Skip to content

AWS Certified SAP on AWS - Specialty (PAS-C01) Fact Sheet

Exam Overview

Exam Code: PAS-C01 Exam Name: AWS Certified SAP on AWS - Specialty Duration: 170 minutes (2 hours 50 minutes) Questions: 65 questions Question Format: Multiple choice and multiple response Passing Score: 750/1000 (scaled scoring, approximately 75%) Cost: $300 USD Valid For: 3 years Prerequisites: Recommended AWS Solutions Architect Associate or equivalent experience Language: Available in English, Japanese, Korean, Simplified Chinese Delivery: Pearson VUE (online proctored or testing center)

πŸ“– Official Exam Page - Registration and details πŸ“– Exam Guide PDF - Detailed exam objectives πŸ“– Sample Questions - Official practice questions

Target Audience

This certification is designed for: - SAP Basis administrators managing SAP on AWS - SAP architects designing SAP solutions on AWS - Cloud architects with SAP workload experience - SAP consultants implementing AWS migrations - DevOps engineers managing SAP environments

Required Experience: - 5+ years SAP Basis administration experience - 1+ years operating SAP workloads on AWS - AWS infrastructure and services knowledge - SAP landscape architecture understanding

πŸ“– SAP on AWS Overview - AWS SAP solutions πŸ“– SAP on AWS Documentation - Complete SAP documentation

Exam Domains

Domain 1: Design SAP Workloads on AWS (30%)

This is the largest domain, covering SAP architecture design on AWS.

1.1 SAP Architecture Fundamentals

SAP System Components: - SAP NetWeaver architecture (ABAP, Java) - SAP HANA database architecture - SAP application servers (ASCS, PAS, AAS) - SAP Web Dispatcher - SAP Router and landscape connectivity

πŸ“– SAP on AWS Architecture - Reference architectures πŸ“– SAP HANA on AWS - HANA deployment πŸ“– SAP NetWeaver on AWS - NetWeaver architecture πŸ“– SAP System Requirements - Planning requirements

1.2 EC2 Instance Selection for SAP

SAP-Certified Instance Types: - X1, X1e, X2 instances (memory-optimized for HANA) - R5, R6i, R7i instances (general-purpose SAP) - U-series instances (high-memory HANA) - Graviton-based instances (ARM architecture)

πŸ“– SAP-Certified EC2 Instances - Certified instances πŸ“– X2 Instances for SAP HANA - High-memory instances πŸ“– High Memory Instances - Up to 24TB RAM πŸ“– SAP HANA Hardware Directory - AWS certifications πŸ“– Instance Sizing - Choosing instance types

1.3 Storage Design for SAP

Storage Options: - EBS for SAP HANA data and log volumes - EBS gp3, io2 for performance requirements - EFS for SAP transport directories - S3 for backups and archives - FSx for NetApp ONTAP for SAP shared storage

πŸ“– SAP Storage Best Practices - Storage configuration πŸ“– EBS for SAP HANA - HANA storage πŸ“– EBS Performance - Volume types πŸ“– FSx for ONTAP - Shared storage πŸ“– EFS for SAP - Elastic File System

1.4 Network Design

VPC Configuration: - Multi-AZ architecture for high availability - Private subnets for SAP workloads - NAT Gateways for outbound connectivity - VPN and Direct Connect for hybrid - Transit Gateway for multi-VPC

πŸ“– SAP Network Architecture - Network design πŸ“– VPC for SAP - Virtual private cloud πŸ“– AWS Direct Connect - Dedicated connectivity πŸ“– Transit Gateway - Network hub πŸ“– Placement Groups - Low-latency networking

1.5 High Availability and Disaster Recovery

HA Architecture: - Multi-AZ deployments - SAP HANA System Replication (HSR) - Pacemaker cluster for failover - Application Server clustering - Database replication strategies

πŸ“– SAP HA on AWS - High availability πŸ“– HANA System Replication - HSR configuration πŸ“– Pacemaker Clustering - Cluster setup πŸ“– Multi-AZ Architecture - DR patterns

Disaster Recovery: - Cross-region replication - Backup and restore strategies - Pilot light and warm standby - RTO and RPO considerations

πŸ“– SAP DR Strategies - DR planning πŸ“– AWS Backup for SAP - Backup solutions πŸ“– Cross-Region Replication - DR setup

Domain 2: Implement SAP Workloads on AWS (30%)

Covers SAP deployment, migration, and configuration.

