AWS Certified SAP on AWS - Specialty (PAS-C01) Fact Sheet¶
Exam Overview¶
Exam Code: PAS-C01 Exam Name: AWS Certified SAP on AWS - Specialty Duration: 170 minutes (2 hours 50 minutes) Questions: 65 questions Question Format: Multiple choice and multiple response Passing Score: 750/1000 (scaled scoring, approximately 75%) Cost: $300 USD Valid For: 3 years Prerequisites: Recommended AWS Solutions Architect Associate or equivalent experience Language: Available in English, Japanese, Korean, Simplified Chinese Delivery: Pearson VUE (online proctored or testing center)
π Official Exam Page - Registration and details π Exam Guide PDF - Detailed exam objectives π Sample Questions - Official practice questions
Target Audience¶
This certification is designed for: - SAP Basis administrators managing SAP on AWS - SAP architects designing SAP solutions on AWS - Cloud architects with SAP workload experience - SAP consultants implementing AWS migrations - DevOps engineers managing SAP environments
Required Experience: - 5+ years SAP Basis administration experience - 1+ years operating SAP workloads on AWS - AWS infrastructure and services knowledge - SAP landscape architecture understanding
π SAP on AWS Overview - AWS SAP solutions π SAP on AWS Documentation - Complete SAP documentation
Exam Domains¶
Domain 1: Design SAP Workloads on AWS (30%)¶
This is the largest domain, covering SAP architecture design on AWS.
1.1 SAP Architecture Fundamentals¶
SAP System Components: - SAP NetWeaver architecture (ABAP, Java) - SAP HANA database architecture - SAP application servers (ASCS, PAS, AAS) - SAP Web Dispatcher - SAP Router and landscape connectivity
π SAP on AWS Architecture - Reference architectures π SAP HANA on AWS - HANA deployment π SAP NetWeaver on AWS - NetWeaver architecture π SAP System Requirements - Planning requirements
1.2 EC2 Instance Selection for SAP¶
SAP-Certified Instance Types: - X1, X1e, X2 instances (memory-optimized for HANA) - R5, R6i, R7i instances (general-purpose SAP) - U-series instances (high-memory HANA) - Graviton-based instances (ARM architecture)
π SAP-Certified EC2 Instances - Certified instances π X2 Instances for SAP HANA - High-memory instances π High Memory Instances - Up to 24TB RAM π SAP HANA Hardware Directory - AWS certifications π Instance Sizing - Choosing instance types
1.3 Storage Design for SAP¶
Storage Options: - EBS for SAP HANA data and log volumes - EBS gp3, io2 for performance requirements - EFS for SAP transport directories - S3 for backups and archives - FSx for NetApp ONTAP for SAP shared storage
π SAP Storage Best Practices - Storage configuration π EBS for SAP HANA - HANA storage π EBS Performance - Volume types π FSx for ONTAP - Shared storage π EFS for SAP - Elastic File System
1.4 Network Design¶
VPC Configuration: - Multi-AZ architecture for high availability - Private subnets for SAP workloads - NAT Gateways for outbound connectivity - VPN and Direct Connect for hybrid - Transit Gateway for multi-VPC
π SAP Network Architecture - Network design π VPC for SAP - Virtual private cloud π AWS Direct Connect - Dedicated connectivity π Transit Gateway - Network hub π Placement Groups - Low-latency networking
1.5 High Availability and Disaster Recovery¶
HA Architecture: - Multi-AZ deployments - SAP HANA System Replication (HSR) - Pacemaker cluster for failover - Application Server clustering - Database replication strategies
π SAP HA on AWS - High availability π HANA System Replication - HSR configuration π Pacemaker Clustering - Cluster setup π Multi-AZ Architecture - DR patterns
Disaster Recovery: - Cross-region replication - Backup and restore strategies - Pilot light and warm standby - RTO and RPO considerations
π SAP DR Strategies - DR planning π AWS Backup for SAP - Backup solutions π Cross-Region Replication - DR setup
Domain 2: Implement SAP Workloads on AWS (30%)¶
Covers SAP deployment, migration, and configuration.
