Every Exam PrepFREE EXAM PREP
Ask AI
STUDY GUIDE · AWS DEVELOPER ASSOCIATE (DVA-C02)

AWS Certified Developer - Associate Study Guide

Verified against the AWS exam guide 6 sections
Written by Every Exam Prep Editorial TeamSource and review policyPublished July 18, 2026
Questions
65
Time limit
2h 10m
Passing score
720/1000
Exam fee
$150
Governing body
Amazon Web Services (AWS)

The AWS Certified Developer - Associate credential validates the skills needed to design, build, and maintain applications on Amazon Web Services. It targets software developers who already write code for a living and want formal proof that they can translate that skill into a cloud-native context — working with managed services, writing to AWS APIs and SDKs, and building applications that are secure, scalable, and cost-aware from the start.

This certification sits at the associate tier, one step above the foundational Cloud Practitioner credential but distinct from the operations-focused SysOps Administrator path. It is built for people who spend their days in an IDE rather than a server console: backend engineers, full-stack developers, and anyone responsible for shipping application code that runs on AWS infrastructure.

Why It Matters

For a working developer, this certification is one of the fastest ways to signal cloud fluency to employers and clients without needing years of infrastructure experience. Because AWS remains the dominant cloud provider across enterprise and startup environments alike, holding this credential can open doors to roles explicitly requiring AWS experience, support a case for a raise or promotion, and make a resume stand out in a crowded applicant pool.

Beyond the resume line, preparing for the exam forces a developer to learn AWS services more rigorously than typical on-the-job trial and error would. Candidates come away with a working mental model of how compute, storage, messaging, and identity services fit together — knowledge that pays off directly in day-to-day application design decisions, code reviews, and architecture discussions long after the exam is passed.

The AWS Certified Developer - Associate (DVA-C02) exam is a timed, proctored assessment designed to be completed within a single sitting. Understanding its structure ahead of time helps candidates pace themselves and avoid surprises on exam day.

  • The exam contains 65 questions, presented as multiple choice and multiple response items.
  • Of those questions, 50 are scored, while 15 are unscored questions AWS uses to evaluate future exam content and do not count toward the candidate's result.
  • Candidates are given 130 minutes to complete the exam, which works out to roughly two minutes per question when the full time is used.
  • The minimum passing score is 720 on a scaled range of 100 to 1,000, so raw correct-answer counts do not map directly to the reported score.
  • The exam costs 150 USD to register.
  • Once earned, the credential is valid for 3 years before recertification is required.

Scheduling and Delivery

Exams are offered through Pearson VUE, and candidates schedule their appointment through Pearson VUE's scheduling system via their AWS Certification account. There are two delivery options: sitting the exam at a physical Pearson VUE test center, or taking it remotely as an OnVUE online proctored exam from a private space that meets the proctoring requirements.

Most online-proctored exam appointments are available 24 hours a day, 7 days a week, which gives candidates considerable flexibility in choosing a test time. If plans change, each exam appointment can only be rescheduled twice, and candidates can reschedule up to 24 hours before the scheduled exam time — waiting any longer typically forfeits the registration fee, so it pays to confirm availability well before the deadline.

The exam guide defines 4 content domains, each covering a distinct slice of what a developer needs to know to build and run applications on AWS. Understanding how heavily each domain is weighted helps prioritize study time toward the areas most likely to appear on the exam.

Domain 1: Development with AWS Services (32%)

Content Domain 1: Development with AWS Services accounts for 32% of scored content, making it the single largest domain. It covers writing code that interacts with core AWS services such as compute, storage, and database offerings, using the AWS SDKs, and applying appropriate design patterns for cloud-native applications, including serverless architectures and event-driven designs.

Domain 2: Security (26%)

Content Domain 2: Security accounts for 26% of scored content. This domain focuses on implementing authentication and authorization mechanisms, managing sensitive data and encryption, and applying secure coding and credential-management practices when an application talks to AWS resources.

Domain 3: Deployment (24%)

Content Domain 3: Deployment accounts for 24% of scored content and covers preparing application artifacts for deployment, understanding deployment strategies such as blue/green and canary releases, and working with continuous integration and delivery tooling on AWS.

