AWS Developer Associate Certification Guide: Exam Topics, Study Plan, and Preparation Tips

DVA-C02 is not a theory test. It checks whether you can build, secure, deploy, and troubleshoot applications on AWS using services such as Lambda, DynamoDB, API Gateway, SQS, SNS, EventBridge, S3, IAM, CodePipeline, CloudFormation, and CloudWatch.

If you already write code and have used AWS beyond clicking through the console, this is a realistic associate-level certification. If you have never deployed an API, processed queue messages, or debugged IAM permissions, give yourself time for labs. The exam is scenario-heavy, and small defaults matter.

What Is the AWS Certified Developer - Associate Exam?

The AWS Certified Developer - Associate certification, exam code DVA-C02, validates practical AWS application development skills. AWS positions it as a credential for developers who build and maintain cloud-native applications using AWS services, SDKs, and deployment workflows.

The current exam has 65 multiple choice or multiple response questions, a 130-minute time limit, and a passing scaled score of 720 out of 1000. AWS certifications are valid for 3 years. The exam is available in English, Japanese, Korean, and Simplified Chinese.

Expect scenarios, not trivia. A question may describe a failed Lambda retry pattern, an API Gateway authorization requirement, or a DynamoDB table with uneven traffic. You need to choose the best design, not just name a service.

DVA-C02 Exam Domains and Weighting

The official AWS exam guide splits DVA-C02 into four scored domains. The weights tell you where to spend your study time.

• Development with AWS Services: 32 percent - SDKs, Lambda, API Gateway, DynamoDB, S3, event-driven design, messaging, application logic.
• Security: 26 percent - IAM, Cognito, encryption, KMS, Secrets Manager, Parameter Store, secure credentials, authorization patterns.
• Deployment: 24 percent - CodeCommit, CodeBuild, CodeDeploy, CodePipeline, CloudFormation, AWS SAM, rollout strategies.
• Troubleshooting and Optimization: 18 percent - CloudWatch, X-Ray, CloudTrail, performance tuning, cost awareness, failure diagnosis.

Notice the balance. Development and Security together account for 58 percent. That is where many candidates win or lose the exam.

Domain 1: Development with AWS Services

This is the largest domain and the most hands-on. You should be comfortable writing application code that calls AWS services through an SDK, usually Python, Node.js, Java, C#, or Go.

Lambda and Serverless

Know Lambda configuration well: runtimes, environment variables, layers, execution roles, timeouts, memory, reserved concurrency, and event sources. API Gateway plus Lambda plus DynamoDB is a common exam pattern because it tests development, security, and data access in one scenario.

A real-world detail: Lambda memory is not only memory. It also scales CPU allocation. I have seen a Python function drop from roughly 1.8 seconds to under 800 ms by moving from 128 MB to 512 MB, with similar or even lower total cost, because billing depends on duration and allocated memory together. The exam may not ask that exact number, but it often tests the trade-off.

DynamoDB, S3, and Messaging

For DynamoDB, focus on access patterns, partition keys, sort keys, GSIs, LSIs, conditional writes, TTL, streams, and capacity modes. Hot partitions are a favorite trap. So are questions that confuse a GSI with an LSI.

You should recognize errors such as this one:

botocore.exceptions.ClientError: An error occurred (ProvisionedThroughputExceededException) when calling the PutItem operation: The level of configured provisioned throughput for the table was exceeded

That error usually points to capacity or partition design, not a random SDK bug.

For SQS, understand Standard versus FIFO queues, visibility timeout, dead-letter queues, message retention, delay queues, and ordering guarantees. If a question stresses ordered processing and exactly-once processing, SQS FIFO is usually the answer. For fanout, think SNS to multiple SQS queues. For event routing, think EventBridge.

Domain 2: Security

Security is not a side topic on DVA-C02. It is 26 percent of the scored exam, and AWS expects you to design secure application behavior.

IAM and Policy Evaluation

Learn IAM policy logic cold. Explicit deny always wins. Permissions can come from identity policies, resource policies, session policies, permission boundaries, and service control policies in AWS Organizations. Candidates often miss questions where an allow exists but a boundary or explicit deny blocks the action.

For application code, prefer IAM roles over access keys. Lambda functions should use execution roles. EC2 applications should use instance profiles. Hardcoded credentials are wrong almost every time.

Cognito, KMS, and Secrets

Know when to use Amazon Cognito user pools for authentication and identity pools for AWS resource access. Learn how API Gateway can use Cognito authorizers.

For secrets, compare AWS Secrets Manager and AWS Systems Manager Parameter Store. Secrets Manager is the stronger choice when you need built-in rotation. Parameter Store is common for configuration and can store encrypted values using KMS. Either beats putting a database password in a plain environment variable or, worse, committing it to Git.

