0Pricing
AWS Solutions Architect · Lesson

Identifying Keywords and Service Signals in Questions

Train yourself to spot trigger words like 'most cost-effective', 'highest availability', 'operational overhead', and 'serverless' that reveal the correct service choice.

Identifying Keywords and Service Signals in Questions is a free AWS Solutions Architect lesson on CoddyKit — lesson 2 of 4. You can read the complete lesson below for free — then practise it hands-on in the browser with a built-in code editor and a 24/7 AI tutor. It is part of the AWS Solutions Architect learning path, one of 4 lessons in the course, and your progress syncs across the web and the CoddyKit app.

Why Keywords Matter on the Exam

SAA-C03 scenario questions often describe a business problem without explicitly naming the correct AWS service. Instead, they embed keyword signals — words and phrases that, when recognised, point directly to the correct service or approach. Expert test-takers read every scenario twice: first for the overall context, then for the specific keywords that narrow the answer. Missing a single keyword like 'serverless' or 'lowest cost' can lead you to a plausible but wrong answer.

Cost Signal Keywords

When the question emphasises cost, specific keywords map to specific AWS patterns. 'most cost-effective' often signals Spot Instances, S3 Glacier, or Savings Plans. 'reduce cost without code changes' → Reserved Instances or right-sizing. 'pay only for what you use' → Lambda or Fargate (serverless). 'minimise data transfer cost' → CloudFront, VPC endpoints, or same-Region access. Always prioritise the cheaper, fully managed option when cost is the primary constraint.

# Cost keyword -> answer mapping:
# 'lowest cost for batch jobs' -> Spot Instances
# 'archive rarely accessed data' -> S3 Glacier Deep Archive
# 'steady workload for 3 years' -> Reserved Instances or Savings Plans
# 'event-driven, unpredictable traffic' -> Lambda (pay per invocation)
# 'reduce inter-Region data transfer' -> CloudFront or regional caching
# 'remove idle EC2 instances' -> AWS Compute Optimizer right-sizing

Performance Signal Keywords

Performance keywords map to specific architecture choices. 'millisecond latency' → DynamoDB or ElastiCache. 'global low latency' → CloudFront or Global Accelerator. 'high IOPS' → EBS io2 Block Express or instance store. 'shared file system across multiple EC2' → EFS. 'read-heavy workload' → Read Replicas or ElastiCache. 'GPU / machine learning' → P or G EC2 instance families. Match the performance requirement to the service designed for that specific workload.

# Performance keyword -> answer mapping:
# 'sub-millisecond cache' -> ElastiCache (Redis)
# 'global static content delivery' -> CloudFront
# 'HPC / tightly coupled compute' -> Cluster placement group, EFA
# 'shared POSIX filesystem across Linux instances' -> Amazon EFS
# 'Windows SMB file shares' -> FSx for Windows File Server
# 'in-memory key-value, session state' -> ElastiCache (Memcached or Redis)
# 'relational + scales to millions of writes' -> Aurora

Security Signal Keywords

Security keywords are frequent in SAA-C03 given Domain 1's 30% weight. 'encrypt data at rest' → KMS (SSE-KMS, S3-KMS, EBS/RDS encryption). 'rotate credentials automatically' → Secrets Manager. 'detect threats in real time' → GuardDuty. 'scan for vulnerabilities' → Amazon Inspector. 'discover PII in S3' → Amazon Macie. 'block SQL injection / XSS' → AWS WAF. 'DDoS protection' → AWS Shield Standard (free) or Shield Advanced (paid, with DRT support).

# Security keyword -> answer mapping:
# 'IAM role for EC2 to access S3' -> EC2 instance profile with IAM role
# 'prevent public access to S3 bucket' -> Block Public Access + bucket policy
# 'audit all API calls in account' -> AWS CloudTrail
# 'ensure resources comply with policy' -> AWS Config + Config Rules
# 'TLS certificate for ALB' -> AWS Certificate Manager (ACM)
# 'cross-account role assumption' -> IAM Trust Policy + STS AssumeRole

Operational Overhead Keywords

'least operational overhead' is one of the most common exam qualifiers. It always steers you toward managed/serverless services over self-managed alternatives. EC2 requires OS patching → move to Fargate or Lambda. Self-managed MySQL → move to RDS. Self-managed Redis → ElastiCache. Custom load balancer → ALB. Custom DNS → Route 53. Custom cron jobs → EventBridge Scheduled Rules. If two answers are architecturally equivalent but one is managed and one is self-managed, 'least operational overhead' selects the managed option.