2.1 SAP Deployment Methods¶
Deployment Options: - AWS Launch Wizard for SAP - SAP Cloud Appliance Library (CAL) - AWS CloudFormation templates - Manual installation - SAP Software Provisioning Manager (SWPM)
π AWS Launch Wizard for SAP - Automated deployment π Launch Wizard Guide - Deployment steps π SAP Cloud Appliance Library - SAP CAL π CloudFormation for SAP - Quick Start templates π SAP Installation Guide - Manual installation
2.2 SAP HANA Installation¶
Installation Steps: - Instance preparation and prerequisites - Storage configuration (data, log, shared) - HANA database installation - System replication setup - Backup configuration
π SAP HANA Installation - Installation guide π HANA Prerequisites - Pre-installation π HANA Storage Setup - Storage configuration π HANA Backup Setup - Backup configuration
2.3 SAP NetWeaver Installation¶
Application Server Deployment: - ASCS/ERS installation - Database instance configuration - Primary Application Server (PAS) - Additional Application Servers (AAS) - SAP Web Dispatcher configuration
π SAP NetWeaver on AWS - NetWeaver deployment π ASCS Installation - Central services π Application Server Setup - App servers
2.4 SAP Migration to AWS¶
Migration Strategies: - Homogeneous system copy (same OS/DB) - Heterogeneous system copy (different OS/DB) - SAP Database Migration Option (DMO) - Classical migration approach - Lift-and-shift vs re-architecture
π SAP Migration Guide - Migration planning π Migration Strategies - Approach comparison π SAP DMO - Database Migration Option π AWS MGN for SAP - Application Migration Service π AWS DMS - Database Migration Service
2.5 SAP Landscape Configuration¶
Transport Management: - Transport directories on EFS - Transport routes configuration - Change and transport system (CTS) - SAP Solution Manager integration
π SAP Transport Management - TMS configuration π Shared Storage for Transports - EFS for /sapmnt
System Landscape: - Development, Quality, Production setup - System landscape directory (SLD) - SAP router configuration - Landscape monitoring
π SAP Landscape Design - Multi-system architecture
Domain 3: Manage and Operate SAP Workloads on AWS (24%)¶
Covers day-to-day operations, monitoring, and management.
3.1 SAP System Administration on AWS¶
Operational Tasks: - Starting and stopping SAP systems - Instance lifecycle management - System refreshes and copies - Applying SAP patches and updates - License management
π SAP Operations Guide - Daily operations π Start/Stop Automation - Automated scheduling π System Copy - Copy procedures π SAP Patching - Update procedures
3.2 Backup and Recovery¶
Backup Strategies: - SAP HANA backups (data and log) - AWS Backup for SAP HANA - AWS Backint Agent - Snapshots vs file-based backups - Backup to S3
π SAP Backup Strategies - Backup planning π HANA Backup - HANA-specific backups π AWS Backint Agent - Native S3 backup π AWS Backup - Managed backup service π EBS Snapshots - Volume snapshots
Recovery Procedures: - Point-in-time recovery - System restore from backup - Disaster recovery failover - Data recovery procedures
π SAP Recovery - Recovery procedures π DR Testing - Testing DR plans
3.3 Monitoring SAP on AWS¶
AWS Monitoring Services: - CloudWatch for infrastructure metrics - CloudWatch Logs for SAP logs - CloudWatch alarms for alerting - AWS Systems Manager for patch management - SAP on AWS monitoring dashboard
π Monitoring SAP on AWS - Monitoring strategy π CloudWatch for SAP - CloudWatch integration π CloudWatch Agent - Agent configuration π Systems Manager - Operational management
SAP Monitoring Tools: - SAP Solution Manager - SAP HANA Cockpit - SAP Host Agent - DBA Cockpit - Transaction codes (SM50, ST22, etc.)
