The AWS certifications that actually change what you get paid
The 2024 Stack Overflow Developer Survey found that 48% of all respondents use AWS, rising to 52.2% among professional developers. That’s not a surprise. What is surprising is how unevenly the certifications map to actual hiring outcomes. Some carry real weight in job descriptions and interviews. Others mostly exist to fill LinkedIn badges.
I work on the engineering side of LastRound AI, so I’ve spent a lot of time watching cloud candidates go through live technical interviews. The cert question comes up more than you’d expect. And the pattern isn’t “more certs equals better.” It’s closer to “one or two right certs, with hands-on backing, equals much better.”
This post covers the cert structure as it stands in mid-2026 (AWS did some renaming in 2025), the three certs I think are worth serious time, two that get overhyped, and one honest opinion you might disagree with.
What the AWS certification map looks like right now
As of 2026, AWS has 12 active certifications spanning four tiers. Two things changed in the 2024-2025 cycle that a lot of guides haven’t caught up with yet.
First: the old SysOps Administrator – Associate was renamed to AWS Certified CloudOps Engineer – Associate (SOA-C03). Same general domain, updated exam content. If you studied for SysOps, your material is mostly still valid, but the official name on certificates is now CloudOps Engineer.
Second: AWS released the Certified Generative AI Developer – Professional (AIP-C01) and the AI Practitioner (foundational). These are new enough that their signal in job postings is still thin. Hiring managers at most companies in early 2026 don’t have strong opinions about them yet.
| Tier | Certifications | Exam fee (USD) |
|---|---|---|
| Foundational | Cloud Practitioner, AI Practitioner | $100 |
| Associate | Solutions Architect (SAA-C03), Developer (DVA-C02), CloudOps Engineer (SOA-C03) | $150 |
| Professional | Solutions Architect Pro (SAP-C02), DevOps Engineer Pro (DOP-C02), Generative AI Developer (AIP-C01), Security Engineer Pro (SCS-C02) | $300 |
| Specialty | Machine Learning, Database, Networking, Data Analytics | $300 |
Note: AWS Security moved from Specialty to Professional tier in 2025 and is now called Certified Security Engineer – Professional (SCS-C02). Older guides still list it under Specialty.
The three AWS certifications worth real study time
Solutions Architect – Associate (SAA-C03)
This is the one that shows up in job descriptions more than any other AWS cert, across cloud engineering, backend, platform, and DevOps roles. It’s become close to a baseline signal in the same way that a computer science degree used to be. Not sufficient on its own, but its absence is sometimes noticed.
The exam (65 questions, 130 minutes) covers networking, storage, compute, databases, security, and cost optimization at a breadth-first level. You’re not expected to have memorized every API flag. You’re expected to know when to use S3 vs EFS vs EBS, why you’d put a CloudFront distribution in front of an S3 bucket, and what the difference between NACLs and security groups is in practice. Scenario-based questions dominate. Pure recall won’t carry you.
Study path I’ve seen work: one structured video course (Stephane Maarek’s Udemy course is the most consistently recommended, though it runs around 27 hours), followed by a set of practice exams (Tutorials Dojo is the most realistic I’ve come across), followed by about 15-20 hours of hands-on AWS free tier work. Total study time for someone with some cloud background: roughly 70 hours. Less if you already work on AWS daily.
Salary context
Salary.com reported the average US salary for an AWS Certified Solutions Architect at $124,648 as of June 2026, with the 75th percentile at $128,986. The cert alone doesn’t get you there. It’s the combination of cert plus demonstrated architecture experience that pushes compensation.
Developer – Associate (DVA-C02)
If you’re a software engineer who writes code that runs on AWS, this one is more directly useful than Solutions Architect Associate in day-to-day work, even though it shows up less on job postings. The exam goes deep on Lambda, API Gateway, DynamoDB, SQS/SNS, CodePipeline, CodeDeploy, and X-Ray. These are the services you actually hit constantly.
It pairs well with SAA-C03. The overlap between the two exams is real but not total. You’d study them back-to-back across about 4 months and come out with both the architectural vocabulary and the developer-level service knowledge.
I’d prioritize SAA-C03 first if you’re going for a title change or a salary negotiation. DVA-C02 first if you’re trying to be more effective in your current role while studying for the Associate.
Security Engineer – Professional (SCS-C02)
Security specialist roles are still among the most consistently in-demand positions in cloud. The SCS-C02 (now at Professional tier after the 2025 restructuring) tests IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, and incident response workflows. The exam was updated when it moved tiers, so study materials from before late 2024 are partially stale.
You need a solid AWS foundation before this one. Going straight to it without SAA-C03 or equivalent hands-on experience is a way to spend $300 and learn that the prerequisite was real.
If you’re targeting cloud security roles specifically, this plus some practical CTF or cloud-security lab experience (CloudGoat from Rhino Security Labs is the one I see mentioned most in that community) is a strong combination.
