1.3 The Four Domains & A Study Plan

AWS Certified Developer – Associate DVA-C02

Track your progress as you read

Finished sections get a check mark.

1 Introduction: DVA-C02 Overview & Study Plan

1.1 What the AWS Developer Associate Tests 1.2 Exam Format, Scoring & Logistics 1.3 The Four Domains & A Study Plan

2 Chapter 1: Development with AWS Services

1.1 AWS Lambda 1.2 Amazon API Gateway 1.3 Amazon DynamoDB 1.4 Amazon S3 1.5 Messaging: SQS, SNS, EventBridge 1.6 Containers: ECS, ECR, Fargate 1.7 AWS SDK & API Best Practices

3 Chapter 2: Security

2.1 IAM for Developers 2.2 Encryption & AWS KMS 2.3 Secrets Manager vs Parameter Store 2.4 Amazon Cognito

4 Chapter 3: Deployment

3.1 CloudFormation & SAM 3.2 CI/CD with CodePipeline, CodeBuild, CodeDeploy 3.3 Deployment Strategies 3.4 Elastic Beanstalk & Container Deploys

5 Chapter 4: Troubleshooting, Optimization & Exam Strategy

4.1 Observability: CloudWatch & X-Ray 4.2 Performance & Caching 4.3 Common Traps & Final Review

1.3 The Four Domains & A Study Plan

Key Takeaways Explain This Topic AI

The four official domains are Development with AWS Services (32%), Security (26%), Deployment (24%), and Troubleshooting and Optimization (18%)

Development and Security together make up 58% of the scored content, so they deserve the most study time

Domain weights tell you where exam questions concentrate — study time should roughly mirror these percentages

A realistic plan is 60-80 hours over 4-8 weeks, front-loaded onto Development and Security

• Hands-on practice with Lambda, DynamoDB, IAM, and CI/CD tooling matters more than passive reading
• Last updated: June 2026

The Four Domains and How to Plan Around Them

Quick Answer: The DVA-C02 has four domains: Development with AWS Services (32%) , Security (26%) , Deployment (24%) , and Troubleshooting and Optimization (18%) . The weights tell you exactly where to spend study time — Development and Security alone are 58% of the scored content.

The Official Domain Breakdown

# Domain Weight What it covers

1 Development with AWS Services 32% Lambda, DynamoDB, API Gateway, S3, SDK usage, stateless and idempotent design, event-driven and asynchronous patterns, caching

2 Security 26% IAM policies and roles, AWS Key Management Service (KMS) encryption, Amazon Cognito authentication, Secrets Manager, secure coding

3 Deployment 24% CI/CD (CodePipeline, CodeBuild, CodeDeploy), Elastic Beanstalk, CloudFormation, Serverless Application Model (SAM), containers

4 Troubleshooting and Optimization 18% Amazon CloudWatch Logs and Metrics, AWS X-Ray tracing, root-cause analysis, performance and cost tuning

Domain weights are not trivia — they are an allocation map . Applied to the 50 scored questions, a 32% domain delivers roughly 16 questions , Security about 13 , Deployment about 12 , and the 18% domain about 9 . Spend your hours where the questions concentrate.

A Realistic Study Plan

Most candidates with about a year of AWS experience need 60-80 hours over 4-8 weeks . Mirror the domain weights:

Weeks 1-2 - Development (18-22 hrs). Master Lambda (triggers, reserved vs provisioned concurrency, deployment packages and layers, versions/aliases) and DynamoDB (partition vs sort keys, Global vs Local Secondary Indexes, Query vs Scan , on-demand vs provisioned capacity, DynamoDB Streams). Add API Gateway and S3 multipart uploads.

Weeks 3-4 - Security (14-18 hrs). Drill IAM policy evaluation logic (an explicit Deny always overrides any Allow ), KMS envelope encryption, Cognito user pools (authentication) vs identity pools (authorization to AWS resources), and Secrets Manager (auto-rotation) vs Systems Manager Parameter Store (cheaper, no rotation).

Weeks 5-6 - Deployment (12-16 hrs). Practice CodePipeline/CodeBuild/CodeDeploy, deployment strategies (canary, linear, all-at-once, blue/green), and infrastructure as code with CloudFormation and SAM ( sam build , sam deploy --guided ).

Week 7 - Troubleshooting and Optimization (8-12 hrs). Work CloudWatch Logs Insights queries, X-Ray annotations (indexed, filterable) vs metadata (not indexed), and Lambda performance signals (cold starts, Duration , Throttles ).

Week 8 - Review and practice exams. Take full-length timed tests, target 80%+ , and re-study any domain scoring below that.

A Few High-Yield Facts to Anchor Each Domain

Development: DynamoDB Scan reads the whole table and is far less efficient than a Query against a key — a recurring "fix the slow read" answer.

Security: IAM denies by default; access is granted only by an explicit Allow that is not overridden by an explicit Deny.

Deployment: CodeDeploy uses an appspec.yml ; CodeBuild uses a buildspec.yml — memorize which file belongs to which service.

Troubleshooting: X-Ray needs the active tracing setting plus the X-Ray SDK and an IAM permission to write segments.

Study Tactics That Work

Build, do not just read. Deploy a small serverless app with SAM end to end; the exam rewards hands-on familiarity over recall.

Read the question stem twice — DVA-C02 scenarios bury the real constraint (lowest cost, least latency, least privilege, no code change) in the wording.

Eliminate distractors by ruling out services that technically work but ignore the stated constraint; usually two of four options are obviously wrong, leaving a constraint-based tie-break.

Reading the Constraint in a Scenario

Nearly every DVA-C02 question is a short story ending in a question like "which solution meets these requirements with the LEAST operational overhead?" The capitalized qualifier is the whole game. Train yourself to spot the qualifier and let it pick between two otherwise-valid answers:

• Qualifier in the stem What the right answer optimizes for
• LEAST operational overhead Fully managed, serverless, no servers to patch
• MOST cost-effective On-demand pricing, no idle capacity, right storage class
• LEAST privilege Narrowest IAM policy, scoped resource ARNs, no wildcards
• MINIMAL latency / fastest Caching (DAX, CloudFront, ElastiCache), edge, in-region
• With NO code changes Configuration or infrastructure answer, not an SDK rewrite
• A Worked Example of Domain Thinking

Suppose a scenario says: a Lambda function reads from DynamoDB and users report slow responses on a table with millions of items; the function performs a Scan filtered by a non-key attribute. This is a Development plus Troubleshooting question. The fix is to add a Global Secondary Index on the queried attribute and switch from Scan to Query , because a Scan reads every item before filtering while a Query targets a key directly. An answer that says "increase the Lambda memory" addresses the wrong layer and is the classic distractor.

Resources Worth Your Hours

The official DVA-C02 Exam Guide and Sample Questions PDF from AWS — read these first to lock in the domain weights and question style.

AWS Skill Builder , which includes a free official practice question set and an Exam Prep plan mapped to the four domains.

Hands-on labs in a personal AWS account — staying inside the free tier (Lambda, DynamoDB on-demand, S3) is enough to practice every core service.

Two or three full-length timed practice exams in the final week; treat any domain under 80% as a signal to circle back, not to keep grinding your strongest domain.