Domain 4: Troubleshooting and Optimization (18%)

Content Domain 4: Troubleshooting and Optimization accounts for 18% of scored content. It emphasizes root-causing application issues using logging and monitoring tools, and optimizing applications for performance and cost once they are running in production.

Together these four domains reflect the full lifecycle of an AWS-hosted application — building it, securing it, shipping it, and keeping it healthy — so a well-rounded study plan should touch all four rather than concentrating narrowly on the highest-weighted domain alone.

Most working developers with some prior AWS exposure can prepare in roughly six to eight weeks of consistent part-time study. The plan below breaks that time down by topic area rather than a strict calendar, so it can be compressed or stretched depending on prior experience.

Weeks 1-2: Foundations and Development with AWS Services

Start with the highest-weighted domain first. Get hands-on with core compute and storage services, practice writing to their APIs using an AWS SDK, and build at least one small serverless application end to end. Because this domain covers close to a third of the exam, spending disproportionate time here early pays off.

Weeks 3-4: Security

Move into identity and access management, focusing on how applications authenticate to AWS services and how credentials should be handled in code rather than hardcoded. Practice setting up least-privilege permissions and encrypting data both at rest and in transit.

Week 5: Deployment

Study deployment strategies and continuous delivery pipelines. Work through at least one full deployment cycle for a sample application, comparing rolling, blue/green, and canary approaches so the tradeoffs are intuitive rather than memorized.

Week 6: Troubleshooting and Optimization

Focus on reading logs and metrics to diagnose failures, then shift to cost and performance tuning. This domain often rewards practical debugging experience more than pure memorization.

Final Week: Practice and Review

  1. Take full-length timed practice exams to build stamina for the 130-minute session.
  2. Review every missed question and trace it back to the specific domain and service.
  3. Revisit flashcards and glossary terms for services that still feel unfamiliar.
  4. Do a final light pass across all four domains rather than cramming any single one.

Throughout the plan, favor hands-on practice over passive reading — building small projects in an AWS account cements concepts far better than reading documentation alone.

Before the Exam

  • Confirm delivery details ahead of time — whether testing at a Pearson VUE center or via OnVUE online proctoring — including ID requirements and, for online exams, workspace and connectivity checks.
  • Get a full night's sleep and eat beforehand; a 130-minute exam demands sustained focus.
  • Arrive or log in early rather than rushing in at the last minute, since check-in and identity verification take time.

During the Exam

  • Read each question fully before looking at the answer choices — AWS exam questions are frequently scenario-based, and the correct answer often hinges on a detail buried in the middle of the prompt.
  • Flag uncertain questions and move on rather than getting stuck; with 65 questions to complete, spending too long on any one item eats into time needed elsewhere.
  • Watch for answer choices that are technically valid AWS services but do not fit the specific constraints described in the scenario, such as cost, latency, or operational overhead requirements.
  • Eliminate obviously wrong answers first, even when unsure of the exact right answer — narrowing from four choices to two meaningfully improves the odds of a correct guess.

Common Mistakes to Avoid

  • Studying services in isolation instead of understanding how they interact within a typical application architecture.
  • Neglecting the Security and Troubleshooting domains in favor of over-preparing for Development, even though each domain contributes meaningfully to the overall score.
  • Relying solely on memorized service names without practicing the actual SDK calls and CLI commands referenced in real scenarios.
  • Skipping timed practice runs, which can lead to running out of time on exam day even when the underlying knowledge is solid.

Preparing for the AWS Certified Developer - Associate exam does not require expensive bootcamps or paid courses to be effective. A well-organized set of free study resources can cover most of what is needed to build confidence across all four content domains.

Practice Questions

Scenario-based practice questions modeled on the exam's multiple choice and multiple response format are one of the most effective ways to prepare, since they train the specific skill the real exam tests: parsing a realistic application scenario and selecting the best-fit AWS service or configuration under time pressure. Working through practice questions organized by content domain also makes it easy to spot which domain needs more attention before test day.

