Skip to content

AWS Certified SysOps Administrator - Associate (SOA-C02) - RETIRED

Important Notice

The AWS Certified SysOps Administrator - Associate (SOA-C02) certification was retired on September 29, 2025.

This certification is no longer available for new candidates. If you hold this certification, your credential will remain valid for three years from the date you earned it.

Replacement Certification

AWS replaced SOA-C02 with the AWS Certified CloudOps Engineer - Associate (SOA-C03), which became the active operations associate-tier exam on September 29, 2025.

📖 AWS CloudOps Engineer - Associate (SOA-C03) - Current cert in this repo 📖 Official AWS CloudOps Engineer Page

Key Differences

  • New name: "CloudOps Engineer" reflects the broader operations remit beyond pure SysOps
  • Updated services: Refreshed to cover modern operations tooling (Systems Manager Automation, EventBridge, CloudWatch Logs Insights, AWS Config conformance packs)
  • Format: SOA-C03 retains the multiple-choice / multiple-response format; the older labs portion remains removed

For Current Credential Holders

If you currently hold the SOA-C02 certification: - Your certification remains valid for 3 years from the date earned - Maintain your credential by earning other AWS certifications - Take SOA-C03 if you want a current credential

The historical study material below is preserved for credential holders and as a reference. For new candidates, study the SOA-C03 CloudOps Engineer notes instead.

Historical Exam Overview (SOA-C02)

The AWS Certified SysOps Administrator - Associate (SOA-C02) exam validated technical expertise in deployment, management, and operations of AWS workloads. This certification demonstrated proficiency in implementing and managing production operations on AWS.

Exam Details

  • Exam Code: SOA-C02
  • Duration: 130 minutes
  • Format: Multiple choice and multiple response
  • Number of Questions: 65 scored questions
  • Passing Score: 720/1000
  • Cost: $150 USD
  • Language: Available in multiple languages
  • Delivery: Testing center or online proctoring
  • Validity: 3 years

Note: As of March 28, 2023, this exam no longer includes exam labs.

Exam Domains

Domain 1: Monitoring, Logging, and Remediation (20% of scored content)

  • Implement metrics, alarms, and notifications
  • Recognize, correlate, and respond to events
  • Configure logging and analyze logs
  • Remediate issues based on monitoring and availability metrics

Key Focus Areas:

  • CloudWatch metrics, alarms, dashboards, and logs
  • CloudWatch Logs Insights for log analysis
  • EventBridge for event-driven automation
  • SNS and SQS for notifications
  • Systems Manager for automation and patching
  • AWS Config for configuration monitoring
  • CloudTrail for API activity logging

Domain 2: Reliability and Business Continuity (16% of scored content)

  • Implement scalability and elasticity
  • Implement high availability and resilience
  • Implement backup and restore strategies

Key Focus Areas:

  • Auto Scaling groups and scaling policies
  • Elastic Load Balancing (ALB, NLB, Gateway Load Balancer)
  • Multi-AZ and multi-region architectures
  • RDS Multi-AZ, Read Replicas, and backups
  • S3 cross-region replication and versioning
  • Route 53 health checks and failover routing
  • AWS Backup for centralized backup
  • Disaster recovery strategies (backup/restore, pilot light, warm standby, multi-site)

Domain 3: Deployment, Provisioning, and Automation (18% of scored content)

  • Provision and maintain cloud resources
  • Automate manual or repeatable processes

Key Focus Areas:

  • CloudFormation templates and stack management
  • Elastic Beanstalk deployment strategies
  • Systems Manager automation documents
  • AWS Lambda for automation
  • EC2 Image Builder for AMI management
  • Launch templates and Auto Scaling
  • AWS Service Catalog for governance
  • Infrastructure as Code best practices

Domain 4: Security and Compliance (16% of scored content)

  • Implement and manage security and compliance policies
  • Implement data and infrastructure protection strategies

Key Focus Areas:

  • IAM policies, roles, and permission management
  • Security Groups and Network ACLs
  • KMS encryption for data at rest
  • SSL/TLS for data in transit
  • AWS Systems Manager Session Manager for secure access
  • AWS Config rules for compliance
  • AWS Security Hub and GuardDuty
  • S3 bucket policies and access control
  • VPC security best practices

