FREE AWS Developer DVA-C02 Exam Guide 2026: Pass on Attempt 1

AWS Certified Developer - Associate (DVA-C02) Exam Guide 2026

If you write code that touches AWS - Lambda handlers, DynamoDB queries, S3 uploads, IAM policies, API Gateway routes - the AWS Certified Developer - Associate (DVA-C02) validates exactly the work you already do. It is an implementation exam: less architecture whiteboarding than Solutions Architect Associate, and far more "what does this SDK call actually do when DynamoDB throttles."

This guide is built for the exam as it stands today, in September 2026, and every weight, fee, service list, and policy below is cross-checked against the official AWS exam guide at docs.aws.amazon.com and the exam page at aws.amazon.com/certification/certified-developer-associate/.

One thing almost every other DVA-C02 guide on the internet is currently missing: the exam is being replaced. Read the next section before you book anything.

Read This First: DVA-C02 Is Being Replaced by DVA-C03

AWS has published the transition dates on the official certification page:

AWS also states that details about DVA-C03 content and preparation resources will be published on the certification page on October 27, 2026. As of today the DVA-C03 exam guide is not yet public, so nobody - including us - can tell you its domain weights, question count, or service list. Treat any guide that claims to know DVA-C03's blueprint right now as invented.

What this means for your booking decision

If you can sit the exam on or before December 1, 2026, take DVA-C02. Every study resource in existence, including this guide, the official exam guide, and every practice bank, covers topics from DVA-C02. You will be studying a known, stable, fully documented target.

If you cannot realistically be ready before December 1, 2026, plan for DVA-C03. Do not cram a DVA-C02 attempt into late November just to beat the deadline. The credential you earn is the same either way: passing either version makes you AWS Certified Developer - Associate, valid for 3 years. There is no "legacy" stigma and no difference on your badge.

Either way, keep studying the same material now. AWS Associate exam refreshes are evolutionary, not revolutionary. The DVA-C02 core - Lambda, DynamoDB, IAM, S3, API Gateway, CloudFormation and SAM, the CI/CD services, X-Ray and CloudWatch - is the developer job role, and that does not change with a series code. The clearest signal about DVA-C03's direction is already visible in DVA-C02's emerging topics section, covered further down this guide.

One planning detail that catches people out: once you pass an AWS exam, you cannot retake that same exam for two years. So if you pass DVA-C02 in November 2026, you are certified for 3 years and simply recertify later with whatever version is current then.

DVA-C02 At-a-Glance (2026)

Sources: aws.amazon.com/certification/certified-developer-associate/, the DVA-C02 exam guide at docs.aws.amazon.com/aws-certification/latest/developer-associate-02/, and the AWS Certification policy pages.

---

Start Your FREE DVA-C02 Prep Today

Jump into scenario-based Lambda, DynamoDB, IAM, and CloudFormation questions mapped to every 2026 domain - with instant AI-powered explanations. Start FREE AWS Developer Associate practice questions. 100% FREE, unlimited.

---

Who Should Sit DVA-C02

AWS positions DVA-C02 as a role-based Associate exam for software developers, not architects or operators. The exam guide is explicit about what the target candidate is not expected to do: design distributed architectures, design and create CI/CD pipelines from scratch, administer IAM users and groups, administer servers and operating systems, or design VPC and Direct Connect networking. If those are your day job, you want a different exam.

Who should not start here? Someone who has never deployed a Lambda function should pass AWS Certified Cloud Practitioner (CLF-C02) first. It costs $100 instead of $150, it builds the vocabulary, and passing it earns a 50% discount voucher toward DVA-C02. If your work is infrastructure and networking, Solutions Architect Associate (SAA-C03) is the better first exam.

Prerequisites and Recommended Background

AWS requires no certification to sit DVA-C02. The official target candidate description is one or more years of hands-on experience developing and maintaining applications using AWS services, plus this general IT knowledge:

• Proficiency in at least one high-level programming language
• Understanding of application lifecycle management
• Basic understanding of cloud-focused applications sufficient to write code
• Ability to develop functional applications
• Experience using development tools

On the AWS side, the exam guide says you should be able to develop and secure applications using AWS service APIs, the AWS CLI, and SDKs, and use a CI/CD pipeline to deploy applications on AWS.