Flashcards

Flashcards are well suited to the kind of rapid-recall knowledge the exam expects, such as service limits, default configurations, and which service fits which use case. Reviewing flashcards in short, frequent sessions throughout the study period reinforces this recall knowledge more durably than a single long cram session.

Glossary

A glossary of AWS terminology and service names helps close gaps for candidates who are strong developers but newer to AWS-specific vocabulary. Quickly looking up an unfamiliar term while working through practice questions keeps study sessions moving without derailing into lengthy documentation searches.

Used together, these three resource types map naturally onto the study plan above: practice questions to test domain-level readiness, flashcards for spaced recall of specific facts, and a glossary to fill vocabulary gaps as they surface.

AWS Developer Associate (DVA-C02) flashcards

30 cards on the highest-yield terms and rules. Grading uses spaced repetition and saves in this browser.

Card 1 of 300 mastered
Say the answer out loud before flipping.
Browse all 30 cards
  1. What is the difference between a Lambda function's concurrency and a reserved concurrency limit?

    Concurrency is the number of in-flight executions a function has at any moment. Reserved concurrency sets both a guaranteed minimum and a hard maximum for a specific function, preventing it from consuming the account's shared pool or from scaling beyond that cap.

  2. When should you use an SQS FIFO queue instead of a standard queue?

    Use FIFO when message order must be preserved and duplicates cannot be tolerated, such as processing financial transactions in sequence. Standard queues offer higher throughput but only best-effort ordering and at-least-once delivery.

  3. What does an SQS dead-letter queue (DLQ) do?

    It captures messages that fail processing after a configured number of receive attempts (maxReceiveCount), isolating problem messages so they don't block the main queue and allowing them to be inspected or reprocessed later.

  4. What is the purpose of a Lambda execution role?

    It is the IAM role that grants a Lambda function permission to interact with other AWS services (e.g., writing to S3 or DynamoDB); it is separate from any role used to invoke the function.

  5. How does DynamoDB eventually consistent read differ from strongly consistent read?

    Eventually consistent reads may return stale data shortly after a write but consume half the read capacity and have lower latency; strongly consistent reads always return the most recent write but cost more read capacity and are unavailable for global secondary indexes.

  6. What is a DynamoDB Global Secondary Index (GSI) used for?

    A GSI lets you query a table using an alternate partition key (and optional sort key) different from the table's primary key, enabling additional query patterns without duplicating the table.

  7. What triggers a DynamoDB Stream record?

    An item-level modification (insert, update, or delete) in a DynamoDB table, which can then be consumed by Lambda or the Kinesis Client Library to react to data changes in near real time.

  8. What is the AWS Encryption SDK / envelope encryption pattern used by KMS?

    Data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a KMS customer master/managed key (CMK); this avoids sending large payloads to KMS and lets KMS manage only key wrapping.

  9. What is the difference between an IAM role and an IAM user?

    An IAM user represents a persistent identity with long-term credentials; an IAM role is an identity with temporary credentials that can be assumed by users, services, or applications, and is the recommended way to grant permissions to compute resources.

  10. What does AWS STS AssumeRole return?

    Temporary security credentials (access key, secret key, and session token) that expire after a set duration, allowing cross-account or cross-service access without long-lived credentials.

  11. What is the purpose of an S3 pre-signed URL?

    It grants time-limited access to a specific S3 object using the permissions of the URL's creator, allowing a client to upload or download the object directly without needing AWS credentials of their own.

  12. What S3 storage class is best for infrequently accessed data that must remain immediately retrievable?

    S3 Standard-Infrequent Access (S3 Standard-IA), which offers lower storage cost than S3 Standard with millisecond retrieval, but charges a retrieval fee and has a minimum storage duration.

  13. What does S3 multipart upload accomplish?

    It splits a large object into parts uploaded independently (and in parallel), improving throughput and allowing resumption of a failed upload without restarting the entire transfer.

  14. What is CodeDeploy's AppSpec file used for?

    It defines deployment configuration for EC2/on-premises or Lambda deployments, including source file locations, lifecycle event hooks, and (for Lambda) the function version and alias to shift traffic to.