# 'least operational overhead' -> managed service wins
# Self-managed on EC2          -> Managed AWS equivalent
# MySQL on EC2                 -> Amazon RDS for MySQL
# Redis on EC2                 -> Amazon ElastiCache for Redis
# Kafka on EC2                 -> Amazon MSK (Managed Streaming for Kafka)
# Elasticsearch on EC2         -> Amazon OpenSearch Service
# Custom batch scheduler       -> AWS Batch
# Custom ETL scripts on EC2    -> AWS Glue (serverless ETL)

Scalability and Elasticity Keywords

'variable load', 'sudden traffic spikes', or 'unpredictable demand' signal the need for auto-scaling and elasticity. The answer almost always involves Auto Scaling Groups (for EC2), Lambda (for event-driven compute that scales to zero), DynamoDB On-Demand (for unpredictable database load), or Kinesis Data Streams with auto-scaling shards. Avoid fixed-capacity answers (Reserved Instances, provisioned throughput) when the scenario describes variable or unpredictable load.

# Scalability keyword -> answer mapping:
# 'scale to zero when no traffic' -> Lambda or Fargate (task count 0)
# 'handle flash sales / burst traffic' -> ALB + ASG with step scaling
# 'unpredictable database read/write' -> DynamoDB On-Demand mode
# 'stream processing with variable throughput' -> Kinesis On-Demand
# 'global traffic with automatic failover' -> Route 53 health check failover
# 'scale read capacity for RDS' -> Read Replicas (up to 15 for Aurora)

Migration and Modernisation Keywords

Migration scenario keywords map directly to the 7 Rs and AWS migration tools. 'move quickly with no changes' → Rehost / AWS MGN. 'reduce DBA overhead' → Replatform to RDS. 'heterogeneous database engine migration' → DMS + SCT. 'move VMware workloads' → VMware Cloud on AWS (Relocate). 'discover on-premises servers' → Application Discovery Service. 'track migration progress' → AWS Migration Hub. 'transfer terabytes of data offline' → AWS Snowball Edge.

# Migration keyword -> answer mapping:
# 'petabytes of data, slow internet' -> AWS Snowball Edge (offline transfer)
# 'replicate servers to AWS with < 1 hour RTO' -> AWS MGN
# 'Oracle to PostgreSQL schema conversion' -> AWS SCT + DMS
# 'ongoing DB replication, minimal downtime' -> DMS Full Load + CDC
# 'inventory 5000 on-premises VMs' -> Application Discovery Service
# 'assess portfolio and recommend strategy' -> Migration Hub Strategy Recommendations

Database Selection Keywords

Database questions appear in Domains 2 and 3. Map requirements to the right database service. 'relational, managed, ACID' → RDS or Aurora. 'key-value, millisecond at scale' → DynamoDB. 'in-memory cache / session store' → ElastiCache. 'analytics / columnar queries on petabytes' → Amazon Redshift. 'fully managed search' → Amazon OpenSearch Service. 'graph relationships' → Amazon Neptune. 'time series' → Amazon Timestream. One wrong keyword on the database type usually eliminates the option immediately.

# Database keyword -> correct service:
# 'ACID transactions, joins' -> RDS (MySQL/PostgreSQL) or Aurora
# 'single-digit millisecond at any scale' -> DynamoDB
# 'session caching, Pub/Sub, leaderboard' -> ElastiCache Redis
# 'complex SQL analytics, BI' -> Amazon Redshift
# 'social network, fraud detection graphs' -> Amazon Neptune
# 'IoT sensor time series' -> Amazon Timestream
# 'document / JSON flexibility' -> DynamoDB or DocumentDB

Decoupling and Messaging Keywords

Decoupling scenarios test SQS vs SNS vs EventBridge vs Kinesis. 'decouple producers from consumers' → SQS standard queue. 'exactly-once, ordered processing' → SQS FIFO. 'fan-out to multiple subscribers' → SNS. 'route events by content' → EventBridge. 'real-time streaming with replay' → Kinesis Data Streams. 'deliver to S3/Redshift without code' → Kinesis Data Firehose. The key differentiators are: persistence/replay (Kinesis), ordering (FIFO), fan-out (SNS), and content-based routing (EventBridge).

