How to choose a cloud certification: role, provider, level

Choose a cloud certification by settling three things in order: the work you do or want to do, the cloud your employer (or the employers you want) actually runs, and how much hands-on experience you bring. Role narrows the field to a few exams, provider picks the vendor, and experience picks the level. This article walks through each decision and maps the current AWS, Google Cloud and Microsoft Azure exams to common roles.

Start with the work, not the badge

Every role-based cloud exam is written for a particular job, and each provider publishes a description of its intended candidate. That description is the best test of fit, so read it before you look at anything else. Most cloud work falls into one of the groups below.

Business and non-technical roles

These exams check that you understand what the cloud is, what it costs, how it is secured and how an organisation adopts it. You are not expected to build anything.

• AWS Certified Cloud Practitioner ([CLF-C02](/certifications/aws-cloud-practitioner-clf-c02)). AWS pitches it at people new to the cloud who may not have an IT background, including sales, marketing, and product or project management. It suggests up to six months of exposure to AWS, but says this is not required.
• Google Cloud Digital Leader ([CDL](/certifications/gcp-cloud-digital-leader)). Google has no prerequisites and asks only for experience working alongside technical professionals.
• Microsoft Azure Fundamentals ([AZ-900](/certifications/azure-fundamentals-az-900)). Note the difference here: Microsoft describes the candidate as a technology professional with experience in an area of IT such as infrastructure, databases or software development. It suits a junior technologist better than a manager with no IT exposure.

If your interest is AI rather than infrastructure, the equivalents are the [AWS Certified AI Practitioner (AIF-C01)](/certifications/aws-ai-practitioner-aif-c01) and Google's [Generative AI Leader](/certifications/gcp-generative-ai-leader).

Architects

Architect exams test trade-offs: which design, which service, which failure mode, and why. The usual targets are [AWS Solutions Architect – Associate (SAA-C03)](/certifications/aws-solutions-architect-associate-saa-c03), [Google Professional Cloud Architect (PCA)](/certifications/gcp-professional-cloud-architect) and [Azure Solutions Architect Expert (AZ-305)](/certifications/azure-solutions-architect-expert-az-305). Security architects on Microsoft platforms should look at [Cybersecurity Architect Expert (SC-100)](/certifications/microsoft-cybersecurity-architect-sc-100).

AWS is changing its professional-level architect exam. According to the AWS page, SAP-C02 can be taken until 17 November 2026 and registration for SAP-C03 opens on 27 October 2026. If you are starting now, plan for SAP-C03.

Administrators and cloud operations

These exams cover running workloads day to day: deployment, monitoring, identity, backup, cost and troubleshooting. The core picks are [AWS CloudOps Engineer – Associate (SOA-C03)](/certifications/aws-cloudops-engineer-associate-soa-c03), [Azure Administrator (AZ-104)](/certifications/azure-administrator-az-104) and [Google Associate Cloud Engineer (ACE)](/certifications/gcp-associate-cloud-engineer). Narrower options include [Azure Virtual Desktop (AZ-140)](/certifications/azure-virtual-desktop-specialty-az-140), [Azure for SAP Workloads (AZ-120)](/certifications/azure-sap-workloads-az-120), [Administering Windows Server (AZ-802)](/certifications/windows-server-administrator-az-802) and [Associate Google Workspace Administrator](/certifications/gcp-associate-google-workspace-administrator). AZ-802 replaces AZ-800 and AZ-801, which Microsoft retires on 30 September 2026.

Developers

Developer exams assume you write code against the provider's SDKs, serverless services, queues and databases. On Google Cloud that is the [Professional Cloud Developer (PCD)](/certifications/gcp-professional-cloud-developer).

On the other two clouds, timing matters. AWS says the last day for the Developer – Associate exam DVA-C02 is 1 December 2026, and registration for DVA-C03 opens on 27 October 2026, so a developer starting now should prepare for DVA-C03. Microsoft retired AZ-204 on 31 July 2026 and has replaced the Azure Developer Associate with the Azure AI Cloud Developer Associate (exam AI-200); check Microsoft's page for its current status. Azure developers with a specific focus can already take [AI Apps and Agents Developer (AI-103)](/certifications/azure-ai-app-agent-developer-ai-103) or [Cosmos DB AI Developer (DP-420)](/certifications/azure-cosmos-db-developer-dp-420).