  15. What is the difference between CodeDeploy's in-place and blue/green deployment types?

    In-place deployment stops the application on existing instances and installs the new version on them; blue/green provisions a new set of instances (or resources) with the new version and shifts traffic over, allowing quick rollback by reverting traffic.

  16. What is a Lambda alias, and why use it with weighted traffic shifting?

    An alias is a named pointer to a specific Lambda function version; assigning weighted routing across two aliases enables canary or linear deployments that gradually shift invocation traffic to a new version.

  17. What problem does API Gateway usage plans and API keys solve?

    They let you throttle and meter API consumption per client, enforcing rate limits, burst limits, and quotas for individual API keys tied to specific customers or applications.

  18. What is the purpose of AWS X-Ray in a distributed application?

    It traces requests as they travel through multiple services, producing a service map and timing data that helps developers identify latency bottlenecks and pinpoint errors across microservices.

  19. How do X-Ray annotations differ from metadata?

    Annotations are indexed key-value pairs that can be used to filter and search traces; metadata is not indexed and is used only to record additional contextual detail on a trace segment.

  20. What is the difference between CloudWatch Logs and CloudWatch Metrics?

    CloudWatch Logs stores raw log event data emitted by applications and services; CloudWatch Metrics stores numeric time-series data (like CPU utilization) that can trigger alarms and be graphed on dashboards.

  21. What does a CloudWatch metric filter do?

    It scans incoming log data for a specified pattern and converts matches into a custom CloudWatch metric, enabling alarms to be built on values that only appear inside log text.

  22. What is the purpose of AWS Systems Manager Parameter Store versus Secrets Manager?

    Parameter Store holds configuration values and can optionally encrypt them with KMS, at little or no cost; Secrets Manager is purpose-built for secrets like database credentials, offering automatic rotation and tighter secret-lifecycle features at a higher cost.

  23. What is idempotency in the context of API design, and how can DynamoDB conditional writes support it?

    Idempotency means repeating the same request produces the same result without unintended side effects. A DynamoDB conditional write (e.g., attribute_not_exists) can reject duplicate writes for the same idempotency key, preventing duplicate processing of a retried request.

  24. What is the difference between synchronous and asynchronous Lambda invocation?

    Synchronous invocation waits for the function to complete and returns the response directly to the caller (e.g., API Gateway); asynchronous invocation queues the event and returns immediately, with Lambda handling retries and optional destinations for success/failure.

  25. What is a Lambda destination, and how does it differ from a DLQ?

    A destination is a target (SQS, SNS, Lambda, or EventBridge) that receives a record about an asynchronous invocation's outcome, and can be configured separately for success and failure; a DLQ only captures failed events and provides less detail than a destination.

  26. What causes a Lambda cold start, and how can provisioned concurrency help?

    A cold start occurs when Lambda must initialize a new execution environment (download code, start the runtime, run init code) before handling a request, adding latency. Provisioned concurrency pre-initializes a specified number of environments so they are ready to respond immediately.

  27. How does Amazon SNS message filtering work?

    Subscribers attach a filter policy to their subscription; SNS evaluates the policy against message attributes and only delivers messages that match, allowing a single topic to fan out selectively to different subscribers.

  28. What is the difference between CloudFormation change sets and stack updates?

    A change set previews the proposed additions, modifications, and deletions a template update would make without executing them; a stack update applies those changes directly, which can be riskier since there's no preview step.

  29. What does CORS (Cross-Origin Resource Sharing) enforcement require on an API Gateway resource?

    The API must respond to preflight OPTIONS requests with appropriate Access-Control-Allow-* headers, and the actual method responses must also include the allowed origin header, or browsers will block the client-side request.

  30. What is the difference between the AWS SDK's default retry behavior and exponential backoff?

    AWS SDKs automatically retry throttled or transient failures using exponential backoff with jitter, progressively increasing the wait time between retries to avoid overwhelming a service that is already struggling under load.

AWS Developer Associate (DVA-C02) glossary

24 terms the AWS Developer Associate (DVA-C02) tests, defined in plain English.