If any of those are gaps, close them before you buy a voucher. Reading the Lambda Developer Guide end to end takes a weekend and pays for itself several times over on exam day.

---

Build DVA-C02 Mastery with FREE Practice Questions

Access FREE AWS Developer Associate practice questions across every domain - Development, Security, Deployment, Troubleshooting and Optimization - with AI explanations that teach the why, not just the answer. 100% FREE.

---

DVA-C02 Domain Blueprint (2026 Weights)

The official exam guide breaks DVA-C02 into four content domains with fixed percentage weights. One detail almost every competing guide gets wrong: the weights apply to scored content, and only 50 of the 65 questions are scored. So the right arithmetic is a percentage of 50, not of 65.

Source: AWS Certified Developer - Associate (DVA-C02) exam guide, content outline.

Three observations experienced candidates wish they had known:

1. Development (32%) is not a coding test. You will see pseudocode, CLI, and SDK snippets, but nothing that asks you to compile. The domain tests which service to call, with what parameters, and how it behaves under failure.
2. Security at 26% is bigger than Deployment at 24%. Candidates routinely under-study IAM policy evaluation, KMS, Secrets Manager versus Parameter Store, Cognito user pools versus identity pools, and temporary credentials. This is where borderline candidates lose the exam.
3. Troubleshooting is only 18% but touches every service. CloudWatch Logs, X-Ray, Lambda failure destinations, DynamoDB throttling, and API Gateway 5xx patterns all live here.

Because scoring is compensatory, you do not need to pass each domain individually. You need 720 overall. Do not panic if you know you bombed one section.

Domain 1: Development with AWS Services (32%)

The largest and most code-adjacent domain. Its four tasks:

1. Develop code for applications hosted on AWS - event-driven design, microservices, idempotency, stateful versus stateless, tight versus loose coupling, and resilient integration with third-party services using retry logic, circuit breakers, and error handling.
2. Develop code for AWS Lambda - event sources, synchronous versus asynchronous invocation, destinations, layers, environment variables, concurrency, container images, ephemeral storage, response streaming, and real-time data processing and transformation.
3. Use data stores in application development - DynamoDB (keys, GSI and LSI, PartiQL, Streams, transactions, TTL), RDS and Aurora (connection pooling, RDS Proxy), S3 (event notifications, versioning, lifecycle), ElastiCache, and choosing specialized data stores such as Amazon OpenSearch Service based on access patterns.
4. Manage application integration - SQS (standard versus FIFO, visibility timeout, DLQs), SNS (fan-out, message filtering), EventBridge event-driven patterns, and Step Functions (standard versus express, Map state, Retry and Catch).

Highest-yield sub-topics:

• Lambda invocation models: synchronous (API Gateway, ALB), asynchronous (S3, SNS, EventBridge), and poll-based (SQS, Kinesis, DynamoDB Streams). Know which retry automatically and which need client-side retry logic.
• DynamoDB partition keys: hot-partition diagnosis, GSI versus LSI trade-offs, TTL for automatic expiry, and Streams for change data capture into Lambda.
• SQS visibility timeout: must exceed function execution time plus a buffer. AWS recommends setting the queue visibility timeout to at least six times the function timeout. The exam loves "why are my messages processed twice?"
• Step Functions: Standard workflows run up to one year and bill per state transition; Express workflows run up to five minutes, cost far less, and are the choice for high-volume short-lived orchestration. Know Map state for parallel iteration and Retry/Catch for error handling.

Domain 2: Security (26%)

The domain that quietly separates passes from fails. Its three tasks are authentication and authorization, encryption using AWS services, and managing sensitive data in application code. Version 2.1 of the exam guide added application-level authorization for fine-grained access control, cross-service authentication in microservices architectures, application-level data masking and sanitization, and data access patterns for multi-tenant applications.

