What Comes After AWS Solutions Architect Associate?

Option 3: A Specialty — which now means Security

The Specialty tier has thinned out considerably, and anyone planning "SAA then a Specialty" needs the 2026 map, not the 2023 one:

• Security – Specialty (SCS-C03) is current and updated — the SCS-C03 version added generative AI and machine learning security coverage with restructured detection and incident-response domains. 65 questions, 170 minutes, $300 USD, 750 scaled to pass.
• Advanced Networking – Specialty (ANS-C01) is being retired: the last day to take it is 31 December 2026, with no announced successor. A certification earned before then stays active for the standard three years, but building a 2027 plan around it makes little sense unless you are a networking specialist who wants the credential while it exists.
• Machine Learning – Specialty (MLS-C01) retired on 31 March 2026 and can no longer be taken. Candidates with ML ambitions now look to the Machine Learning Engineer – Associate or, at Professional level, the new Generative AI Developer certification.
• The Database, Data Analytics and SAP on AWS specialties all retired back in April 2024.

So for an SAA holder in 2026, "take a Specialty" effectively means "take Security – Specialty", unless you fall into the narrow networking window above. That is not a downgrade: security scenarios thread through the SAA exam already, and SCS-C03 deepens exactly the domains — IAM, encryption, logging, incident response — that architects get challenged on in real design reviews. The Security Specialty certification guide has the full blueprint.

One caution on renewals: Specialty certifications renew only by retaking the current Specialty exam. No higher-level exam covers them, and they cover nothing beneath them — SCS-C03 will not renew your SAA.

Choose SCS-C03 if: security is a growing share of your responsibilities, or you want a differentiator that pairs unusually well with the architect credential.

Option 4: A second Associate — the honest assessment

Adding Developer – Associate (DVA-C02) or Data Engineer – Associate (DEA-C01) after SAA is the lowest-risk move: same $150 USD price tier, same 65-question/130-minute format family, same 720 passing score, and meaningful overlap with what you already studied. It is the right call in two situations — you are pivoting towards application development or data engineering, or you want a confidence-building second win before a Professional attempt.

It is the wrong call as a default. Two associates signal breadth at the same level; a Professional signals depth at the next one, and hiring managers reading a CV generally weight the latter. If neither pivot applies to you, put the voucher towards a Professional exam instead.

Side by side: your candidate next exams

As of 2026 (USD list prices; local pricing and taxes vary — confirm on AWS's certification pages):

Factor	SAP-C02 (Architect Pro)	DOP-C02 (DevOps Pro)	SCS-C03 (Security Specialty)	DVA-C02 / DEA-C01 (2nd Associate)
Difficulty jump from SAA	Large	Large	Moderate–large	Small
Prerequisites	None (2+ yrs design recommended)	None (2+ yrs ops recommended)	None (specialty depth expected)	None
Format	75 Qs, 180 min	75 Qs, 180 min	65 Qs, 170 min	65 Qs, 130 min
Cost (before voucher)	$300	$300	$300	$150
Passing score (scaled)	750	750	750	720
Renews your SAA?	Yes	No	No	No
Best for	Architects, senior IC track	Platform/SRE/DevOps roles	Security-leaning engineers	Career pivots

A decision framework in three questions

If the table hasn't settled it, walk through these in order:

1. What does your next performance review or job application need to say? Certifications work when they corroborate a story. "Architect who went Professional" and "engineer who went DevOps Pro" are both coherent; pick the exam that matches the role you are moving towards, not the one that looks hardest.

2. Can you point to recent hands-on work in that exam's territory? Professional exams punish theory-only preparation. If you have designed multi-account structures, SAP-C02 is within reach; if you have built deployment pipelines and run incident response, DOP-C02 is. If neither is true yet, spend three to six months accumulating that experience — or take the smaller step of a second Associate while you do.

3. When does your SAA expire? All AWS certifications last three years. If yours has two or more years left, choose freely. If it is inside its final year, SAP-C02 quietly becomes more attractive because it renews SAA as a by-product; any other choice means either retaking SAA later or letting it lapse. (There is also a one-year maintenance extension available through an active AWS Skill Builder subscription for Associate and Professional certifications — check AWS's recertification page for current terms.)

Timing and money: use the voucher deliberately

The 50% discount voucher applies to any future exam while you hold an active certification, so passing your next exam issues a fresh one. That makes sequencing worth a moment's thought: a voucher saves $150 on a Professional or Specialty exam but only $75 on an Associate. If your plan includes both a second Associate and a Professional, paying full price for the cheaper exam and applying vouchers to the $300 exams is the cheaper order.

Whichever exam you pick, benchmark before you book. Professional-level questions have a distinctive long-scenario style that catches associate-level passers off guard, and a timed run tells you whether you are reading fast enough for 75 of them in 180 minutes. ExamPractice offers free sample questions for the AWS Solutions Architect Professional exam and the AWS DevOps Engineer Professional exam, with fuller question sets and a timed simulation mode for subscribers.

Frequently asked questions

Do I have to take SAP-C02 before DOP-C02, or in any order at all?

No. AWS removed all exam prerequisites years ago, and none of the current exams requires another. Order is entirely a career choice.

Will my Solutions Architect Associate stay valid while I prepare?

Yes — it remains active for three years from the date you earned it regardless of what else you take. Only the renewal mechanics differ between paths, as covered above.

Is there any Professional-level option outside architecture and DevOps?

As of 2026, yes: AWS added a Generative AI Developer – Professional certification (AIP-C01), aimed at engineers integrating foundation models into production applications. It suits AI-focused developers more than typical SAA holders, but it is worth knowing the Professional tier is no longer a two-exam club.

Can I take my next exam online?

Yes. All AWS exams are delivered at Pearson VUE test centres or via online proctoring.

Making the call

Strip the decision to its essentials and it is short: architects continue to SAP-C02, which upgrades and renews in one sitting; operations-minded engineers cross to DOP-C02; security-leaning engineers take SCS-C03 knowing it renews nothing else; and career pivots justify a second Associate. The expensive mistake is not picking the "wrong" exam — every credential above keeps its value for three years — it is drifting for a year while the momentum, the fresh knowledge and the discount voucher from your SAA pass all quietly depreciate. Pick the lane that matches your evidence, put a date in the diary, and start from the official exam guide.