AppSpec File
A YAML or JSON file used by AWS CodeDeploy that specifies deployment source locations, target configuration, and lifecycle event hooks for EC2/on-premises or Lambda deployments.
Blue/Green Deployment
A deployment strategy that runs a new application version (green) alongside the existing version (blue) and shifts traffic over, enabling fast rollback by redirecting traffic back to blue.
Canary Deployment
A deployment strategy that shifts a small percentage of traffic to a new version first, monitors for errors, and gradually increases traffic if the new version proves healthy.
CloudWatch Alarm
A CloudWatch resource that watches a single metric or expression and triggers actions (such as notifications or auto scaling) when the value breaches a defined threshold.
Cold Start
The added latency incurred when a serverless function like AWS Lambda must initialize a brand-new execution environment before it can process an invocation.
DLQ (Dead-Letter Queue)
A secondary queue or target that receives messages or events which repeatedly fail processing, isolating them from the main processing flow for later inspection.
DVA-C02
The exam code for the current version of the AWS Certified Developer - Associate certification.
DynamoDB Streams
A feature that captures a time-ordered sequence of item-level modifications in a DynamoDB table, which can be consumed by Lambda or other applications to trigger downstream processing.
Envelope Encryption
A pattern where data is encrypted with a data key, and that data key is itself encrypted by a master key (such as a KMS key), reducing the amount of data sent directly to the key management service.
GSI (Global Secondary Index)
A DynamoDB index with a partition key and optional sort key different from the base table, enabling additional query access patterns with eventually consistent reads.
IAM Role
An AWS identity with associated permission policies that can be assumed by users, applications, or services to obtain temporary security credentials, rather than long-term access keys.
Idempotency
A property of an operation where performing it multiple times produces the same effect as performing it once, important for safely retrying API requests or message processing.
KMS (Key Management Service)
A managed AWS service for creating and controlling cryptographic keys used to encrypt data across AWS services and applications.
Lambda Layer
A packaged archive of shared libraries, custom runtimes, or dependencies that can be attached to one or more Lambda functions without bundling that code into each deployment package.
LSI (Local Secondary Index)
A DynamoDB index that shares the base table's partition key but uses an alternate sort key, supporting strongly consistent reads and created only at table creation time.
Multipart Upload
An S3 upload method that splits a large object into independently uploaded parts, improving throughput and enabling resumable uploads.
Parameter Store
An AWS Systems Manager capability for storing and retrieving configuration data and secrets as named parameters, with optional KMS encryption.
Pre-Signed URL
A URL generated for an S3 object that embeds temporary authentication information, granting time-limited access to upload or download the object without AWS credentials.
Provisioned Concurrency
A Lambda feature that keeps a specified number of execution environments pre-initialized and ready to respond with minimal latency, avoiding cold starts.
Reserved Concurrency
A per-function setting in Lambda that caps the maximum number of concurrent executions and reserves that capacity from the account's shared concurrency pool.
SAM (Serverless Application Model)
An open-source framework and CloudFormation extension that simplifies defining serverless resources like Lambda functions, APIs, and DynamoDB tables using a shorthand template syntax.
Secrets Manager
An AWS service purpose-built for storing, retrieving, and automatically rotating sensitive credentials such as database passwords and API keys.
STS (Security Token Service)
An AWS service that issues temporary, limited-privilege security credentials for IAM users or federated identities, commonly via the AssumeRole API.
X-Ray
An AWS service that traces requests across distributed application components, producing service maps and latency data to help debug performance issues and errors.

Sources

  1. 1.AWS Certified Developer - Associate (DVA-C02) Exam GuideAWS (accessed Jul 18, 2026)
  2. 2.AWS Certified Developer - Associate (Exam Overview)AWS (accessed Jul 18, 2026)
  3. 3.AWS Certification Policies - Before TestingAWS (accessed Jul 18, 2026)
  4. 4.AWS Certification Exams (Pearson VUE)Pearson VUE (accessed Jul 18, 2026)
  5. 5.Schedule an AWS Certification ExamAWS (accessed Jul 18, 2026)

Official sources

Primary documents used to verify the exam details shown on this page.

Last verified against the AWS exam guide: