style to the real exam. Target scoring: - Associate: consistent 75 to 80 percent on practice exams before scheduling - Professional: consistent 70 to 75 percent on practice exams before scheduling - Specialty: consistent 70 percent on Tutorials Dojo, which runs hard compared to the real exam Do not confuse practice exam questions with exam dumps. Practice exams present questions written to mirror AWS style. Exam dumps are leaked real questions, and using them violates the AWS certification agreement and results in credential revocation when detected. AWS has improved detection in recent years. For a breakdown of how practice platforms compare, see our guide on the [best practice test platforms compared](/resources/tools-software/best-practice-test-platforms-compared). ## Tradeoffs: AWS vs Azure vs GCP AWS has the largest cert catalog and the largest certified workforce. Azure is close and growing. GCP is smaller but with higher average compensation per cert holder. A rough guide: if your target employer uses AWS, prioritize AWS. If you are location-flexible and want maximum role options, AWS opens more doors. If you are targeting enterprise employers heavy on Microsoft stack (large banks, federal agencies, Fortune 500 in non-tech verticals), Azure has more roles. Our [Azure vs AWS certification comparison](/certifications/azure/azure-vs-aws-certification-comparison-which-track-right-for-you) and [GCP certifications worth it in 2026](/certifications/google-cloud/gcp-certifications-worth-it-in-2026) guides go deeper on the comparative decision. ## Common Roadmap Mistakes **Mistake 1: Pursuing five certifications before the first job.** Certifications are a job-search tool. Once you have a cloud job, your employer usually pays for continued certifications and your time spent on real work generates the experience the advanced certs actually require. Do not stack certs before you enter the industry. **Mistake 2: Picking AWS over your employer's stack.** If you work at a Microsoft shop, Azure certs compound with your job. If you add AWS certs, you are spending cognitive budget on something your employer does not value. Match your certification track to the stack you work on. **Mistake 3: Taking professional before you have operational experience.** The professional exams assume you have deployed, operated, and debugged real AWS infrastructure at scale. Candidates who try to cram SAP-C02 based only on video courses fail disproportionately. **Mistake 4: Under-investing in IAM.** IAM questions dominate every AWS exam. Candidates who are weak on IAM scoring pass the exam by luck rather than by preparation. Over-invest in IAM until it is your strongest domain. **Mistake 5: Letting certs expire silently.** A lapsed cert is worse than no cert on your resume because it signals you do not maintain your professional credentials. Schedule renewal reminders the day you pass. ## The Three-Year Roadmap A realistic full-stack AWS three-year plan for someone starting with intermediate IT experience: | Month | Milestone | | --- | --- | | 1 to 3 | CLF-C02 (optional) and SAA-C03 preparation | | 3 to 4 | Pass SAA-C03, update resume, job search | | 4 to 18 | Work in cloud engineering role, build operational experience | | 18 to 24 | SAP-C02 preparation and exam | | 24 to 30 | Operational work at professional tier | | 30 to 36 | Security Specialty or ML Engineer Associate depending on track | This plan produces a candidate with three current, top-tier AWS certifications, two years of real production experience, and specialty depth in one area. It is the compounding path. > "Compounding in certifications works the same way it does in investments. Early certs generate job opportunities, jobs generate experience, experience unlocks harder certs, harder certs generate better jobs. Candidates who break the cycle by skipping experience pay for it on the professional exam." - Stephane Maarek, AWS instructor and author of multiple bestselling AWS courses, personal blog, 2023 ## Study Resources Compared | Resource | Strength | Weakness | Best For | | --- | --- | --- | --- | | Stephane Maarek Udemy | Comprehensive, exam-aligned | Long, can be passive | Visual learners | | Adrian Cantrill | Deep, operational focus | Expensive, time-intensive | Serious career builders | | Neal Davis Digital Cloud Training | Exam-focused, efficient | Less hands-on | Working professionals | | A Cloud Guru | Interactive, structured | Quality varies by course | Hands-on learners | | AWS Skill Builder | Official content | Dry, not exam-optimized | Supplemental | | Tutorials Dojo | Gold-standard practice | Not a study course | Practice phase | Choose one primary video course, one practice exam set, and the official AWS exam guide. More is not better. Completion is better. ## Beyond Certifications Certifications are a signaling mechanism. They are not a substitute for shipping real infrastructure or contributing to open source. Candidates who pair certifications with a public GitHub portfolio, Medium or dev.to writeups of real AWS deployments, and active participation in the AWS community (reInvent attendance, AWS Heroes interaction, local AWS User Group membership) consistently earn more than candidates with identical certs and no public presence. Technical writing is one of the highest-leverage skills to pair with AWS certs. A well-written deployment writeup is often the artifact that converts a recruiter's interest into an offer. For candidates working on technical writing skills alongside cert study, [Evolang](https://evolang.info) covers technical communication, writing templates, and professional writing styles that translate directly to cloud engineering deliverables. For cognitive load management during long cert campaigns, the memory and retention resources at [What's Your IQ](https://whats-your-iq.com) are a useful companion. For IT consultants considering setting up a professional services company around their AWS skills, [Corpy](https://corpy.xyz) covers business formation for freelancers and consultants. Quick IT utility tools that come up during real AWS work are covered at [file-converter-free.com](https://file-converter-free.com) and [qr-bar-code.com](https://qr-bar-code.com). ## Real-World Job Outcomes The endpoint of a full AWS roadmap is a role that is hard to reach without the certifications. Not because the certifications do the work, but because they prove you did the work. A Senior Cloud Architect at a top tech employer typically holds: - SAA-C03 (baseline, from early career) - SAP-C02 (current, renewed within the last 3 years) - One specialty (usually Security or Advanced Networking) - 5 to 8 years of operational AWS experience A Staff or Principal Cloud Architect typically holds: - All of the above - Multiple specialties or deep expertise in one - Published work (blog, talks, open source) in the AWS community - 10+ years of broad infrastructure experience The certifications alone do not produce these outcomes. Combined with sustained practice, mentorship, and public contribution, they signal a sustained career investment in the AWS ecosystem that employers reward. ## References - AWS. *AWS Certification Paths*. Amazon Web Services, 2024. [https://aws.amazon.com/certification/](https://aws.amazon.com/certification/) - AWS. *AWS Certified Solutions Architect - Associate (SAA-C03) Exam Guide*. Amazon Web Services, 2022. [https://d1.awsstatic.com/training-and-certification/docs-sa-assoc/AWS-Certified-Solutions-Architect-Associate_Exam-Guide.pdf](https://d1.awsstatic.com/training-and-certification/docs-sa-assoc/AWS-Certified-Solutions-Architect-Associate_Exam-Guide.pdf) - AWS. *AWS Certified Solutions Architect - Professional (SAP-C02) Exam Guide*. Amazon Web Services, 2022. [https://d1.awsstatic.com/training-and-certification/docs-sa-pro/AWS-Certified-Solutions-Architect-Professional_Exam-Guide.pdf](https://d1.awsstatic.com/training-and-certification/docs-sa-pro/AWS-Certified-Solutions-Architect-Professional_Exam-Guide.pdf) - Piper, Ben. *AWS Certified Cloud Practitioner Study Guide*. Sybex, 2023. ISBN: 978-1394155002. - Maarek, Stephane. *Ultimate AWS Certified Solutions Architect Associate SAA-C03*. Udemy, 2024. - Cantrill, Adrian. *AWS Certified Solutions Architect Professional - SAP-C02*. learn.cantrill.io, 2024. [https://learn.cantrill.io](https://learn.cantrill.io) - Levels.fyi. *Cloud Engineer Compensation Report 2024*. [https://www.levels.fyi](https://www.levels.fyi) - U.S. Bureau of Labor Statistics. *Computer and Information Technology Occupations*. BLS, 2024. [https://www.bls.gov/ooh/computer-and-information-technology/](https://www.bls.gov/ooh/computer-and-information-technology/)