Domain 5: Networking and Content Delivery (18% of scored content)

  • Implement and maintain network features
  • Configure domains, DNS services, and content delivery
  • Troubleshoot network connectivity issues

Key Focus Areas:

  • VPC design: subnets, route tables, internet/NAT gateways
  • VPC Peering and Transit Gateway
  • VPC endpoints (interface and gateway endpoints)
  • Route 53 DNS management and routing policies
  • CloudFront distributions and caching
  • Direct Connect and VPN connections
  • Network troubleshooting with VPC Flow Logs
  • Elastic Network Interfaces (ENI)

Domain 6: Cost and Performance Optimization (12% of scored content)

  • Implement cost optimization strategies
  • Implement performance optimization strategies

Key Focus Areas:

  • Cost Explorer and Cost and Usage Reports
  • AWS Budgets and billing alarms
  • Reserved Instances and Savings Plans
  • S3 storage classes and lifecycle policies
  • EC2 right-sizing and instance optimization
  • EBS volume types and optimization
  • RDS performance optimization
  • CloudWatch for performance monitoring
  • Trusted Advisor recommendations

Key AWS Services for SysOps Administrators

Monitoring and Management

Amazon CloudWatch

  • Metrics: Standard and custom metrics collection
  • Alarms: Threshold-based and anomaly detection alarms
  • Dashboards: Custom monitoring dashboards
  • Logs: Centralized logging with Logs Insights
  • Events/EventBridge: Event-driven automation
  • Application Insights: Application monitoring
  • Synthetics: API and website monitoring

AWS Systems Manager

  • Session Manager: Secure shell access without SSH keys
  • Run Command: Execute commands across multiple instances
  • Patch Manager: Automated OS patching
  • State Manager: Maintain consistent configuration
  • Automation: Runbook automation
  • Parameter Store: Configuration and secrets management
  • Inventory: Asset management and tracking
  • Maintenance Windows: Scheduled maintenance tasks

AWS Config

  • Configuration Recording: Track resource configurations
  • Config Rules: Compliance evaluation
  • Remediation: Automated compliance fixes
  • Conformance Packs: Pre-packaged compliance frameworks
  • Multi-Account Aggregation: Organization-wide monitoring

Deployment and Automation

AWS CloudFormation

  • Templates: JSON/YAML infrastructure definitions
  • Stacks: Resource provisioning and management
  • Stack Sets: Multi-account and multi-region deployment
  • Change Sets: Preview changes before execution
  • Drift Detection: Identify manual configuration changes
  • StackPolicy: Prevent accidental updates/deletions

AWS Elastic Beanstalk

  • Platform Management: Automated platform updates
  • Deployment Policies: Rolling, immutable, blue/green
  • Environment Configuration: .ebextensions customization
  • Monitoring: Integrated CloudWatch monitoring
  • Auto Scaling: Automatic scaling based on load

High Availability and DR

Elastic Load Balancing

  • Application Load Balancer: Layer 7 (HTTP/HTTPS)
  • Network Load Balancer: Layer 4 (TCP/UDP), ultra-low latency
  • Gateway Load Balancer: Third-party virtual appliances
  • Health Checks: Monitor target health
  • Cross-Zone Load Balancing: Distribute traffic evenly
  • Sticky Sessions: Session affinity

Amazon Route 53

  • DNS Management: Domain registration and hosted zones
  • Routing Policies: Simple, weighted, latency, failover, geolocation, geoproximity, multivalue
  • Health Checks: Endpoint monitoring and automatic failover
  • Traffic Flow: Visual traffic policy editor
  • DNSSEC: DNS security extensions

Security

AWS IAM

  • Users and Groups: Identity management
  • Roles: Service permissions and cross-account access
  • Policies: Permission management
  • MFA: Multi-factor authentication
  • Access Keys: Programmatic access credentials
  • IAM Access Analyzer: Identify external access

AWS KMS

  • Customer Managed Keys: Full key control
  • AWS Managed Keys: Service-specific encryption
  • Key Policies: Access control
  • Automatic Rotation: Annual key rotation
  • CloudTrail Integration: Audit key usage

Study Strategy

Phase 1: Monitoring and Operations (Weeks 1-2)

