AWS Certification Roadmap for 2026

Path 1: The architect track

Sequence: (optional CLF-C02) → SAA-C03 → SAP-C02 → optional SCS-C03

This is the most travelled road in the entire AWS ecosystem, and for good reason: Solutions Architect Associate (SAA-C03) is the closest thing AWS has to a lingua franca certification. It covers designing resilient, secure, cost-optimised architectures — knowledge that transfers to nearly every cloud role — and it is the credential most frequently named in cloud job adverts. Skillsoft's annual IT Skills and Salary report has repeatedly ranked the Solutions Architect certifications among the highest paying in IT (consult skillsoft.com for the current figures, as they change yearly).

From SAA-C03, the natural summit is Solutions Architect Professional (SAP-C02): 75 questions across 180 minutes of dense, multi-constraint scenario work. AWS recommends about two years of design experience before attempting it, which in practice means most people leave eighteen months to two years between the Associate and the Professional and fill that gap with real project work. The timing has a pleasant side effect: pass SAP-C02 inside your SAA's three-year window and the Associate renews automatically.

Architects who touch regulated workloads should consider bolting on the Security Specialty (SCS-C03) after the Professional. Its 2025 refresh added generative AI security coverage, making it more relevant to modern architecture briefs, not less. Whether to sit the Associate at all or jump straight to the Professional is a genuine question for experienced architects — the Associate vs Professional decision article weighs it — but for planning purposes, the two-step sequence remains the default for a reason: the Associate's breadth is the raw material the Professional's scenarios assume.

When you reach the preparation stage for the first waypoint, ExamPractice's Solutions Architect Associate practice questions offer free samples to benchmark yourself against SAA-C03-style scenarios before you book.

Path 2: The developer-to-DevOps track

Sequence: (optional CLF-C02) → DVA-C02 → DOP-C02

If you write application code and deploy it to AWS, the Developer Associate (DVA-C02) matches your daily work better than the architect exam does: it leans into serverless services, SDK usage, CI/CD and debugging rather than whole-system design. From there, DevOps Engineer Professional (DOP-C02) — 75 questions, 180 minutes — extends into automation, infrastructure as code, monitoring and incident response at scale.

This track has the tidiest renewal economics in the portfolio. DOP-C02 renews both the Developer Associate and the CloudOps Engineer Associate, so a developer who later adds the ops-flavoured Associate keeps everything current with a single Professional exam every three years. The trade-off between the two entry points on this line — Developer versus jumping toward DevOps ambitions early — is unpacked in the Developer vs DevOps Engineer certification comparison; roadmap-wise, treat DVA-C02 as the boarding station and DOP-C02 as the destination roughly one to two years later.

Path 3: The operations track

Sequence: (optional CLF-C02) → SOA-C03 → DOP-C02

For sysadmins, support engineers and SREs, the CloudOps Engineer Associate (SOA-C03) is the on-topic Associate: deployment, monitoring, remediation and cost management of running workloads. Note the name carefully when shopping for study materials — anything referencing "SysOps SOA-C02" predates the September 2025 rename and update, and the CloudOps/SysOps certification guide explains the transition in full.

The operations track converges with the developer track at DOP-C02, which renews SOA-C03 when you pass it. Ops people who find themselves doing more design than automation sometimes divert to the architect line instead; the Solutions Architect vs SysOps Administrator comparison is the switch-point decision for that reroute. Either way, plan for one Associate in year one and one Professional in year two or three.

Path 4: The data track

Sequence: (optional CLF-C02) → DEA-C01 → SAA-C03 or a Professional

Data engineering on AWS now has exactly one dedicated certification: the Data Engineer Associate (DEA-C01), which launched in 2024 and effectively absorbed the audience of the retired Data Analytics and Database specialties. It covers pipelines, ingestion, transformation and the data-store services, with AWS suggesting two to three years of data engineering experience as background.

The honest quirk of this path is that it currently has no data-specific summit — there is no "Data Engineer Professional". Data specialists who want a second certification typically add SAA-C03 for architectural breadth (data platforms are architecture-heavy work) or head toward the AI line below as their pipelines increasingly feed model workloads. Full exam details live in the Data Engineer Associate certification guide.

Path 5: The AI and machine learning track

Sequence: (optional AIF-C01) → MLA → AIP-C01

This is the newest line on the map, rebuilt almost entirely between late 2024 and 2026. It starts, optionally, with the AI Practitioner (AIF-C01) — a $100 Foundational exam for people who work around AI solutions without necessarily building them. The technical core is the Machine Learning Engineer Associate, and here 2026 timing matters more than anywhere else on the map: registration for the updated MLA-C02 opens on 1 September 2026, and the last day to sit MLA-C01 in English is 28 September 2026. If you are mid-preparation for MLA-C01 as you read this, book before that cut-off or replan around the new version — and be wary of anyone claiming to know what MLA-C02 changes, because AWS has not published content differences.

