Cert renewal is overhead. Once you hold three or four cloud certs, the calendar of renewals starts eating real time. The question is which ones are worth maintaining and which ones to let lapse when you change roles. Below is the renewal model for each major cert family in 2026, plus a practical strategy.
AWS renewal model
AWS associate certs (SAA-C03, DVA-C02, SOA-C02) are valid for 3 years. Renewal options:
- Pass the next exam in the same path (SAA-C03 holders can renew by passing SAP-C02 Professional). This resets the clock on both the associate and the professional.
- Re-sit the same exam at full cost ($150 for associate, $300 for professional).
AWS professional certs (SAP-C02, DOP-C02) are also valid for 3 years. Renewal is by re-sitting the same exam at $300, or by passing a more advanced specialty cert. AWS specialty certs are 3 years, $300 each.
Free renewal path: none in the AWS ecosystem. AWS does not offer free online assessments. Every renewal costs money or requires passing a higher-tier exam.
Azure (Microsoft) renewal model
Microsoft moved to a unified annual renewal model in 2026. All role-based and specialty certs (AZ-104, AZ-305, AZ-500, AZ-700, SC-100, MS-102, etc.) are valid for 1 year. Renewal is via free online assessment on Microsoft Learn:
- 30-50 questions, 45-90 minutes, open book
- Free, unproctored, repeatable until you pass
- Six-month eligibility window before expiration
Fundamentals certs (AZ-900, AI-900, DP-900) do not expire. Source: Microsoft Learn certification renewal documentation, accessed May 2026.
Practical impact: Annual renewal sounds aggressive but takes about 60 minutes per cert per year. The cost is zero. There is no reason to let an active Azure cert lapse if you are still using the technology.
Google Cloud renewal model
Google Cloud Professional certs (Cloud Architect, Data Engineer, DevOps Engineer, Cloud Developer, Network Engineer, Security Engineer) are valid for 2 years. Associate Cloud Engineer is also 2 years. Renewal is by re-sitting the full exam at the original cost ($200 associate, $200 professional). Google does not offer a renewal-by-assessment option as of May 2026.
Practical impact: Google's renewal model is the most demanding of the three major clouds. Plan for 30-40 hours of refresh study and a full proctored exam every 2 years.
Linux Foundation (CKA, CKAD, CKS, KCNA)
Linux Foundation Kubernetes certs are valid for 2 years (this changed from 3 years in early 2025). Renewal is by re-sitting the same exam at the current price. CKA is currently $445. There is no free renewal path.
Practical impact: Kubernetes evolves quickly. The 2-year cycle aligns with roughly 4 minor version bumps. Renewal is genuinely useful study, not a paper exercise.
FinOps Foundation (FOCP, FOCP-P)
FOCP is valid for 2 years. Renewal is via continuing education credits earned through FinOps Foundation events, training, or community contributions, with a smaller fee than the original exam. FOCP-P (Professional) follows the same model.
Renewal calendar template
Build this as a spreadsheet or calendar. The structure is what matters: renewal dates by cert, cost, and time required.
| Cert | Validity | Renewal cost | Time per renewal | Renewal type |
|---|---|---|---|---|
| AWS SAA-C03 | 3 yrs | $150 or pass SAP-C02 | 40-80 hrs study + exam | Full re-sit |
| AWS SAP-C02 | 3 yrs | $300 or pass specialty | 50-100 hrs study + exam | Full re-sit |
| Azure AZ-104 | 1 yr | Free | 1-2 hrs assessment | Online open book |
| Azure AZ-305 | 1 yr | Free | 1-2 hrs assessment | Online open book |
| GCP ACE | 2 yrs | $200 | 30-40 hrs study + exam | Full re-sit |
| GCP PCA | 2 yrs | $200 | 40-60 hrs study + exam | Full re-sit |
| CKA | 2 yrs | $445 | 20-30 hrs refresh + exam | Full re-sit |
| FOCP | 2 yrs | ~$100 + CE credits | variable | Continuing education |
Which renewals to skip when you change roles
The honest answer: any cert that is no longer in your daily work and is not on any near-term job description you would pursue. Specifically:
- You moved from AWS to Azure: let the AWS associate certs lapse. Renew the AWS Pro only if your job market still values it. Azure renewals are free and worth maintaining.
- You moved from infrastructure to security: renew SC-100 and AZ-500 free; let AZ-104 lapse if you are no longer doing operations.
- You moved into engineering management: renew the most senior cert in your current cloud as a credibility signal. Let the rest lapse.
- You moved from cloud engineering to platform engineering: renew CKA. Let GCP ACE lapse if you do not work with GCP.
The compounding cost of over-certification
Engineers who hold 8+ active certs spend 80-160 hours per year on renewals. That time has an opportunity cost: a single side project shipped to GitHub, a conference talk, or a deep technical blog post often produces more career value than a renewed associate cert. Calculate the hours you spend on renewals annually and compare against alternatives.
Practical strategy
- Identify your "active" cloud. The one you work with daily. Maintain its full cert stack at every level you have earned.
- Identify your "secondary" cloud. The one you might use again. Maintain only the highest-tier cert you hold; let associates lapse.
- Drop everything else. Certs from previous roles you do not anticipate returning to are pure overhead.
- Default to keeping anything Microsoft. Free annual renewal removes the maintenance argument; only drop it if the cert is genuinely irrelevant to your current and near-future work.
What to put in your calendar
For each active cert, set three reminders: 90 days before expiration (start prep), 30 days before (book exam or assessment), and 7 days before (final block in calendar). The 90-day window is the difference between casually maintaining a cert and panic-cramming the week before expiration.
# Example: track cert expirations in a flat file your shell can grep
# ~/.cert-calendar
SAA-C03 2027-08-12 150 AWS
AZ-104 2027-03-04 0 MS
AZ-305 2027-04-22 0 MS
CKA 2027-11-30 445 CNCF
The discipline is what matters, not the tool. A spreadsheet, a flat file, or a calendar app all work. What does not work: assuming you will remember.