Also study encryption at rest and in transit for S3, DynamoDB, RDS, and messaging services. Understand envelope encryption and the role of AWS KMS keys.

Domain 3: Deployment

This domain tests whether you can package and release applications in repeatable ways. Do not skip it. Deployment is 24 percent of the exam.

CI/CD Services

You should know the basic purpose of each AWS developer tool:

• CodeCommit - managed Git repositories.
• CodeBuild - build and test jobs defined with buildspec.yml.
• CodeDeploy - deployment automation for EC2, Lambda, and ECS.
• CodePipeline - pipeline orchestration across source, build, test, and deploy stages.

Even if your workplace uses GitHub Actions or Jenkins, learn AWS-native CI/CD for the exam. DVA-C02 regularly asks which service handles which stage.

CloudFormation and AWS SAM

Study CloudFormation parameters, mappings, conditions, outputs, change sets, and stack updates. For serverless workloads, AWS SAM is worth hands-on practice. Build a small API with sam init, test it locally, and deploy it. You will understand packaging, permissions, and Lambda event sources far faster than by reading slides.

Also learn safe release patterns: canary, blue green, linear traffic shifting, rollback alarms, and health checks. For Lambda, CodeDeploy can shift traffic between function versions through aliases.

Domain 4: Troubleshooting and Optimization

Good developers debug production systems. AWS reflects that in the exam.

Observability Tools

Know the difference between CloudWatch, X-Ray, and CloudTrail. CloudWatch handles metrics, logs, alarms, and dashboards. X-Ray traces requests across distributed services. CloudTrail records AWS API activity for audit and investigation.

A common exam scenario: an API is slow, but Lambda duration looks normal. X-Ray may reveal latency in an upstream call or a DynamoDB operation. CloudWatch Logs may show retries. CloudTrail is not your first tool for request latency, but it is the right one for finding who changed a policy or deleted a resource.

Optimization Topics

Study Lambda cold starts, memory tuning, concurrency controls, API Gateway caching and throttling, DynamoDB capacity modes, indexes, and S3 performance. Cost questions are usually practical. Pick the design that meets the requirement without overbuilding.

Six-Week Study Plan for Working Professionals

A focused 6-week AWS Developer Associate study plan works if you already program and can study 7 to 10 hours per week. Stretch it to 8 weeks if AWS is new to you.

Week 1: AWS Foundations

• Review IAM, regions, availability zones, VPC basics, S3, EC2, and CloudWatch.
• Set up an AWS account with billing alerts.
• Use the AWS CLI and one SDK, ideally boto3 for Python or AWS SDK for JavaScript v3.

Weeks 2 and 3: Serverless and Core Development

• Build API Gateway + Lambda + DynamoDB.
• Add SQS and a dead-letter queue.
• Create an EventBridge rule and a Step Functions workflow.
• Practice pagination, retries, exception handling, and IAM roles in code.

Week 4: Security and Deployment

• Write IAM policies and test allow versus deny behavior.
• Use Secrets Manager or Parameter Store from a Lambda function.
• Create a basic CodePipeline with CodeBuild.
• Deploy a serverless app using AWS SAM or CloudFormation.

Weeks 5 and 6: Practice Exams and Weak Areas

• Take timed practice exams with 65 questions in 130 minutes.
• Review every wrong answer against AWS documentation.
• Rebuild labs for weak topics instead of rereading notes passively.
• Target 80 percent or higher on practice tests before booking.

Preparation Tips That Actually Help

1. Build, then read. Start with a small working app. Documentation makes far more sense after something breaks.
2. Memorize service boundaries. Know what API Gateway does versus Lambda, SNS versus SQS, and CloudTrail versus CloudWatch.
3. Read the question twice. Words such as ordered, auditing, least privilege, asynchronous, and rollback usually point straight to the answer.
4. Do not ignore security. IAM, KMS, Cognito, and secrets management show up everywhere, not only in the Security domain.
5. Time yourself. You have 130 minutes. Aim to finish the first pass in about 100 minutes, then review flagged questions.

Who Should Take This Certification?

The AWS Certified Developer - Associate is a good fit if you are a backend developer, full-stack developer, DevOps engineer, cloud engineer, or technical lead who works with AWS applications. It is less useful if your role is purely governance, networking, or sales engineering. In that case, start with an AWS foundations path first.

If you are building a broader cloud career, pair this exam with structured learning in cloud computing, DevOps, cybersecurity, and data engineering. Global Tech Council learners can use this guide alongside related AWS, Cloud Computing, DevOps, Cybersecurity, and Data Science certification programs as connected learning paths, especially when preparing for cloud-native engineering roles.

Next Step

Do this today: build a simple API Gateway, Lambda, and DynamoDB application, then add IAM least-privilege permissions and CloudWatch logging. If you can explain every permission, retry, timeout, and deployment step in that small project, you are already studying the right way for DVA-C02.