Two AWS certifications that get more credit than they deserve
Cloud Practitioner (CLF-C02)
This is a $100 exam that non-technical stakeholders take to get a baseline cloud orientation. For anyone in an engineering or technical role, it signals almost nothing to a hiring manager. The questions are definitional. What is an availability zone? What does the shared responsibility model mean?
I’ve sat in on interviews where the candidate listed Cloud Practitioner as their primary AWS credential. The reaction from interviewers is neutral at best. Skip it and study for SAA-C03 directly. The study ramp-up takes about 3 weeks longer but the payoff is in a completely different range. The only people for whom Cloud Practitioner makes clear sense: project managers, sales engineers, or business analysts who need AWS literacy without deep technical fluency.
Specialty certs (Data Analytics, Database, Networking)
Here’s my slightly contrarian take: most of the remaining Specialty certs are not worth the effort unless your current role or a specific target role explicitly requires them. The Machine Learning Specialty, for example, is a famously poor predictor of actual ML engineering skill. Interviewers at companies that hire real ML engineers know this. What they want is project work, papers, or deployed model experience, not an exam score on a cert that tests surface-level Sagemaker knowledge.
I could be wrong about this. Someone with ML Specialty plus strong project work is clearly better positioned than someone with neither. But the cert alone doesn’t move the needle the way SAA-C03 does in cloud engineering.
What we see at LastRound AI when AWS certs come up
Working on the tooling side of LastRound AI, I’ve noticed a consistent pattern across cloud architecture interviews on our platform: candidates who hold SAA-C03 don’t automatically perform better on system design questions, but they tend to use service names and tradeoffs with more precision. The interviewers we see on the other side of those conversations respond to that precision. It changes the texture of the conversation from “I think you’d use something like… S3 maybe?” to “I’d put it in S3 with a lifecycle policy to Glacier after 30 days.” That difference isn’t about the cert. It’s about the structured exposure the cert study forces. The cert is the proxy. The underlying learning is the actual thing.
What we don’t see: certifications standing alone as the deciding factor. The AWS certifications that come up tend to open a conversation rather than close one. Somebody asks “so you have SAA-C03, walk me through how you’d architect a multi-region failover” and then the real interview starts.
Practical study paths by role
Software engineers building on AWS
- SAA-C03 first (validates architectural thinking, shows up on JDs)
- DVA-C02 second, 8-10 weeks later (practical service-level depth)
- SAP-C02 optional, 6+ months later if targeting staff/principal roles
Realistic timeline: 5-7 months total for the first two at roughly 8-10 hours per week.
DevOps and platform engineers
- SAA-C03 (same baseline as above)
- CloudOps Engineer Associate (formerly SysOps) if you want operational depth
- DevOps Engineer Pro (DOP-C02) for senior DevOps/SRE title targets
The CloudOps cert overlaps a lot with SAA-C03. Some people skip it and go directly to DevOps Pro after SAA. Both are defensible choices.
Cloud security specialists
- SAA-C03 (non-negotiable prerequisite)
- Security Engineer Pro (SCS-C02) – updated for 2025, go direct
- CISSP or CompTIA Security+ for breadth if the role requires multi-cloud or compliance frameworks
Keeping costs manageable
The practical cost to pass SAA-C03, including a video course and practice exams: around $175-190, assuming you buy a Udemy course during a sale (they run $10-15 every few weeks) and pick up Tutorials Dojo practice tests (around $15-20). The exam itself is $150.
A few things worth knowing. After passing any AWS exam, you get a 50% discount voucher for your next one. AWS Skill Builder has a free tier with official learning paths that cover a good chunk of the foundational material. Some employers reimburse certification costs under professional development budgets, and it’s worth asking before you pay out of pocket.
The bigger cost is time. 70 hours of focused study is not trivial. Spreading it over 3-4 months at 5 hours per week is realistic for someone with a full-time engineering job.
Preparing for the AWS interview, not just the exam
The certification validates knowledge. The interview tests whether you can apply it under pressure, articulate tradeoffs, and design systems you haven’t seen before. Those are different skills. If you’re facing a cloud architect round, see how candidates handle real-time AWS design questions with our AI interview copilot.
Related reading
If you’re preparing for the interview side of cloud roles alongside the cert study, these two posts go into more depth on what interviewers actually test:
- Cloud architect interview questions: what senior rounds actually look like
- MLOps interview questions: the real bar in 2026
One last thing. The SAA-C03 is worth it for most technical people who work on or want to work on AWS infrastructure. That’s my honest read after watching a lot of cloud interviews. The rest of the cert catalog is a spectrum of “situationally useful” to “probably not worth your time unless your specific job requires it.” Start with the right one, back it with real hands-on practice, and you’ll be in good shape for what interviewers actually ask.
nice article