DevOps and platform engineers

DevOps exams combine build and release pipelines, infrastructure as code, observability and incident response. The three are [AWS DevOps Engineer – Professional (DOP-C02)](/certifications/aws-devops-engineer-professional-dop-c02), [Azure DevOps Engineer Expert (AZ-400)](/certifications/azure-devops-engineer-expert-az-400) and [Google Professional Cloud DevOps Engineer (PCDOE)](/certifications/gcp-professional-cloud-devops-engineer). All three are senior exams, so most people take an associate exam first.

Data engineers and database specialists

Data exams cover ingestion, transformation, storage choices, governance and cost. Look at [AWS Data Engineer – Associate (DEA-C01)](/certifications/aws-data-engineer-associate-dea-c01), Google's [Associate Data Practitioner](/certifications/gcp-associate-data-practitioner), [Professional Data Engineer](/certifications/gcp-professional-data-engineer) and [Professional Cloud Database Engineer](/certifications/gcp-professional-cloud-database-engineer), and on Microsoft [Data Fundamentals (DP-900)](/certifications/azure-data-fundamentals-dp-900), [Azure Database Administrator (DP-300)](/certifications/azure-database-administrator-dp-300), [Fabric Data Engineer (DP-700)](/certifications/fabric-data-engineer-dp-700), [Fabric Analytics Engineer (DP-600)](/certifications/fabric-analytics-engineer-dp-600) and [Azure Databricks data engineering (DP-750)](/certifications/azure-databricks-data-engineer-dp-750).

Security engineers and analysts

Security splits into engineering controls and running operations. For engineering, choose [AWS Security – Specialty (SCS-C03)](/certifications/aws-security-specialty-scs-c03), [Google Professional Cloud Security Engineer](/certifications/gcp-professional-cloud-security-engineer) or Microsoft's [SC-500](/certifications/microsoft-cloud-ai-security-controls-sc-500), which Microsoft introduced as the replacement for AZ-500 (retired 31 August 2026). For security operations, the options are [Security Operations Analyst (SC-200)](/certifications/microsoft-security-operations-analyst-sc-200) and Google's [Professional Security Operations Engineer](/certifications/gcp-professional-security-operations-engineer). Identity and data-protection specialists have [SC-300](/certifications/microsoft-identity-access-administrator-sc-300) and [SC-401](/certifications/microsoft-information-security-administrator-sc-401). [SC-900](/certifications/microsoft-security-compliance-identity-fundamentals-sc-900) is the fundamentals entry point.

Networking

Network engineers should look at [Azure Network Engineer (AZ-700)](/certifications/azure-network-engineer-az-700) or [Google Professional Cloud Network Engineer](/certifications/gcp-professional-cloud-network-engineer). On AWS, both SAA-C03 and SOA-C03 include networking tasks in their exam guides.

AI and machine learning

For building on cloud AI services, the active options are [AWS Generative AI Developer – Professional (AIP-C01)](/certifications/aws-generative-ai-developer-professional-aip-c01), Microsoft's [AI-901](/certifications/azure-ai-fundamentals-ai-901), [AI-103](/certifications/azure-ai-app-agent-developer-ai-103) and [MLOps Engineer (AI-300)](/certifications/azure-mlops-engineer-ai-300), and Google's [Professional Machine Learning Engineer](/certifications/gcp-professional-machine-learning-engineer). AWS is moving its ML Engineer – Associate from MLA-C01 to MLA-C02: the last English sitting of MLA-C01 is 28 September 2026, and MLA-C02 beta delivery begins on 29 September 2026.

Then choose the provider

With your role settled, choose the provider whose platform you use or want to use. An exam on services you touch every week is easier to prepare for, and it means more to an employer running that platform.

