Holding SAA-C03? Compare the Professional, DevOps, Security Specialty and multi-cloud routes, with costs, renewal effects and a decision framework.
Passing SAA-C03 hands you a useful, slightly awkward gift: a 50% discount voucher for your next AWS exam and no obvious instruction on where to spend it. AWS imposes no prerequisites on any of its exams, so every Professional and Specialty certification is technically open to you the day your Associate badge arrives. The real question is not what you are allowed to take next, but which exam best converts your current role — or the role you want — into a credential employers actually filter for.
Short answer: most SAA-C03 holders should target the AWS Certified Solutions Architect – Professional (SAP-C02) if they design systems, or the AWS Certified DevOps Engineer – Professional (DOP-C02) if they build and operate them. Choose the AWS Certified Security – Specialty (SCS-C03) if security is your lane, and add a second cloud (usually Azure) only once your AWS story is strong. The rest of this article earns that answer.
Because "what next" is genuinely a comparison decision, here is the field as of 2026. All AWS certifications remain valid for three years, and USD prices vary by country and region — confirm current fees on the official AWS certification pages before booking.
| Factor | SAP-C02 (Solutions Architect Pro) | DOP-C02 (DevOps Engineer Pro) | SCS-C03 (Security Specialty) | Multi-cloud (e.g. Azure AZ-104 → AZ-305) |
|---|---|---|---|---|
| Level | Professional | Professional | Specialty | Associate then Expert (Microsoft) |
| Format | 75 questions, 180 minutes | 75 questions, 180 minutes | 65 questions, 170 minutes | Proctored Microsoft exams; durations vary |
| Cost (USD, varies by region) | $300 | $300 | $300 | Associate/expert-tier Microsoft pricing, country-based |
| Passing score | 750 scaled | 750 scaled | 750 scaled | 700/1,000 scaled |
| Renews your SAA? | Yes — SAP-C02 renews SAA and Cloud Practitioner | No (renews Developer and CloudOps Associates) | No — specialties renew only by retake | No effect on AWS certs |
| Best for | Architects, pre-sales, consultants | Build/release, platform, SRE work | Security engineers, compliance-heavy sectors | Enterprises running AWS + Azure |
| Difficulty step-up from SAA | Large: scenario-dense, long stems | Large: automation and operations depth | Deep but narrower domain | Moderate; new platform vocabulary is the cost |
No universal winner exists in that table, which is exactly why the next sections sort the decision by circumstance rather than crowning one.
The Solutions Architect – Professional is the natural continuation if your day involves designing systems, migrations, or multi-account architectures — or if you want it to. It is a 75-question, 180-minute exam priced at $300 USD (regional pricing varies), with a 750 scaled passing score, and AWS recommends around two years of design experience on the platform before attempting it.
Two mechanical advantages make it efficient for SAA holders specifically:
The step-up is real. Professional-level questions are long, scenario-based, and routinely defensible for two answers — the exam tests judgement about trade-offs, not service recall. A sensible sequence: re-read the SAP-C02 exam guide, close hands-on gaps in organisations-level topics (multi-account governance, migration strategies, cost management), then benchmark with timed practice. Working through AWS Solutions Architect Professional practice questions under the real 180-minute constraint will tell you quickly whether your reading speed and elimination discipline survive Professional-length stems.
If you are weighing the architecture track as a career rather than just an exam, our guide to certifications for solutions architecture jobs maps how SAP-C02 stacks against enterprise and multi-platform architecture credentials.
Choose the DevOps Engineer – Professional if your work is pipelines, infrastructure as code, deployment automation, and operational tooling rather than whiteboard architecture. It shares the Professional format — 75 questions, 180 minutes, $300 USD (varies by region), 750 scaled to pass — and AWS recommends two or more years provisioning and operating AWS environments plus a scripting background.
One renewal quirk matters for planners: DOP-C02 renews the Developer Associate and the CloudOps Engineer Associate, but not your Solutions Architect Associate. If you go the DevOps route, your SAA still expires on its own three-year schedule unless you retake it or later pass SAP-C02. That is not a reason to avoid DOP-C02 — it is a reason to diarise your SAA expiry date now.