π SAP Solution Manager on AWS - SolMan deployment π SAP Host Agent - Agent configuration
3.4 Performance Optimization¶
Performance Tuning: - EC2 instance right-sizing - EBS optimization (IOPS, throughput) - Network performance (enhanced networking) - SAP HANA memory management - Database and application optimization
π Performance Tuning - Optimization guide π HANA Performance - HANA tuning π Enhanced Networking - Network optimization π EBS Performance Tuning - Storage optimization
3.5 Cost Optimization¶
Cost Management: - Reserved Instances for SAP - Savings Plans - Spot Instances for non-production - Auto-scaling for development/test - Right-sizing recommendations
π SAP Cost Optimization - Cost strategies π Reserved Instances - RI pricing π Savings Plans - Flexible pricing π Cost Explorer - Cost analysis
Domain 4: Secure SAP Workloads on AWS (16%)¶
Covers security, compliance, and access control.
4.1 SAP Security Best Practices¶
Security Layers: - Network security (VPC, security groups) - Operating system hardening - SAP application security - Database security - Data encryption
π SAP Security on AWS - Security overview π Security Best Practices - Security guidelines π SAP Security Notes - SAP security updates
4.2 Identity and Access Management¶
IAM for SAP: - IAM roles for EC2 instances - Service accounts for automation - MFA for administrative access - Least privilege principle - Cross-account access
π IAM for SAP - Access management π IAM Roles - Role-based access π IAM Best Practices - Security recommendations
SAP User Management: - SAP user administration - Integration with Active Directory - Single Sign-On (SSO) - Privileged user management
π SAP Authentication - User authentication
4.3 Data Protection¶
Encryption: - EBS volume encryption - S3 encryption for backups - Encryption in transit (TLS/SSL) - AWS KMS for key management - SAP Secure Network Communication (SNC)
π Data Encryption - Encryption strategies π EBS Encryption - Volume encryption π AWS KMS - Key management π S3 Encryption - Object encryption
4.4 Network Security¶
Security Controls: - Security groups for SAP components - Network ACLs - AWS WAF for web applications - VPC endpoints for AWS services - Private connectivity (Direct Connect, VPN)
π Network Security - Network protection π Security Groups - Firewall rules π AWS WAF - Web application firewall π VPC Endpoints - Private connections
4.5 Compliance and Governance¶
Compliance: - SAP-specific compliance requirements - Data residency and sovereignty - Audit logging (CloudTrail) - Compliance certifications - Shared responsibility model
π Compliance - Compliance overview π AWS CloudTrail - Audit logging π AWS Config - Configuration tracking π Shared Responsibility - Security model
Key AWS Services for SAP¶
Compute¶
- EC2: X1/X2/R5/R6i/R7i instances for SAP
- Dedicated Hosts: License compliance
- Placement Groups: Low-latency networking
π EC2 for SAP - Compute options π Dedicated Hosts - Licensing support
Storage¶
- EBS: gp3, io2 for SAP HANA
- EFS: Shared file systems
- FSx for ONTAP: Enterprise NAS
- S3: Backups and archives
π Storage Options - Storage architecture
Networking¶
- VPC: Network isolation
- Direct Connect: Hybrid connectivity
- Transit Gateway: Multi-VPC networking
- Route 53: DNS management
π Networking for SAP - Network design
Management & Operations¶
- AWS Backup: Centralized backup
- CloudWatch: Monitoring and alerting
- Systems Manager: Operational tasks
- AWS Launch Wizard: Automated deployment
π Management Tools - Operational tools
Security¶
- IAM: Access control
- KMS: Encryption keys
- CloudTrail: Audit logging
- AWS WAF: Application firewall
π Security Services - Security tools
Required Reading¶
AWS SAP Documentation¶
π SAP on AWS General Guide - Complete SAP guide π SAP HANA on AWS Guide - HANA-specific guide π SAP NetWeaver on AWS Guide - NetWeaver guide π SAP Architecture Best Practices - Architecture whitepaper
SAP Resources¶
π SAP Notes - SAP knowledge base π SAP on AWS Certification - SAP certification directory π SAP Quick Sizer - System sizing tool
AWS Whitepapers¶