• Follow your employer's stack. If your organisation runs on Azure, an Azure certification helps with your next project in a way an AWS badge will not.
• Read the job ads you would apply for. Search twenty listings for your target role in your city and count which cloud each one names. That count is better evidence than any general market-share figure.
• Look for adjacent tools. Organisations that use Microsoft 365 and Entra ID often favour Azure. Teams that live in BigQuery or Google Workspace tend towards Google Cloud.
• If you have no preference, pick the provider with the most local job listings and stay with it until you reach associate level. Our [AWS vs Azure vs Google Cloud comparison](/blog/aws-vs-azure-vs-google-cloud-certifications) sets the three programmes side by side.

Then pick the level

The providers use different labels, so compare what they say about recommended experience rather than the name of the tier.

Some examples from the official pages:

• AWS recommends at least a year of hands-on experience designing AWS solutions for SAA-C03, and about a year operating AWS workloads for SOA-C03. It suggests people without IT work experience earn CLF-C02 first.
• For Solutions Architect – Professional, AWS recommends two or more years using AWS to design and implement cloud solutions.
• Google recommends six months or more of hands-on Google Cloud experience for ACE. For PCA it recommends three or more years of industry experience, including at least a year designing and managing solutions on Google Cloud. Neither has formal prerequisites.
• Microsoft's expert certifications do have prerequisites. To earn Azure Solutions Architect Expert you must also hold the Azure Administrator Associate (AZ-104). DevOps Engineer Expert requires the Azure Administrator Associate or Azure Developer Associate.

If you meet the recommended experience, sitting the exam directly is reasonable. If you do not, a foundational exam from the same provider teaches its vocabulary and service names, which higher-level exams take for granted.

Sensible sequences

Most people do best with a short ladder on one provider rather than scattered badges.

• AWS architect: CLF-C02 → SAA-C03 → SAP-C03. Skip CLF-C02 if you already work in IT.
• AWS operations to DevOps: SOA-C03 → DOP-C02.
• Azure administrator to architect: AZ-900 (optional) → AZ-104 → AZ-305, which follows Microsoft's prerequisite rule.
• Azure DevOps: AZ-104 → AZ-400.
• Google Cloud engineer: CDL (optional) → ACE → PCA, or PDE for data work.
• Microsoft security: SC-900 → SC-500 or SC-200 → SC-100.

A [study plan template](/blog/cloud-certification-study-plan-template) helps you set a realistic date for each step.

Two worked choices

A project manager at a company on AWS. Role: business. Provider: AWS. Level: no hands-on build experience. That points to CLF-C02. CDL covers similar ground, but through Google Cloud services the manager would never use at work.

A Windows systems administrator moving to Azure. Role: operations. Provider: Azure, because the employer already runs Microsoft 365. Level: strong IT background, little Azure experience. AZ-104 is the target. AZ-900 is optional for someone with years of infrastructure work, and AZ-305 is the natural next step once AZ-104 is done.

Frequently asked questions

Which cloud certification should a complete beginner take first?

If you have no IT background, CLF-C02 or CDL, chosen by the cloud your employer or target employers use. AWS and Google both say no technical background is needed. AZ-900 suits beginners who already have some IT experience, because that is the candidate Microsoft describes.

Do I need a foundational certification before an associate exam?

No. AWS and Google have no formal prerequisites for their associate or professional exams, and foundational exams are optional on all three clouds. The exceptions are Microsoft's expert certifications, which require a named associate certification such as AZ-104.

Is it worth holding certifications from more than one cloud?

Go deep on one provider before adding a second. An associate and a professional certification on the cloud your employer uses usually count for more than three foundational badges. Add a second provider when your work actually spans it.

Should I start a professional exam now if a new version is coming?

Check the dates first. If the current version retires before you will be ready, study for its replacement. AWS's SAP-C02 and DVA-C02 both have announced last dates in late 2026, so most people starting now should target SAP-C03 and DVA-C03.

Are CertifyCloudx practice questions taken from real exams?

No. Every question is original and written against the provider's public exam guide. Our article on [how CertifyCloudx practice questions are written](/blog/how-certifycloudx-practice-questions-are-written) explains the method, and you can browse free practice sets for every exam on the [certifications page](/certifications).

CertifyCloudx is independent and not affiliated with Amazon Web Services, Google or Microsoft. All certification names are trademarks of their owners. All CertifyCloudx practice questions are original.