A realistic scenario: an engineer eighteen months into a platform team role, comfortable with CloudFormation or Terraform and CI/CD, will usually get more interview traction from DOP-C02 than from SAP-C02, because the certification matches the job requisitions they are actually applying to. When you are ready to gauge readiness, timed AWS DevOps Engineer Professional practice tests are useful precisely for exposing weak domains — analyse your results by domain and target the gaps rather than re-drilling what you already pass.
The Security – Specialty (SCS-C03) is the strongest Specialty case for most SAA holders. The current version replaced SCS-C02 (which was available until 1 December 2025) and adds generative AI and machine learning security coverage alongside restructured detection and incident-response domains. Format: 65 questions, 170 minutes, $300 USD (region-dependent), 750 scaled to pass.
Take it if any of these describe you:
Know the renewal trade-off before committing: specialty certifications renew only by retaking the current specialty exam — no higher-level exam covers them. A Specialty is a commitment to keep re-certifying in that niche every three years.
One caution on the broader Specialty shelf: the portfolio has thinned. The Machine Learning Specialty retired in March 2026, the Database and Data Analytics Specialties went in 2024, and the Advanced Networking Specialty (ANS-C01) is scheduled to retire on 31 December 2026 with no announced successor. Starting a months-long study plan for a retiring exam is rarely worth it unless you can sit it well before the deadline. For data-focused SAA holders, the Data Engineer – Associate (DEA-C01) — 65 questions, 130 minutes, $150 USD — is the current data credential, though moving Professional-to-Associate is a lateral signal rather than a step up.
Going deeper on AWS usually beats going wider — with two clear exceptions.
Add Azure when your employer (or target employer) runs both. Large enterprises frequently do, and an SAA holder who adds Azure Administrator Associate (AZ-104) and then Azure Solutions Architect Expert (AZ-305) becomes rarer than a single-cloud Professional. Note Microsoft's mechanics differ sharply from AWS's: AZ-104 is a mandatory prerequisite for the AZ-305 certification, role-based Microsoft certs expire after one year (renewed free via an online, open-book assessment), and pricing is set per country rather than as a flat USD figure.
Add a platform-neutral credential when your work is Kubernetes- or IaC-shaped. The Certified Kubernetes Administrator (CKA) is a two-hour, performance-based exam — hands-on tasks in live clusters, $445 USD list with one free retake included, valid two years — and it carries outsized hiring signal precisely because it is practical rather than multiple-choice. The HashiCorp Terraform Associate (version 004 as of 2026, $70.50 USD plus taxes, one hour, valid two years) is a cheap, quick complement if infrastructure as code anchors your role.
If you are still deciding which ecosystems deserve your next year, our comparison of cloud certifications across AWS, Azure and Google Cloud covers the cross-provider view; this article deliberately stays on the "you already hold SAA" branch.
Answer these in order; stop at the first clear yes.
Whichever you pick, budget seriously for the difficulty jump. AWS publishes no pass rates, so ignore anyone quoting one; what is verifiable is that Professional exams give you 75 questions in 180 minutes and Specialty exams run nearly as long. Timed, full-length simulation is the honest readiness test — if you cannot hold concentration and pace for three hours in practice, that is the first gap to fix, before any content gap.
The honest summary: SAP-C02 for architects (with the renewal bonus), DOP-C02 for builders and operators, SCS-C03 for security specialists, and a second platform only when your actual environment demands it. If you landed here without yet holding an Associate-level cert, the branching logic is different — see our guide to choosing a certification after AWS Cloud Practitioner instead. And whichever exam you book, verify the current fee and exam version on AWS's official certification pages first: codes and prices are stable as of 2026, but AWS's 18-month change log shows how quickly the portfolio moves.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·10 min read
A five-step decision process for choosing a professional certification: goals, market demand, true cost, prerequisites and renewal — with a comparison worksheet.
Continue reading·12 min read
The strongest professional certifications for 2026, ranked on demand, recognition and cost of ownership — with the year's retirements and AI-driven changes factored in.
Continue reading·8 min read
How certifications actually influence recruiters when you change employers, which types move offers upward, and how to time one around a job search.
Continue reading
