I Read 100 'I Failed the AWS SAA' Reddit Posts. Here's What Actually Trips People Up.

If you spend a week in r/AWSCertifications, you start to notice something: the "I failed" posts rhyme.

Not the scores — those vary. The stories rhyme. Same handful of mistakes, told in slightly different words by smart people who put in the hours. I went through a stack of them — the gut-punch "690, needed 720" posts, the "I had 85% on every practice test and still failed" posts, the long retro write-ups people post after they finally pass on attempt two.

Five patterns came up over and over. Here's the thing that surprised me most:

Almost none of them are about not knowing AWS.

They're about how the SAA-C03 tests what you know — and the small habits that quietly cost people 30–40 scaled points. If your exam is a few weeks out, these are the cheapest points you'll ever pick up.

Pattern #1: They studied the services. The exam tests the scenario.

The single most common version of the fail post goes like this:

"I watched the whole course, took notes on every service, I could tell you exactly what S3, RDS, and EC2 do. Then I sat down and half the questions had two answers that both looked correct."

That's the trap. The SAA-C03 almost never asks "What is Amazon SQS?" It asks:

A retail company processes orders in bursts during flash sales. Order processing must not lose messages if the downstream service is briefly unavailable, and each order must be processed exactly once, in order. Which approach is MOST appropriate?

Now SQS standard, SQS FIFO, SNS, and Kinesis are all on the table, three of them are plausible, and the right answer hinges on two words: "in order" and "exactly once" → SQS FIFO. Knowing what SQS is gets you nothing here. Knowing when you'd pick it over its three cousins is the whole game.

Fix it: Stop quizzing yourself on definitions. Start quizzing yourself on trade-offs. For every service, be able to finish the sentence: "I'd choose this over ____ when the requirement is ____." If you can't, you don't know it at exam depth yet.

Pattern #2: The weak-domain blind spot.

This one is brutal because it feels like you're ready.

"I was averaging 82% across my practice tests. I felt great walking in. Failed by two questions."

Here's what an average hides. The SAA-C03 is scored across four weighted domains:

Domain	Rough weight
Design Secure Architectures	~30%
Design Resilient Architectures	~26%
Design High-Performing Architectures	~24%
Design Cost-Optimized Architectures	~20%

An 82% average can easily be 94% on Resilient and 61% on Secure. The exam doesn't care about your average — it just hands you ~30% of its questions from the domain you're worst at. Your strengths can't vote on your behalf.

Fix it: Never look at a single overall percentage again. Look at per-domain accuracy and drag up your lowest bar. The most efficient point of prep in your final two weeks is the domain you've been quietly avoiding because it's less fun.

This is exactly why CertCoach scores every mock by domain and weights your next mock toward your weakest one — so you can't hide behind a good average. (Take the free 10-question diagnostic and it'll show you your weak domains before you've even signed up.)

Pattern #3: They ran out of time — and panic-guessed the last 15.

"I spent way too long on the early questions, looked up and had 20 minutes left for 18 questions. Just clicked through the end."

The math: 65 questions, 130 minutes. That's exactly two minutes per question with zero buffer. Some questions are 20-second reads. Some are dense three-paragraph scenarios. If you sink five minutes into one nasty VPC routing question early on, you're now borrowing time from your future self — who will be tired and rushing.

Fix it — flag and move. This is the highest-ROI exam-day habit nobody mentions:

On your first pass, if a question isn't yielding in ~90 seconds, pick your best guess, flag it, and move on.
Finish the whole exam first. Every easy question at the end is worth the same as every hard one at the start — don't let the hard ones eat the easy ones.
Come back to flagged questions with your remaining time and a calmer head.

Practice this during your mocks, on the clock. Exam-day discipline is a skill you rehearse, not a thing you summon.

Pattern #4: The "close cousins" got them.

Over and over, people fail on a small set of service pairs that look almost identical until a requirement separates them. If you only memorize one thing from this post, memorize these:

RDS Multi-AZ vs. Read Replicas — Multi-AZ is for availability (a synchronous standby that fails over; you can't read from it). Read Replicas are for scaling reads (asynchronous, can be cross-region). The exam loves to offer Read Replicas as the answer to a high-availability question. It's wrong. → We wrote a whole post on this one.
Security Groups vs. NACLs — Security Groups are stateful and operate at the instance/ENI level (allow rules only). NACLs are stateless and operate at the subnet level (allow and deny rules). "Block a single malicious IP" → NACL, because SGs can't deny.
Gateway endpoints vs. Interface endpoints — Gateway endpoints are free and only serve S3 and DynamoDB. Everything else uses an Interface endpoint (PrivateLink, hourly cost). "Private access to S3 with no NAT cost" → Gateway endpoint.
SQS vs. SNS vs. Kinesis — Queue (one consumer pulls, work distribution) vs. pub/sub fan-out (many subscribers) vs. ordered, replayable streaming (analytics, multiple readers of the same data). Three different shapes; the requirement tells you which.
NAT Gateway vs. Internet Gateway — IGW gives a subnet public, bidirectional internet. NAT lets private instances reach out without being reachable inbound. Mixing these up is a classic miss.

Fix it: Make a one-page "confusion table" of every pair you've ever second-guessed, with the one requirement word that separates them. Review it the morning of the exam.

Pattern #5: They did mocks — but never mined their misses.

This is the quietest killer, and the most fixable.

"I took like 8 practice exams. I kept getting 75%-ish and couldn't figure out why I wasn't improving."

Doing more mocks doesn't make you better. Understanding why you missed each question makes you better. The people who improve fastest treat every wrong answer like a bug report:

What did the question actually require? (the requirement word you missed)
Why was my answer wrong — and why was the right one right?
What's the underlying concept, and where's the AWS doc that settles it?

The people stuck at 75% are taking mock after mock and reading the green "correct answer" without ever interrogating their own reasoning. They repeat the same five mistakes across all eight exams.

Fix it: After every mock, spend more time on the review than you did on the exam. For each miss, write one sentence on the rule you violated. When you can't tell why the right answer is right, that's not a question to skip — that's the most valuable question on the test.

This is the gap CertCoach was built to close. Miss a question on RDS Multi-AZ and you don't just see the answer — you can ask "but why not Read Replicas here?" and get a real, AWS-doc-grounded explanation, then keep asking follow-ups until it actually clicks. It's the difference between a question bank and a tutor sitting next to you.

The pattern behind the patterns

Look back at the five:

Studied services, not scenarios
Strong average hiding a weak domain
Ran out of time
Confused the close cousins
Took mocks but never mined the misses

Not one of them is "I didn't study enough AWS." They're all about exam craft — turning what you know into points under timed, adversarial, scenario-based conditions. That's good news, because exam craft is faster to fix than knowledge. You can patch most of this in your final two weeks.

If your exam is 2–4 weeks out, here's the whole plan in one breath: find your weakest domain, drill scenarios (not definitions) in that domain, review every miss until you can name the rule you broke, and rehearse flag-and-move on the clock.

Find your weak spots in 10 minutes

CertCoach is an AI study partner built for exactly this sprint. Start with a free 10-question diagnostic — no signup, no card — and it'll show you which of the four domains you're weakest in before you've created an account.

When you're ready to drill, the CertCoach Pass is $29, one-time — 12 months of unlimited adaptive mocks and weak-area drills, 90 days of unlimited AI tutoring you can ask follow-ups until each concept clicks, no subscription. That's well under your $150 exam voucher, and it comes with a 7-day full-refund promise.

→ Take the free diagnostic and see your weak domains in 10 minutes.

Booked your exam recently? Drop your date in the comments — happy to point you at the right drills for your timeline.