2.1 SAP Deployment Methods

Deployment Options: - AWS Launch Wizard for SAP - SAP Cloud Appliance Library (CAL) - AWS CloudFormation templates - Manual installation - SAP Software Provisioning Manager (SWPM)

πŸ“– AWS Launch Wizard for SAP - Automated deployment πŸ“– Launch Wizard Guide - Deployment steps πŸ“– SAP Cloud Appliance Library - SAP CAL πŸ“– CloudFormation for SAP - Quick Start templates πŸ“– SAP Installation Guide - Manual installation

2.2 SAP HANA Installation

Installation Steps: - Instance preparation and prerequisites - Storage configuration (data, log, shared) - HANA database installation - System replication setup - Backup configuration

πŸ“– SAP HANA Installation - Installation guide πŸ“– HANA Prerequisites - Pre-installation πŸ“– HANA Storage Setup - Storage configuration πŸ“– HANA Backup Setup - Backup configuration

2.3 SAP NetWeaver Installation

Application Server Deployment: - ASCS/ERS installation - Database instance configuration - Primary Application Server (PAS) - Additional Application Servers (AAS) - SAP Web Dispatcher configuration

πŸ“– SAP NetWeaver on AWS - NetWeaver deployment πŸ“– ASCS Installation - Central services πŸ“– Application Server Setup - App servers

2.4 SAP Migration to AWS

Migration Strategies: - Homogeneous system copy (same OS/DB) - Heterogeneous system copy (different OS/DB) - SAP Database Migration Option (DMO) - Classical migration approach - Lift-and-shift vs re-architecture

πŸ“– SAP Migration Guide - Migration planning πŸ“– Migration Strategies - Approach comparison πŸ“– SAP DMO - Database Migration Option πŸ“– AWS MGN for SAP - Application Migration Service πŸ“– AWS DMS - Database Migration Service

2.5 SAP Landscape Configuration

Transport Management: - Transport directories on EFS - Transport routes configuration - Change and transport system (CTS) - SAP Solution Manager integration

πŸ“– SAP Transport Management - TMS configuration πŸ“– Shared Storage for Transports - EFS for /sapmnt

System Landscape: - Development, Quality, Production setup - System landscape directory (SLD) - SAP router configuration - Landscape monitoring

πŸ“– SAP Landscape Design - Multi-system architecture

Domain 3: Manage and Operate SAP Workloads on AWS (24%)

Covers day-to-day operations, monitoring, and management.

3.1 SAP System Administration on AWS

Operational Tasks: - Starting and stopping SAP systems - Instance lifecycle management - System refreshes and copies - Applying SAP patches and updates - License management

πŸ“– SAP Operations Guide - Daily operations πŸ“– Start/Stop Automation - Automated scheduling πŸ“– System Copy - Copy procedures πŸ“– SAP Patching - Update procedures

3.2 Backup and Recovery

Backup Strategies: - SAP HANA backups (data and log) - AWS Backup for SAP HANA - AWS Backint Agent - Snapshots vs file-based backups - Backup to S3

πŸ“– SAP Backup Strategies - Backup planning πŸ“– HANA Backup - HANA-specific backups πŸ“– AWS Backint Agent - Native S3 backup πŸ“– AWS Backup - Managed backup service πŸ“– EBS Snapshots - Volume snapshots

Recovery Procedures: - Point-in-time recovery - System restore from backup - Disaster recovery failover - Data recovery procedures

πŸ“– SAP Recovery - Recovery procedures πŸ“– DR Testing - Testing DR plans

3.3 Monitoring SAP on AWS

AWS Monitoring Services: - CloudWatch for infrastructure metrics - CloudWatch Logs for SAP logs - CloudWatch alarms for alerting - AWS Systems Manager for patch management - SAP on AWS monitoring dashboard

πŸ“– Monitoring SAP on AWS - Monitoring strategy πŸ“– CloudWatch for SAP - CloudWatch integration πŸ“– CloudWatch Agent - Agent configuration πŸ“– Systems Manager - Operational management

SAP Monitoring Tools: - SAP Solution Manager - SAP HANA Cockpit - SAP Host Agent - DBA Cockpit - Transaction codes (SM50, ST22, etc.)

πŸ“– SAP Solution Manager on AWS - SolMan deployment πŸ“– SAP Host Agent - Agent configuration

3.4 Performance Optimization

Performance Tuning: - EC2 instance right-sizing - EBS optimization (IOPS, throughput) - Network performance (enhanced networking) - SAP HANA memory management - Database and application optimization

πŸ“– Performance Tuning - Optimization guide πŸ“– HANA Performance - HANA tuning πŸ“– Enhanced Networking - Network optimization πŸ“– EBS Performance Tuning - Storage optimization

3.5 Cost Optimization

Cost Management: - Reserved Instances for SAP - Savings Plans - Spot Instances for non-production - Auto-scaling for development/test - Right-sizing recommendations

πŸ“– SAP Cost Optimization - Cost strategies πŸ“– Reserved Instances - RI pricing πŸ“– Savings Plans - Flexible pricing πŸ“– Cost Explorer - Cost analysis

Domain 4: Secure SAP Workloads on AWS (16%)

Covers security, compliance, and access control.

4.1 SAP Security Best Practices

Security Layers: - Network security (VPC, security groups) - Operating system hardening - SAP application security - Database security - Data encryption

πŸ“– SAP Security on AWS - Security overview πŸ“– Security Best Practices - Security guidelines πŸ“– SAP Security Notes - SAP security updates

4.2 Identity and Access Management

IAM for SAP: - IAM roles for EC2 instances - Service accounts for automation - MFA for administrative access - Least privilege principle - Cross-account access

πŸ“– IAM for SAP - Access management πŸ“– IAM Roles - Role-based access πŸ“– IAM Best Practices - Security recommendations

SAP User Management: - SAP user administration - Integration with Active Directory - Single Sign-On (SSO) - Privileged user management

πŸ“– SAP Authentication - User authentication

4.3 Data Protection

Encryption: - EBS volume encryption - S3 encryption for backups - Encryption in transit (TLS/SSL) - AWS KMS for key management - SAP Secure Network Communication (SNC)

πŸ“– Data Encryption - Encryption strategies πŸ“– EBS Encryption - Volume encryption πŸ“– AWS KMS - Key management πŸ“– S3 Encryption - Object encryption

4.4 Network Security

Security Controls: - Security groups for SAP components - Network ACLs - AWS WAF for web applications - VPC endpoints for AWS services - Private connectivity (Direct Connect, VPN)

πŸ“– Network Security - Network protection πŸ“– Security Groups - Firewall rules πŸ“– AWS WAF - Web application firewall πŸ“– VPC Endpoints - Private connections

4.5 Compliance and Governance

Compliance: - SAP-specific compliance requirements - Data residency and sovereignty - Audit logging (CloudTrail) - Compliance certifications - Shared responsibility model

πŸ“– Compliance - Compliance overview πŸ“– AWS CloudTrail - Audit logging πŸ“– AWS Config - Configuration tracking πŸ“– Shared Responsibility - Security model

Key AWS Services for SAP

Compute

  • EC2: X1/X2/R5/R6i/R7i instances for SAP
  • Dedicated Hosts: License compliance
  • Placement Groups: Low-latency networking

πŸ“– EC2 for SAP - Compute options πŸ“– Dedicated Hosts - Licensing support

Storage

  • EBS: gp3, io2 for SAP HANA
  • EFS: Shared file systems
  • FSx for ONTAP: Enterprise NAS
  • S3: Backups and archives

πŸ“– Storage Options - Storage architecture

Networking

  • VPC: Network isolation
  • Direct Connect: Hybrid connectivity
  • Transit Gateway: Multi-VPC networking
  • Route 53: DNS management

πŸ“– Networking for SAP - Network design

Management & Operations

  • AWS Backup: Centralized backup
  • CloudWatch: Monitoring and alerting
  • Systems Manager: Operational tasks
  • AWS Launch Wizard: Automated deployment

πŸ“– Management Tools - Operational tools

Security

  • IAM: Access control
  • KMS: Encryption keys
  • CloudTrail: Audit logging
  • AWS WAF: Application firewall

πŸ“– Security Services - Security tools

Required Reading

AWS SAP Documentation

πŸ“– SAP on AWS General Guide - Complete SAP guide πŸ“– SAP HANA on AWS Guide - HANA-specific guide πŸ“– SAP NetWeaver on AWS Guide - NetWeaver guide πŸ“– SAP Architecture Best Practices - Architecture whitepaper

SAP Resources

πŸ“– SAP Notes - SAP knowledge base πŸ“– SAP on AWS Certification - SAP certification directory πŸ“– SAP Quick Sizer - System sizing tool

