AWSAssociate Level2026 Updated

AWS Developer Associate DVA-C02 Exam Guide 2026: Everything You Need to Pass

Updated May 1, 202612 min readWritten by Certsqill experts

Quick facts — DVA-C02

Exam cost

$300 USD

Questions

130 items

Time limit

130 minutes

Passing score

720 / 1000

Valid for

3 years

Testing

Pearson VUE

Who this exam is for

The AWS Developer Associate DVA-C02 certification is designed for professionals who work with or want to work with AWS technologies in a professional capacity. It is taken by cloud engineers, DevOps practitioners, IT administrators, and technical professionals looking to validate their expertise.

You do not need extensive prior experience to attempt it, but you will benefit from hands-on familiarity with the subject matter. The exam tests applied knowledge and architectural judgment, not just memorization. If you can reason about trade-offs and real-world scenarios, structured practice will handle the rest.

Domain breakdown

The DVA-C02 exam is built around official domains, each with a fixed percentage of the question pool. This distribution should directly inform how you allocate your study time.

Domain

Weight

Focus areas

Development with AWS Services

32%

Building applications using Lambda, API Gateway, DynamoDB, S3, SQS, SNS, Step Functions, and EventBridge. Includes SDK usage, environment variables, and function packaging.

Security

26%

IAM roles for compute services, Cognito user pools vs identity pools, Secrets Manager vs Parameter Store, KMS encryption, and implementing least-privilege access in application code.

Deployment

24%

CodeCommit, CodeBuild, CodeDeploy, and CodePipeline. Deployment strategies (blue/green, canary, all-at-once) for Lambda, EC2, and ECS. Elastic Beanstalk deployment policies.

Troubleshooting & Optimization

18%

CloudWatch Logs Insights, X-Ray tracing, debugging Lambda errors, optimising DynamoDB read/write capacity, and resolving API Gateway throttling and timeout issues.

Note the domain with the highest weight — many candidates under-invest here because it feels conceptual. In practice, this is where the exam is most precise, with scenario-based questions that test specifics.

What the exam actually tests

This is not a memorization exam. Questions require applied judgment under constraints. Almost every question includes a scenario with explicit requirements and asks you to select the most appropriate solution.

Here are examples of the question types you will encounter:

Scenario-based code pattern

"A Lambda function needs to read a secret from Secrets Manager without hardcoding credentials. What is the MOST secure implementation approach?"

Tests your understanding of AWS SDK patterns, IAM role attachment to Lambda, and secure credential management. Expect questions involving real code decisions rather than architecture theory.

Messaging service selection

"An application needs to fan out a single order event to three different downstream services simultaneously. Which combination of services should the developer use?"

Tests your ability to distinguish SQS (queue, pull-based), SNS (pub/sub, push), and EventBridge (event bus with routing rules). The exam heavily tests fan-out patterns and ordering guarantees.

Deployment strategy identification

"A developer wants to deploy a new Lambda version to 10% of traffic and gradually increase it over 30 minutes while monitoring error rates. Which deployment configuration achieves this?"

Tests knowledge of CodeDeploy deployment configurations for Lambda (Linear, Canary) and the difference between alias routing and weighted alias traffic shifting.

How to prepare — 4-week study plan

This plan assumes one hour per weekday and roughly 30 minutes of lighter review on weekends. It is calibrated for someone with some relevant experience. If you are starting from zero, add an extra week before Week 1 to familiarise yourself with the basics.

Week 1: Lambda & Serverless Core

Study Lambda execution model: cold starts, warm containers, concurrency limits, and reserved vs provisioned concurrency
Learn API Gateway: REST vs HTTP vs WebSocket APIs, Lambda proxy integration, and authorizer types
Understand DynamoDB: partition key design, GSIs vs LSIs, read/write capacity modes, and DynamoDB Streams
Practice SQS vs SNS vs EventBridge: when to use each, visibility timeout, dead-letter queues, and fan-out patterns

Week 2: Security & Identity

Master Cognito: user pools (authentication) vs identity pools (authorisation/federation) and their integration with API Gateway
Study Secrets Manager vs Systems Manager Parameter Store: cost, rotation support, and cross-account access
Learn KMS key types (CMK, AWS-managed, customer-managed), envelope encryption, and how to use KMS in SDK calls
Understand IAM roles for Lambda, EC2, ECS tasks, and CodeBuild — practice writing least-privilege policies

Week 3: Deployment & CI/CD

Study the full CodePipeline flow: CodeCommit → CodeBuild (buildspec.yml) → CodeDeploy (appspec.yml)
Learn CodeDeploy deployment groups: EC2 in-place, ECS blue/green, Lambda canary and linear configurations
Understand Elastic Beanstalk deployment policies: all-at-once, rolling, rolling with additional batch, immutable, traffic splitting
Practice CloudFormation basics for developers: stack creation, intrinsic functions, and SAM template structure

Week 4: Observability & Mock Exams

Learn X-Ray: SDK instrumentation, sampling rules, service maps, and subsegment annotations vs metadata
Study CloudWatch: custom metrics with PutMetricData, Logs Insights query syntax, metric filters, and Lambda duration/error alarms
Complete two full 130-question mock exams under 130-minute timed conditions
Review all incorrect answers focusing on messaging patterns and deployment configurations — the most commonly failed topics

Common mistakes candidates make

These patterns appear repeatedly among candidates who resit this exam. Knowing them in advance is worth several percentage points.

Not understanding Lambda cold starts and concurrency

Cold start questions appear frequently. You must know the difference between provisioned concurrency (eliminates cold starts, costs money) and reserved concurrency (caps concurrency, can cause throttling). Understand how VPC attachment increases cold start latency.

Confusing SQS, SNS, and EventBridge

These three services overlap in function but serve different patterns. SQS is for reliable point-to-point queuing with at-least-once delivery. SNS is for pub/sub fan-out to multiple subscribers. EventBridge adds content-based routing rules and integrates with SaaS sources. Know exactly when each is the right choice.

Weak on DynamoDB design patterns

DynamoDB questions go beyond basics. You need to understand single-table design, sparse indexes, when to use a GSI vs an LSI, and how to model one-to-many relationships. Confusing strongly consistent vs eventually consistent reads also costs marks.

Underestimating the Security domain

At 26%, Security is the second-largest domain. Many developer-track candidates overlook Cognito federation flows and the difference between Secrets Manager automatic rotation and Parameter Store SecureString. Practice IAM policy evaluation logic with explicit deny scenarios.

Is Certsqill right for you?

Honestly: Certsqill is built for candidates who have already done some studying and want to convert knowledge into exam performance. If you have never touched the subject, start with a foundational course first — then come to Certsqill when you are ready to practice.

Where Certsqill is strong: question depth, AI-powered explanations, and domain analytics. Every question is mapped to the exam blueprint. When you get something wrong, an AI-powered explanation shows why the right answer is right and why each wrong answer fails under the specific constraints in the question.

Where Certsqill is not a replacement: video courses and hands-on labs. Use Certsqill to test and sharpen — not as your first exposure to a topic you have never encountered.

Ready to start practicing?

500 DVA-C02 questions. AI-powered explanations. Try 20 free.