AWS Certified CloudOps Engineer Associate (SOA-C03) Exam Guide (2026)

If your bookmarks still say SysOps Administrator SOA-C02, stop using them as the study plan. That exam retired on 29 September 2025. The live associate operations cert is AWS Certified CloudOps Engineer - Associate, exam code SOA-C03.

The old name still shows up in search and in some of our own older pages. This guide is the 2026 version: five domains, containers in scope, more multi-account work, and no separate cost domain.

What actually changed

SOA-C02 had six domains. Cost and performance optimization (old Domain 6) was folded into Domain 1. AWS did not drop those skills. They now sit next to CloudWatch, logging, and remediation, which is closer to how the job works: you notice a bill or a latency spike in the same console you use to fix it.

Other shifts that matter when you study:

• The certification title is CloudOps Engineer only if you pass SOA-C03. An existing SysOps Administrator badge is not renamed.
• Containers are in scope. ECS, EKS at an operator level, and how you roll, scale, and watch them.
• More multi-account and multi-Region operations: Organizations, StackSets, backup across accounts, traffic that is not a single VPC.
• More infrastructure as code and automation. Clicking in the console is the trap answer more often than it used to be.
• SOA-C02 lab-style items are gone from the current outline. Do not grind old “exam labs” PDFs.

Your SysOps Associate cert stays valid for its normal three-year window. You do not have to sit C03 to keep it. You do have to sit C03 if you want the CloudOps name or you are starting now.

Exam shape

The first three domains are two-thirds of the scored items. If you only memorize VPC options and skip EventBridge plus CloudFormation, the math is against you.

How to study for C03, not C02

Week 1 — Domain 1 as one job, not two. Pair a metric with a remediation. Alarm on a queue depth, then an SSM document or a Lambda. Know when a custom metric is required. Know the difference between a log group you search and a metric filter you alarm on. Cost anomalies belong here now, next to performance, not in a leftover Domain 6 notebook.

Week 2 — Failure that the stem already described. Multi-AZ is not always the answer. Sometimes the data is in one AZ on purpose and the right move is AWS Backup plus a tested restore. Read RTO and RPO before you pick Auto Scaling.

Week 3 — Provision like an operator. CloudFormation updates, change sets, StackSets for three accounts, golden AMIs, ECS service deploy, an EventBridge rule that starts a patch window. If the option is “open the console and resize the instance,” look for the automated option first.

Week 4 — Security and the network path. Someone already has access they should not. Config rule, SCP, or IAM condition? Traffic dies between a container and a database. Security group, NACL, or route table? CloudFront plus an ACM certificate in us-east-1 is still a classic stem.

Traps leftover from C02 banks

A lot of public “SysOps” sets are still C02. You will see:

• Six-domain weights and a standalone cost chapter
• Exam labs that C03 does not use
• No containers
• Single-account stories only
• Cost as a separate pillar instead of a Domain 1 finding

If a question is easy because three options are not AWS operations at all, it is also a bad C03 item. The live exam puts two good operator actions in the list and asks which one matches the constraint (time, blast radius, account boundary).

How this maps to CloudFluently

We still have CloudOps / SysOps practice sets on the site. Treat those as C02-era practice until we publish a labeled C03 hard set. Use this page for the outline. Use the official comparison if you want the task-by-task map from C02 to C03.

Free stays free: this guide, study notes, and the current banks. Harder C03 packs are the curated tier later.

Official outline: AWS Certified CloudOps Engineer - Associate (SOA-C03). Official delta: SOA-C02 vs SOA-C03.