The three big cloud providers price their certification ladders almost identically — roughly $99–$100 for a foundational exam, $125–$165 for an associate one, and $200–$300 at professional level — which tells you something useful: the real cost of choosing a certification track is not the exam fee. It is the months of study you commit to one provider's ecosystem. Pick the track that matches the jobs you actually want, and any of the big three will repay the effort; pick on brand reputation alone and you can end up certified in a platform none of your target employers run.
This guide compares the strongest cloud certifications across Amazon Web Services (AWS), Microsoft Azure and Google Cloud by role and career goal. It is a cross-provider map, not a deep exam guide — if you have already settled on the cloud engineer role specifically, our role-first breakdown of the best certifications for cloud engineers goes deeper on that single path.
How the three certification ladders are built
Each provider structures its programme in tiers, but the details differ in ways that matter when you are budgeting time and money.
AWS runs four tiers: Foundational ($100), Associate ($150), Professional and Specialty (both $300). There are no prerequisites for any AWS exam — the experience levels are recommendations only — and every certification is valid for three years. Holding an active AWS certification also earns you a 50% discount voucher for your next AWS exam.
Microsoft splits its programme into fundamentals certifications (which never expire) and role-based associate and expert certifications, which expire after just one year — but renew free through an open-book online assessment on Microsoft Learn. Microsoft prices exams by country rather than publishing universal figures; third-party sources consistently cite around US$99 for fundamentals and US$165 for associate and expert exams, so treat those as approximate. Two Microsoft certifications carry hard prerequisites: Azure Solutions Architect Expert requires you to hold Azure Administrator Associate (AZ-104) first, and DevOps Engineer Expert requires AZ-104 or the now-retired AZ-204.
Google Cloud has three tiers: Foundational ($99), Associate ($125) and Professional ($200), plus tax. Google Cloud exams have no exam codes and publish no passing scores — results are pass/fail only. Foundational and Associate certifications last three years; Professional certifications last only two, though shorter, cheaper renewal exams now exist for several of them.
One structural difference deserves emphasis for anyone planning total cost of ownership: Microsoft renewals are free but annual; AWS and Google Cloud renewals cost money but come round less often.
Which cloud certification should you get first?
Short answer: if you are technical and want a hands-on role, start at associate level — AWS Certified Solutions Architect – Associate, Microsoft's AZ-104, or Google's Associate Cloud Engineer — and only take a foundational exam first if you are new to cloud entirely or work in a non-engineering role. None of the big three requires the foundational tier before the associate tier.
The foundational exams — AWS Certified Cloud Practitioner (CLF-C02, $100, 65 questions in 90 minutes), Microsoft Azure Fundamentals (AZ-900, a 45-minute exam that never expires) and Google's Cloud Digital Leader ($99, 50–60 questions in 90 minutes) — are genuinely useful for career changers, salespeople, project managers and anyone who needs cloud literacy without cloud responsibility. AZ-900 has the unusual advantage of never expiring, which makes it a low-maintenance credential to hold indefinitely.
For engineers, though, employers read associate-level certifications as the first meaningful signal. Skipping straight to associate saves you an exam fee and several weeks.
The best cloud certifications by career goal
For architecture and design roles
AWS Certified Solutions Architect – Associate (SAA-C03) — $150, 65 questions, 130 minutes, three-year validity. This is the most recognisable associate-level cloud credential in the industry and the standard on-ramp to AWS architecture work. Its Professional counterpart, SAP-C02 ($300, 75 questions, 180 minutes), renews the Associate automatically when you pass it.
Microsoft Azure Solutions Architect Expert (AZ-305) — an expert-tier certification with a mandatory prerequisite: you must hold AZ-104. That two-exam commitment makes it a bigger investment, but also a stronger seniority signal in Microsoft-centric organisations.
Google Professional Cloud Architect — $200, 50–60 questions in two hours, including two case studies that make up 20–30% of the exam. Skillsoft's 2025 top-paying certifications list reports an average of about $190,000 for Professional Cloud Architect holders in the US — self-reported survey data, so treat it as a signal of market value rather than a promise, and remember pay varies enormously by location, experience and role.
For operations and administration roles
Microsoft Azure Administrator Associate (AZ-104) — the anchor Azure operations certification, covering identities, storage, compute, networking and monitoring in a 100-minute exam. It is also the gateway to both Azure expert certifications, which makes it the single highest-leverage Azure exam.