  1. CloudWatch Mastery
  2. Metrics, alarms, dashboards
  3. Log aggregation and analysis

  4. EventBridge automation

  5. Systems Manager

  6. Session Manager, Run Command
  7. Patch Manager, State Manager
  8. Automation documents

Phase 2: High Availability and DR (Weeks 3-4)

  1. Load Balancing and Auto Scaling
  2. ALB, NLB configuration
  3. Auto Scaling policies

  4. Health checks and monitoring

  5. Backup and Recovery

  6. AWS Backup configuration
  7. RDS backup strategies
  8. S3 versioning and replication
  9. Disaster recovery architectures

Phase 3: Automation and Deployment (Weeks 5-6)

  1. CloudFormation
  2. Template development
  3. Stack management

  4. Drift detection

  5. Elastic Beanstalk

  6. Application deployment
  7. Environment management
  8. Deployment strategies

Phase 4: Security and Networking (Weeks 7-8)

  1. Network Design
  2. VPC architecture
  3. Security Groups and NACLs

  4. VPC endpoints

  5. Security Implementation

  6. IAM policies and roles
  7. Encryption with KMS
  8. Security best practices

Phase 5: Cost and Performance Optimization (Week 9)

  1. Cost Management
  2. Cost Explorer analysis
  3. Reserved Instances

  4. Resource optimization

  5. Performance Tuning

  6. CloudWatch metrics analysis
  7. Resource right-sizing
  8. Caching strategies

Phase 6: Review and Practice (Week 10)

  • Complete practice exams
  • Review weak areas
  • Hands-on lab scenarios

Common Exam Scenarios

Operations and Monitoring

  • Configuring CloudWatch alarms for Auto Scaling
  • Analyzing logs with CloudWatch Logs Insights
  • Automated remediation with EventBridge and Lambda
  • Patch management with Systems Manager
  • Configuration compliance with AWS Config

High Availability

  • Multi-AZ RDS deployment with failover
  • Auto Scaling group with ELB health checks
  • Route 53 failover routing with health checks
  • S3 cross-region replication for DR
  • Multi-region application architecture

Automation

  • CloudFormation stack deployment and updates
  • Systems Manager automation for instance management
  • Elastic Beanstalk blue/green deployments
  • Automated backup policies
  • Event-driven automation workflows

Security

  • IAM role for EC2 to access S3
  • Secure parameter storage with Systems Manager
  • Network isolation with Security Groups
  • Encryption at rest with KMS
  • Secure remote access with Session Manager

Cost Optimization

  • Identifying cost optimization opportunities
  • Right-sizing EC2 instances
  • S3 Intelligent-Tiering and lifecycle policies
  • Reserved Instance and Savings Plan selection
  • Unused resource identification

Exam Preparation Tips

Study Approach

  1. Hands-on Practice: Deploy and manage AWS resources
  2. AWS Documentation: Read service user guides and best practices
  3. Practice Exams: Take multiple practice tests
  4. AWS Training: Complete AWS Skill Builder courses
  5. Real-world Experience: Manage production AWS workloads

Exam Strategy

  1. Time Management: ~2 minutes per question
  2. Read Carefully: Identify key requirements and constraints
  3. Eliminate Wrong Answers: Rule out incorrect options
  4. Best Practices: Choose AWS operational best practices
  5. Troubleshooting: Understand common issues and solutions

Common Pitfalls

  • Not understanding CloudWatch metrics and dimensions
  • Confusion between Security Groups and NACLs
  • Missing Auto Scaling cooldown periods
  • Not knowing Systems Manager capabilities
  • Overlooking cost optimization opportunities

Comprehensive Study Resources

👉 Complete AWS Study Resources Guide

For detailed information on courses, practice tests, hands-on labs, and more, see our comprehensive AWS study resources guide.

Next Steps After Certification

Career Advancement

  • Pursue AWS Professional certifications (Solutions Architect, DevOps Engineer)
  • Specialize in Security or Advanced Networking specialties
  • Lead operations teams and architecture decisions
  • Cloud operations and DevOps consulting roles

Continuous Learning

  • Stay updated with new AWS services and features
  • Participate in AWS operations communities
  • Attend AWS events and webinars
  • Explore advanced automation and DevOps practices

Practical Application

  • Implement operational excellence in production
  • Build automated operational runbooks
  • Mentor junior operations engineers
  • Share knowledge through blogs and presentations