Refresh and deepen the core services you will compose into architectures: EC2 and the compute family, S3 and the storage portfolio, VPC networking with subnets, route tables, gateways and endpoints, IAM, and the managed databases. This track makes sure the foundation is solid before you start making design trade-offs in the rest of the course.

Security is the largest SAA domain. Design least-privilege access with IAM roles and policies, secure your network with security groups, NACLs, and private subnets, and protect data with KMS encryption, ACM certificates, and Secrets Manager. Cover edge protection (WAF, Shield), federation and Cognito, and how to architect for compliance — choosing the secure option the exam rewards.

Build systems that survive failure. Master multi-AZ deployments, Auto Scaling groups, Elastic Load Balancing, and decoupling with SQS and SNS. Design for high availability and fault tolerance, choose the right disaster-recovery strategy for a given RTO and RPO (backup-restore, pilot light, warm standby, multi-site), and use Route 53 routing policies to keep applications online when things break.

Performance is about choosing well. Match workloads to the right compute (EC2 families, Lambda, containers), the right storage (EBS volume types, S3, instance store) and the right database (RDS, Aurora, DynamoDB, ElastiCache). Add caching with CloudFront and ElastiCache, scale with read replicas and Auto Scaling, and speed global delivery with edge services — the trade-offs the exam loves to test.

The cheapest architecture that meets the requirements wins points. Master EC2 purchasing options (Reserved, Savings Plans, Spot), S3 storage classes and lifecycle policies, and right-sizing. Tie it together with the AWS Well-Architected Framework and its pillars, plus the cost tools (Cost Explorer, Budgets, Compute Optimizer). Finish with an exam strategy for reading scenario questions and eliminating wrong answers fast.