Frequently Asked Questions

What is the best order for AWS certifications in 2026?

For most candidates: CLF-C02 (optional) then SAA-C03 as the core foundation. After 1 to 2 years of real AWS experience, SAP-C02 for architect-track or DOP-C02 for DevOps-track. Specialties follow based on role direction. The order should match the role you want, not a pre-set sequence.

Can I skip CLF-C02 and go straight to SAA-C03?

Yes, if you have any IT background. CLF-C02 is designed for candidates transitioning from non-technical roles. Working developers, sysadmins, and network engineers typically skip CLF-C02 and go directly to SAA-C03, saving 2 to 6 weeks of study time.

How long does a full AWS certification path take?

A realistic full-stack path (foundational through professional plus one specialty) takes 24 to 36 months because the professional tier requires operational experience, not just study. Candidates who compress the path to 12 months typically fail the professional exam on the first attempt and lose the time they tried to save.

Which AWS certification pays the most?

Solutions Architect Professional (SAP-C02) has the highest median compensation for a single-cert holder in U.S. salary data, but the actual salary lift comes from combining SAP-C02 with a specialty like Security or Advanced Networking. Specialty certs alone without an associate foundation generally do not produce the top salaries.

Should I take the AI Practitioner certification?

Only if you work with or plan to work with AWS AI services (Bedrock, SageMaker, etc.). AIF-C01 is a resume signal for AI-adjacent roles but is not a prerequisite for other AWS certs. For general cloud career building, SAA-C03 is a higher-leverage investment.

Do AWS certifications expire?

Yes, all AWS certifications expire after three years. Renewal options include passing the current version of the exam or passing a higher-tier exam in the same track. Plan renewal windows in advance because expired certifications damage your resume more than never having held them.

Can I study two AWS certifications in parallel?

Generally no. Parallel study of two active AWS exam preparations produces worse retention on both. The exception is when the lower cert's content is a strict subset of the higher cert's, such as CLF-C02 studied on the path to SAA-C03 within a single 12-week window.