Third highest weight domain. Focuses on making existing architectures better — more observable, more cost-efficient, more reliable, and more performant. Expect ~16 questions.
What This Domain Tests
- Improving observability with CloudWatch, CloudTrail, X-Ray, and Systems Manager
- Optimizing costs with Cost Explorer, Compute Optimizer, and Trusted Advisor
- Improving reliability with Well-Architected reviews, Backup, and resilience patterns
- Identifying and resolving performance bottlenecks
- Automating operational tasks with Systems Manager
- Managing service quotas and capacity
Subdomain Breakdown
| Subdomain | Key Services |
|---|---|
| 3.1 Determine a strategy to improve overall operational excellence | Systems Manager, CloudFormation, Config, CloudTrail |
| 3.2 Determine a strategy to improve security | Security Hub, GuardDuty, IAM Access Analyzer, Macie |
| 3.3 Determine a strategy to improve performance | CloudWatch, X-Ray, Compute Optimizer, ElastiCache |
| 3.4 Determine a strategy to improve reliability | Backup, Resilience Hub, Route 53, Auto Scaling |
| 3.5 Identify opportunities for cost optimizations | Cost Explorer, Trusted Advisor, Savings Plans, S3 lifecycle |
Task names aligned to the official SAP-C02 exam guide. The guide may change; recheck before exam day.
Files in This Domain
Monitoring/
- CloudWatch-General.md — metrics, alarms, dashboards, Logs Insights, Container Insights
- CloudTrail-General.md — trails, event history, Lake, Insights
- XRay-General.md — distributed tracing, service maps, sampling
- SystemsManager-General.md — Parameter Store, Secrets Manager, Run Command, Patch Manager, Session Manager
CostOptimization/
- CostExplorer-General.md — cost analysis, forecasting, rightsizing
- ComputeOptimizer-General.md — ML-based rightsizing recommendations
- TrustedAdvisor-General.md — checks across six categories; plan availability changes over time
Standalone
- WellArchitected-Tool-General.md — framework reviews, lenses, improvement plans
- Backup-General.md — centralized backup, policies, cross-region, cross-account
- Resilience-Patterns-General.md — DR strategies, RTO/RPO, multi-region patterns
- Elastic-Disaster-Recovery-General.md — block replication, drills, recovery launch, failback
- ServiceQuotas-General.md — quota management, monitoring, increase requests
Key Architecture Patterns
Observability Stack
Application → CloudWatch Metrics + Logs
→ X-Ray Traces
→ CloudTrail API Audit
→ CloudWatch Dashboards + Alarms → SNS → PagerDuty/SlackCost Optimization Loop
Cost Explorer (analyze) → Compute Optimizer (rightsize)
→ Trusted Advisor (check) → Savings Plans (commit)
→ S3 Lifecycle (tier) → Reserved Capacity (plan)Reliability Improvement
Well-Architected Review → identify gaps
→ AWS Backup (protect data)
→ Multi-AZ / Multi-Region (reduce selected failure risks)
→ Auto Scaling (handle load)
→ Route 53 health checks (detect failures)Exam Tips
- CloudWatch is the answer for metrics, alarms, and log aggregation — know Logs Insights queries
- X-Ray is the answer for distributed tracing and latency analysis across microservices
- Systems Manager replaces SSH/RDP — Session Manager, Run Command, Patch Manager
- Compute Optimizer = ML-based rightsizing; Trusted Advisor = broad best practice checks
- AWS Backup = centralized, policy-driven backup across services and accounts
- Well-Architected Tool = structured review against the 6 pillars — know the pillars cold
- DR strategies: Backup/Restore → Pilot Light → Warm Standby → Multi-Site Active-Active (increasing cost and decreasing RTO)
- Service Quotas + CloudWatch alarms = proactive quota monitoring before hitting limits
Domain 3: Continuous Improvement
Backup General
Exam relevance: Domains 2, 3. AWS Backup is the centralized backup service. Know backup plans, vaults, cross-region/cross-account backup, and supported services.
1. Overview AWS …
read moreDomain 3: Continuous Improvement
Cloudtrail General
Exam relevance: Domains 1, 3. CloudTrail is the API audit log for AWS. Know trail types, event types, CloudTrail Lake, and Insights.
1. Overview AWS CloudTrail records API calls …
read moreDomain 3: Continuous Improvement
Cloudwatch General
Exam relevance: Domains 2, 3, 4. CloudWatch is the observability foundation. Know metrics, alarms, Logs Insights, dashboards, Container Insights, and cross-account observability. …
read moreDomain 3: Continuous Improvement
Computeoptimizer General
Exam relevance: Domain 3 (25%). Compute Optimizer uses ML to recommend optimal resource configurations. Know supported resources, recommendation types, and how it differs from …
read moreDomain 3: Continuous Improvement
Costexplorer General
Exam relevance: Domain 3 (25%). Cost Explorer is the primary tool for analyzing and forecasting AWS costs. Know filtering, grouping, rightsizing recommendations, and Savings Plans …
read moreDomain 3: Continuous Improvement
Elastic Disaster Recovery General
Exam relevance: Domain 3. AWS Elastic Disaster Recovery (AWS DRS) continuously replicates supported source servers to a low-cost staging area in AWS and supports recovery launches …
read moreDomain 3: Continuous Improvement
Resilience Patterns General
Exam relevance: Domains 2, 3. DR strategies and resilience patterns are core SAP-C02 topics. Know the 4 DR strategies, RTO/RPO trade-offs, and multi-region patterns cold.
1. RTO …
read moreDomain 3: Continuous Improvement
Servicequotas General
Exam relevance: Domain 3 (25%). Service Quotas is the centralized way to view and request quota increases. Know how to monitor quotas proactively and integrate with CloudWatch.
1. …
read moreDomain 3: Continuous Improvement
Systemsmanager General
Exam relevance: Domains 2, 3. Systems Manager is the operational backbone for EC2 and hybrid environments. Know Parameter Store, Session Manager, Run Command, Patch Manager, and …
read moreDomain 3: Continuous Improvement
Trustedadvisor General
Exam relevance: Domains 1 and 3. Trusted Advisor provides checks across six categories. These are not the six Well-Architected pillars. Check availability depends on the current …
read moreDomain 3: Continuous Improvement
Wellarchitected Tool General
Exam relevance: Domain 3 (25%). The Well-Architected Framework and Tool are the structured approach to architecture improvement. Know the 6 pillars, key design principles, and how …
read moreDomain 3: Continuous Improvement
Xray General
Exam relevance: Domains 2, 3. X-Ray is the distributed tracing service. Know service maps, sampling, annotations, and integration with Lambda, ECS, and API Gateway.
1. Overview …
read more