AWS Whitepapers

πŸ“– SAP Workloads on AWS - Implementation guide πŸ“– SAP HANA Best Practices - Best practices guide

Study Strategy

Weeks 1-3: SAP Fundamentals - SAP architecture and components - SAP HANA and NetWeaver basics - SAP Basis administration concepts - Study time: 15 hours/week

Weeks 4-6: AWS Infrastructure for SAP - EC2 instance types for SAP - Storage design (EBS, EFS, FSx) - Networking (VPC, Direct Connect) - High availability and DR - Study time: 18 hours/week

Weeks 7-9: SAP Deployment and Migration - Installation methods - Migration strategies - AWS Launch Wizard - Hands-on deployments - Study time: 20 hours/week

Weeks 10-12: Operations and Practice - Monitoring and management - Backup and recovery - Security and compliance - Practice exams (aim for 80%+) - Study time: 15-18 hours/week

Study Resources

Official AWS Training: πŸ“– AWS Training for SAP - SAP-specific training πŸ“– SAP on AWS Learning Path - Official learning path

Hands-On Practice: - Deploy SAP systems using AWS Launch Wizard - Set up HANA System Replication - Configure backups with AWS Backint Agent - Build HA cluster with Pacemaker - Practice migration scenarios

SAP Training: - SAP NetWeaver Administration (NW001) - SAP HANA Administration (HA100) - SAP Basis Administration courses

Exam Day Tips

Preparation

  • Review SAP-certified EC2 instance types
  • Know HANA System Replication configurations
  • Understand backup and DR strategies
  • Review AWS Launch Wizard capabilities
  • Get adequate rest before exam

During Exam

  • Read questions carefully - many are scenario-based
  • Pay attention to SAP-specific requirements (HA, performance, sizing)
  • Look for keywords: "MOST cost-effective", "LEAST operational overhead"
  • Eliminate wrong answers first
  • Flag uncertain questions for review
  • Manage time: ~2.6 minutes per question

Common Question Patterns

  • Instance type selection for SAP workloads
  • Storage configuration for HANA and NetWeaver
  • High availability and disaster recovery scenarios
  • Migration strategy selection
  • Backup and recovery procedures
  • Security and compliance requirements
  • Cost optimization approaches

Technical Setup (Online Proctoring)

  • Stable internet connection
  • Webcam and microphone required
  • Clear workspace
  • Government-issued photo ID
  • Close all applications
  • 170 minutes is long - take breaks during review time

πŸ“– Exam Prep Resources - Official preparation

After Certification

Career Benefits

  • Demonstrates specialized SAP on AWS expertise
  • Highly valued in enterprise SAP environments
  • Salary premium for SAP+Cloud skills
  • Opens SAP migration project opportunities

πŸ“– AWS Solutions Architect Professional - Advanced architecture πŸ“– AWS Security Specialty - Security focus πŸ“– SAP Certifications - SAP technology certifications

Continuous Learning

  • Follow SAP on AWS blog
  • Attend AWS re:Invent SAP sessions
  • Join SAP on AWS community
  • Stay updated with new instance types
  • Practice with latest SAP releases

πŸ“– SAP on AWS Blog - Latest updates πŸ“– SAP on AWS YouTube - Video content


Quick Reference

Exam Details at a Glance

  • 65 questions in 170 minutes = ~2.6 minutes per question
  • 750/1000 to pass = Approximately 75%
  • 30% SAP design = ~20 questions
  • 30% SAP implementation = ~20 questions
  • 24% SAP operations = ~16 questions
  • 16% SAP security = ~10 questions

SAP-Certified EC2 Instance Types

Instance Family Use Case Memory Range
X1/X1e SAP HANA (legacy) Up to 3,904 GB
X2idn/X2iedn SAP HANA Up to 2,048 GB
X2iezn SAP HANA (high frequency) Up to 1,536 GB
High Memory (u-*) Large SAP HANA Up to 24 TB
R5/R6i/R7i SAP applications Up to 1,024 GB

Key SAP Components

Component Purpose AWS Service
ASCS/ERS Central services EC2 + Pacemaker
PAS/AAS Application servers EC2 + Auto Scaling
SAP HANA Database EC2 (X2/High Memory) + EBS
Web Dispatcher Load balancing EC2 or ALB
SAP Router Network connectivity EC2 in DMZ

Good luck with your AWS Certified SAP on AWS - Specialty exam! πŸŽ‰