# Decoupling keyword -> service:
# 'buffer requests, async processing' -> SQS Standard
# 'order must be preserved, no duplicates' -> SQS FIFO
# 'notify many services of one event' -> SNS Topic
# 'react to AWS service state changes' -> EventBridge (default bus)
# 'stream analytics data to S3 automatically' -> Kinesis Firehose
# 'multiple apps read same data stream independently' -> Kinesis Data Streams
# 'custom event routing by message content' -> EventBridge with event patterns

Serverless Architecture Keywords

The exam frequently asks for serverless solutions to eliminate EC2 management overhead. Map these keywords: 'no server management' → Lambda, Fargate, API Gateway. 'event-driven' → Lambda triggered by S3, SQS, DynamoDB Streams. 'HTTP API backend' → API Gateway + Lambda. 'run containers without managing infrastructure' → Fargate. 'serverless SQL on S3' → Athena. 'serverless ETL' → AWS Glue. 'serverless orchestration' → Step Functions Express Workflows. When a question says 'no servers', eliminate all EC2-based answers immediately.

# Serverless keyword -> service:
# 'code triggered by events, no EC2' -> Lambda
# 'REST API with no infrastructure' -> API Gateway + Lambda
# 'containers without cluster management' -> ECS Fargate
# 'Kubernetes without node management' -> EKS Fargate Profiles
# 'SQL queries on S3, no warehouse' -> Amazon Athena
# 'NoSQL database, no capacity management' -> DynamoDB On-Demand
# 'workflow orchestration, no servers' -> AWS Step Functions
# 'ETL without Spark cluster' -> AWS Glue (serverless Spark)

Networking and Connectivity Keywords

Networking questions test your ability to match connectivity requirements to the right AWS service. 'connect on-premises to AWS privately' → Direct Connect or Site-to-Site VPN. 'route traffic globally with static anycast IPs' → AWS Global Accelerator. 'reduce latency for a global fleet of users' → CloudFront (content) or Global Accelerator (dynamic). 'private connectivity to AWS services without internet' → VPC Endpoints (Gateway for S3/DynamoDB, Interface for others). 'connect multiple VPCs in a hub-and-spoke model' → AWS Transit Gateway. Match the connectivity requirement to the service designed for that specific network pattern.

# Networking keyword -> service mapping:
# 'private dedicated bandwidth to AWS' -> AWS Direct Connect
# 'encrypted tunnel over internet to AWS' -> Site-to-Site VPN
# 'accelerate global TCP/UDP traffic' -> AWS Global Accelerator
# 'connect 100 VPCs without full mesh' -> AWS Transit Gateway
# 'private access to S3 from VPC' -> S3 Gateway Endpoint (free)
# 'private access to SQS/SNS from VPC' -> Interface Endpoint (PrivateLink)
# 'accelerate static content globally' -> CloudFront CDN

Quick Check

Test your understanding of AWS Solutions Architect (SAA-C03) concepts from this lesson.

Lesson Recap

In this lesson you learned: exam keywords map directly to AWS services — cost signals → managed/serverless, performance signals → caching/CDN/high-IOPS, security signals → KMS/GuardDuty/WAF, 'least operational overhead' always selects managed services over self-managed EC2, and serverless keywords eliminate all EC2-based answers immediately. Next up we explore the process of elimination and recognising distractor answer patterns.

Frequently asked questions

Is the “Identifying Keywords and Service Signals in Questions” lesson free?

Yes — the full text of “Identifying Keywords and Service Signals in Questions” is free to read here on the web, and the AWS Solutions Architect course includes 4 lessons in total. To practise it interactively (a built-in code editor and a 24/7 AI tutor) and unlock the rest of the AWS Solutions Architect course, upgrade to CoddyKit PRO.

What will I learn in “Identifying Keywords and Service Signals in Questions”?

Train yourself to spot trigger words like 'most cost-effective', 'highest availability', 'operational overhead', and 'serverless' that reveal the correct service choice. You practise AWS Solutions Architect with hands-on code you run directly in the browser, and a 24/7 AI tutor answers your questions as you work through the lesson.

Do I need any experience to start AWS Solutions Architect?

No prior experience is required. AWS Solutions Architect on CoddyKit is structured for beginners through advanced learners; this is — lesson 2 of 4, so you can start here or from the beginning and move at your own pace.

How long does the “Identifying Keywords and Service Signals in Questions” lesson take?

Most CoddyKit lessons take about 5–10 minutes. Each one is bite-sized and interactive, so you make steady progress and pick up exactly where you left off across the web and the app.

Can I write and run code in this AWS Solutions Architect lesson?

Yes. Every AWS Solutions Architect lesson includes a built-in code editor, so you write and run real code right in your browser and get instant AI feedback — no local setup required.

All lessons in this course

  1. Understanding the Exam Format and Domain Weights
  2. Identifying Keywords and Service Signals in Questions
  3. Process of Elimination and Distractor Patterns
  4. Time Management and Review Techniques
← Back to AWS Solutions Architect