π SAP Workloads on AWS - Implementation guide π SAP HANA Best Practices - Best practices guide
Study Strategy¶
Recommended Timeline (8-12 weeks, 15-20 hours/week)¶
Weeks 1-3: SAP Fundamentals - SAP architecture and components - SAP HANA and NetWeaver basics - SAP Basis administration concepts - Study time: 15 hours/week
Weeks 4-6: AWS Infrastructure for SAP - EC2 instance types for SAP - Storage design (EBS, EFS, FSx) - Networking (VPC, Direct Connect) - High availability and DR - Study time: 18 hours/week
Weeks 7-9: SAP Deployment and Migration - Installation methods - Migration strategies - AWS Launch Wizard - Hands-on deployments - Study time: 20 hours/week
Weeks 10-12: Operations and Practice - Monitoring and management - Backup and recovery - Security and compliance - Practice exams (aim for 80%+) - Study time: 15-18 hours/week
Study Resources¶
Official AWS Training: π AWS Training for SAP - SAP-specific training π SAP on AWS Learning Path - Official learning path
Hands-On Practice: - Deploy SAP systems using AWS Launch Wizard - Set up HANA System Replication - Configure backups with AWS Backint Agent - Build HA cluster with Pacemaker - Practice migration scenarios
SAP Training: - SAP NetWeaver Administration (NW001) - SAP HANA Administration (HA100) - SAP Basis Administration courses
Exam Day Tips¶
Preparation¶
- Review SAP-certified EC2 instance types
- Know HANA System Replication configurations
- Understand backup and DR strategies
- Review AWS Launch Wizard capabilities
- Get adequate rest before exam
During Exam¶
- Read questions carefully - many are scenario-based
- Pay attention to SAP-specific requirements (HA, performance, sizing)
- Look for keywords: "MOST cost-effective", "LEAST operational overhead"
- Eliminate wrong answers first
- Flag uncertain questions for review
- Manage time: ~2.6 minutes per question
Common Question Patterns¶
- Instance type selection for SAP workloads
- Storage configuration for HANA and NetWeaver
- High availability and disaster recovery scenarios
- Migration strategy selection
- Backup and recovery procedures
- Security and compliance requirements
- Cost optimization approaches
Technical Setup (Online Proctoring)¶
- Stable internet connection
- Webcam and microphone required
- Clear workspace
- Government-issued photo ID
- Close all applications
- 170 minutes is long - take breaks during review time
π Exam Prep Resources - Official preparation
After Certification¶
Career Benefits¶
- Demonstrates specialized SAP on AWS expertise
- Highly valued in enterprise SAP environments
- Salary premium for SAP+Cloud skills
- Opens SAP migration project opportunities
Related Certifications¶
π AWS Solutions Architect Professional - Advanced architecture π AWS Security Specialty - Security focus π SAP Certifications - SAP technology certifications
Continuous Learning¶
- Follow SAP on AWS blog
- Attend AWS re:Invent SAP sessions
- Join SAP on AWS community
- Stay updated with new instance types
- Practice with latest SAP releases
π SAP on AWS Blog - Latest updates π SAP on AWS YouTube - Video content
Quick Reference¶
Exam Details at a Glance¶
- 65 questions in 170 minutes = ~2.6 minutes per question
- 750/1000 to pass = Approximately 75%
- 30% SAP design = ~20 questions
- 30% SAP implementation = ~20 questions
- 24% SAP operations = ~16 questions
- 16% SAP security = ~10 questions
SAP-Certified EC2 Instance Types¶
| Instance Family | Use Case | Memory Range |
|---|---|---|
| X1/X1e | SAP HANA (legacy) | Up to 3,904 GB |
| X2idn/X2iedn | SAP HANA | Up to 2,048 GB |
| X2iezn | SAP HANA (high frequency) | Up to 1,536 GB |
| High Memory (u-*) | Large SAP HANA | Up to 24 TB |
| R5/R6i/R7i | SAP applications | Up to 1,024 GB |
Key SAP Components¶
| Component | Purpose | AWS Service |
|---|---|---|
| ASCS/ERS | Central services | EC2 + Pacemaker |
| PAS/AAS | Application servers | EC2 + Auto Scaling |
| SAP HANA | Database | EC2 (X2/High Memory) + EBS |
| Web Dispatcher | Load balancing | EC2 or ALB |
| SAP Router | Network connectivity | EC2 in DMZ |
Good luck with your AWS Certified SAP on AWS - Specialty exam! π