AWS Certified CloudOps Engineer – Associate (SOA-C03) — note the name: AWS renamed the SysOps Administrator Associate in September 2025; it was updated, not retired. $150, 65 questions, 130 minutes, no lab component.
Google Associate Cloud Engineer — $125, 50–60 questions in two hours, with a recommended six months of hands-on experience. The most practical of Google's exams for day-to-day operations work.
For DevOps and automation roles
AWS Certified DevOps Engineer – Professional (DOP-C02) — $300, 75 questions, 180 minutes. Passing it also renews the Developer Associate and CloudOps Associate certifications, a nice efficiency for AWS specialists.
Microsoft DevOps Engineer Expert (AZ-400) — covers pipelines, source control strategy and instrumentation across GitHub and Azure DevOps; requires AZ-104 first for new candidates.
Google Professional Cloud DevOps Engineer — $200, built around SRE practices, CI/CD and observability on Google Cloud.
For security-focused cloud roles
AWS Certified Security – Specialty (SCS-C03) — $300, 65 questions, 170 minutes. The current version added generative AI and machine learning security coverage. Skillsoft's 2025 report placed AWS Certified Security – Specialty as North America's top-paying certification at an average of $202,959 among its survey respondents.
Google Professional Cloud Security Engineer — $200, covering access, boundary protection, data protection and compliance.
On Azure, be careful: the long-standing AZ-500 Azure Security Engineer certification retires on 31 August 2026 and can no longer be earned or renewed after that date. Secondary sources name SC-500 as its successor, but check Microsoft Learn for the current credential before committing study time. SC-200 (Security Operations Analyst) remains active for SOC-oriented roles.
For data and AI roles
Cloud data engineering has its own multi-vendor certification landscape — AWS Certified Data Engineer – Associate, Google's Professional Data Engineer, Microsoft's Fabric-based DP-700 and the platform vendors beyond the big three — which we map end-to-end in our guide to the best certification path for a data engineering career. On the AI side, note that AWS added AI Practitioner (AIF-C01, $100) and Machine Learning Engineer – Associate to its portfolio, and Google launched a Generative AI Leader foundational certification in 2025.
AWS vs Azure vs Google Cloud certifications compared
Factor
AWS
Microsoft Azure
Google Cloud
Entry-level exam
Cloud Practitioner (CLF-C02), $100
Azure Fundamentals (AZ-900), ~US$99, varies by country
Cloud Digital Leader, $99 + tax
Flagship associate cert
Solutions Architect – Associate (SAA-C03), $150
Azure Administrator (AZ-104), ~US$165
Associate Cloud Engineer, $125
Top architecture cert
Solutions Architect – Professional (SAP-C02), $300
Solutions Architect Expert (AZ-305)
Professional Cloud Architect, $200
Prerequisites
None on any exam
AZ-305 and AZ-400 require AZ-104 (or retired AZ-204 for AZ-400)
None on any exam
Validity
3 years, all levels
Fundamentals: never expire; role-based: 1 year
Foundational/Associate: 3 years; Professional: 2 years
Renewal cost
Paid retake or higher exam; 50% voucher for active holders
Free online open-book assessment
Shorter paid renewal exams (e.g. $75–$100) or course-based path
Difficulty signal
Broad service coverage, scenario-heavy
Hands-on portal/CLI expectations from associate level
Case-study-driven at Professional Architect level
Best for
The largest cloud job market; startups and cloud-native firms
Microsoft-centric enterprises, hybrid estates
Data-heavy organisations, Kubernetes-forward teams
There is no universal winner in that table, and anyone who tells you otherwise is selling a course. The deciding factor is the column your target employers live in.
A decision framework: choosing your provider track
Work through these four questions in order:
What do the job adverts in your market ask for? Search the roles you want in your city or remote market and tally which platform appears most. Ten minutes of this beats any generic ranking, because cloud hiring is regional and sector-specific — public sector and large enterprises lean Azure, cloud-native startups lean AWS, data-intensive shops disproportionately run Google Cloud.
What does your current or target employer already run? Certifying in the platform you can practise on at work compounds fastest, because the exam scenarios map onto problems you already touch.
How much recurring maintenance will you tolerate? If annual renewal assessments would irritate you, Microsoft's one-year cycle is a real consideration — even though renewal is free. If you would rather pay occasionally and forget about it, AWS's three-year cycle suits.