The summit is the Generative AI Developer Professional (AIP-C01), new to the portfolio (beta November 2025, standard registration open in 2026, $300 USD), validating production integration of foundation models. AWS recommends two-plus years of cloud experience and at least a year of hands-on generative AI work first.

Two cautions for planners. The old Machine Learning Specialty (MLS-C01) retired on 31 March 2026 — strike it from any plan and any secondhand advice. And both AIF-C01 and MLA-C01 use the newer ordering, matching and case-study question types, so expect a different exam feel from the classic multiple-choice papers.

Path 6: The security track

Sequence: an Associate (usually SAA-C03) → SCS-C03

AWS security is a destination rather than a starting line: the Security Specialty (SCS-C03) assumes platform fluency that an Associate provides. Most security-bound candidates route through SAA-C03 first, then take the Specialty — 65 questions, 170 minutes, $300, with dedicated detection and incident-response domains and new generative AI security coverage since the late-2025 refresh.

Remember the specialty renewal rule when planning years four to six: SCS-C03 renews only by retaking the current Security Specialty exam. No Professional covers it. Budget accordingly. The exam's full blueprint is in the Security Specialty certification guide, and readers weighing it against vendor-neutral options will find the cross-provider call made in its own comparison article.

What about networking?

For years the Advanced Networking Specialty (ANS-C01) was the map's expert-level networking station. It is closing: the last day to take the exam is 31 December 2026, and no successor has been announced. If a networking credential matters to your 2026 plan, you face a genuine now-or-never decision — earn it before year end and it stays active for its normal three years, or leave networking depth to be demonstrated through the architect track instead. Do not plan any certification beyond 2026 around ANS-C01 existing.

Sequencing tactics that apply to every path

Whichever line you ride, a few tactics improve the journey.

1. Space exams six to eighteen months apart, not back to back. The renewal cascade only helps if your higher exam lands inside the lower one's three-year window; sitting everything in one frantic year means everything expires in the same year too, creating a renewal pile-up in year three.
2. Chain the vouchers. Plan the cheap exam first where possible: each pass yields a 50% discount voucher for the next booking while your certification is active.
3. Match study depth to the tier's scoring bar. Pass marks rise with tier — 700 scaled for Foundational, 720 for Associate, 750 for Professional and Specialty — and scaled scores are not percentages, so do not translate practice-test percentages directly into predicted results. Use timed full-length practice runs to expose weak domains, then restudy those domains rather than re-drilling questions you already get right; ExamPractice's practice-test simulation mode exists for exactly that benchmark-and-target loop.
4. Check exam versions the week you book, not the month you start studying. The 2025–26 period showed how fast the portfolio moves. As of August 2026 no updates are announced for SAA-C03, DVA-C02 or DEA-C01, but AWS's coming-soon page is the authority, not any third-party site.
5. Let your job, not the map, trigger the next exam. The strongest certification sequences track real responsibilities: sit the Professional when you have spent a year doing Professional-shaped work. AWS's recommended experience levels are a decent proxy for when an exam will feel like consolidation rather than memorisation.

A worked example: three years, one plan

To make the tactics concrete, consider a support engineer with eighteen months of general IT experience who wants a platform-engineering career. Year one: CloudOps Engineer Associate (SOA-C03) in the spring, mapping directly onto their monitoring and remediation work, then Solutions Architect Associate (SAA-C03) in the autumn using the 50% voucher, adding design breadth. Year two: no exams — a deliberate gap spent building CI/CD and infrastructure-as-code experience in their new cloud role. Year three: DevOps Engineer Professional (DOP-C02), which renews SOA-C03 on passing, while SAP-C02 remains available later as an optional architect-side summit that would renew SAA-C03. Total spend before regional variation: $150 + $75 + $150 with vouchers applied at $300-tier pricing halved — and nothing on renewals, because the sequence renewed itself.

Choosing your line and boarding

The honest summary of the 2026 map: the architect track remains the default for breadth and market recognition, the developer and operations tracks converge on the portfolio's best renewal economics at DOP-C02, the data track is a strong single-certification play awaiting a summit, the AI track is where all the new construction is, security is a specialty you route to through an Associate, and networking is a closing door. Pick the line that matches the job you want in three years, board at the station matching your current experience, and let the renewal cascade carry the housekeeping. Your very first booking decision — the single exam to start with — is a smaller and more personal question than this whole map, and it gets its own dedicated treatment in Best AWS certification for beginners.