Are you optimising for one deep track or multi-cloud breadth? Depth first, always. A Professional-level certification on one platform outweighs three foundational badges. Add a second provider's associate certification only once you hold an associate or professional credential on your primary platform — that pairing (say, SAA-C03 plus AZ-104) is a credible multi-cloud signal; three entry-level certificates are not.
A realistic scenario: a systems administrator in a Windows-heavy enterprise wants to move into cloud work. Her employer is mid-migration to Azure. The generic internet advice says "do AWS, it has the biggest market" — but for her, AZ-104 is plainly the right first exam: she can practise against her employer's live estate, the certification maps to work she can volunteer for immediately, and it unlocks AZ-305 later. The best certification is contextual, not universal.
Common mistakes when choosing cloud certifications
Collecting foundational badges across all three providers. Three $99 certificates signal curiosity, not capability. Employers hire on associate-level depth.
Studying for retired or renamed exams. The last two years have seen unusual churn: AWS renamed SysOps to CloudOps (SOA-C03), retired its Machine Learning Specialty in March 2026, and retires Advanced Networking – Specialty on 31 December 2026; Microsoft retired DP-203, AZ-204, AI-102 and DP-100 in 2025–26 and retires AZ-500 at the end of August 2026. Always confirm the current exam version on the provider's page before buying study materials.
Treating recommended experience as a prerequisite. AWS and Google Cloud have no prerequisites at all; you can sit Professional Cloud Architect without holding the Associate. Whether you should is a readiness question, not an eligibility one.
Memorising questions instead of building recall. Practice questions earn their keep when you analyse the results — which domains you miss, why the distractors fooled you — not when you drill answers. Once you have covered your chosen exam's domains, a timed run through AWS Solutions Architect Associate practice questions (or the equivalent for Microsoft exams) will show you which domains need another pass before you book.
Choosing a track you will not regret
Pick the provider your target jobs name, start at associate level unless you are new to cloud, and go deep before you go wide. If your market is genuinely mixed, AWS Certified Solutions Architect – Associate remains the safest single default because of its recognition breadth — but a well-chosen AZ-104 or Associate Cloud Engineer in the right market will out-earn a poorly chosen AWS badge every time. Costs are close enough across providers that money should never be the tiebreaker; alignment with real vacancies should be.
Whichever ladder you climb, benchmark yourself with a full-length timed practice test before booking, and confirm the current exam version and fee on the provider's official certification page — all three providers have changed versions, names or prices within the last eighteen months.
Frequently asked questions
Do cloud certifications expire, and which is cheapest to maintain?
All of them expire except Microsoft and Google Cloud fundamentals-tier certifications and Microsoft's AZ-900. Microsoft role-based certifications expire annually but renew free online; AWS certifications last three years and renew by retaking or passing a higher exam (with a 50% voucher for active holders); Google Cloud Professional certifications last two years, with shorter renewal exams from $60–$100. Over a five-year horizon, Microsoft is typically cheapest to maintain.
Is a multi-cloud certification like CompTIA Cloud+ better than a provider certification?
Vendor-neutral cloud certifications can demonstrate cross-platform concepts, but provider certifications dominate cloud job requirements because employers hire for a specific stack. A sensible use of a vendor-neutral credential is as a conceptual foundation before committing to a provider track — not as a substitute for one.
Can I get cloud certified with no IT experience?
You can sit any AWS or Google Cloud exam, and any Microsoft associate exam, with zero experience — none has formal prerequisites. Passing without hands-on practice is another matter: associate exams assume you have used the console, CLI and core services. Free-tier accounts make that practice accessible before you ever pay an exam fee. For a broader look at credentials that suit true beginners, see our guide to certifications that do not require work experience.
Which cloud certification pays the most?
No certification guarantees a salary. Among named survey data, Skillsoft's 2025 report lists AWS Certified Security – Specialty as North America's top payer (average $202,959 among respondents) and reports around $190,000 for Google Professional Cloud Architect holders in the US. These are averages for experienced professionals who hold the certifications, driven mostly by the roles they already do — not payouts for passing an exam.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
A five-step decision process for choosing a professional certification: goals, market demand, true cost, prerequisites and renewal — with a comparison worksheet.
The strongest professional certifications for 2026, ranked on demand, recognition and cost of ownership — with the year's retirements and AI-driven changes factored in.