High-yield sub-topics:

• IAM policy evaluation logic: explicit Deny beats explicit Allow, which beats implicit Deny. Identity-based and resource-based policies are evaluated together. Know permission boundaries versus SCPs versus session policies.
• Cognito user pools versus identity pools: user pools handle authentication (sign-in, MFA, JWT issuance). Identity pools exchange a token for temporary AWS credentials so the client can call AWS APIs. Federation with OIDC, SAML, and social providers.
• AWS STS: AssumeRole, AssumeRoleWithWebIdentity, AssumeRoleWithSAML, GetSessionToken. Role sessions run from 15 minutes up to 12 hours. External ID protects against the cross-account confused deputy problem.
• KMS: customer managed versus AWS managed versus AWS owned keys, key policies, grants, and envelope encryption with GenerateDataKey. Automatic rotation defaults to 365 days but the rotation period is configurable, and on-demand rotation can be triggered at any time. AWS managed keys rotate yearly and you cannot change that.
• Secrets Manager versus Parameter Store: Secrets Manager rotates secrets automatically and is priced per secret per month; Systems Manager Parameter Store has a free Standard tier. Choose Secrets Manager when built-in rotation matters, Parameter Store for plain configuration.
• S3 encryption options: SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, and client-side encryption. S3 Bucket Keys cut KMS request costs.

Domain 3: Deployment (24%)

Its four tasks: prepare application artifacts, test applications in development environments, automate deployment testing, and deploy code using AWS CI/CD services. Version 2.1 added preparing application configurations for different environments using AWS AppConfig, writing integration tests and mocking APIs for external dependencies, testing event-driven applications, and configuring blue/green, canary, and rolling deployment strategies.

High-yield sub-topics:

• CloudFormation: intrinsic functions (Ref, Fn::GetAtt, Fn::Sub, Fn::Join, Fn::ImportValue, Fn::FindInMap, Fn::If), nested stacks versus cross-stack exports, change sets, stack policies, DeletionPolicy and UpdateReplacePolicy (Retain, Snapshot, Delete), drift detection, and Transform: AWS::Serverless for SAM.
• AWS SAM: sam build, sam deploy --guided, sam local invoke, sam sync. The Globals section. A SAM template is a CloudFormation template with a transform.
• AWS CDK: L1 Cfn constructs, L2 constructs, L3 patterns. cdk bootstrap, cdk synth, cdk diff, cdk deploy, cdk destroy. CDK synthesizes to CloudFormation.
• CodeDeploy deployment configurations (every predefined name carries the CodeDeployDefault. prefix): Lambda has nine - LambdaCanary10Percent5Minutes, 10Minutes, 15Minutes, and 30Minutes; LambdaLinear10PercentEvery1Minute, Every2Minutes, Every3Minutes, and Every10Minutes; plus LambdaAllAtOnce. EC2 and on-premises have three - OneAtATime (the default), HalfAtATime, and AllAtOnce - plus custom configurations. ECS has ECSLinear10PercentEvery1Minutes, ECSLinear10PercentEvery3Minutes, ECSCanary10Percent5Minutes, ECSCanary10Percent15Minutes, and ECSAllAtOnce. Naming convention: Canary is two steps, Linear is equal increments, AllAtOnce is immediate. Note there is no Linear10PercentEvery5Minutes; the linear intervals are 1, 2, 3, and 10 minutes only.
• CodePipeline: stage and action model, manual approval actions, transition controls, cross-Region artifact buckets.
• CodeBuild: buildspec.yml phases (install, pre_build, build, post_build), artifacts, caching, and test reports.

Domain 4: Troubleshooting and Optimization (18%)

Its three tasks: assist in root cause analysis, instrument code for observability, and optimize applications and services. Version 2.1 added debugging service integration issues, creating application health checks and readiness probes, implementing application-level caching, optimizing application resource usage, analyzing performance issues, and using application logs to identify bottlenecks. It also promoted structured logging from a knowledge item to an explicit skill.

High-yield sub-topics:

• AWS X-Ray: traces, segments, subsegments. Annotations are indexed and filterable; metadata is not. Sampling rules, and the SDK's automatic instrumentation of AWS SDK calls.
• CloudWatch Logs: log groups, streams, retention, metric filters, Logs Insights query syntax, and Embedded Metric Format (EMF) for emitting structured metrics from Lambda.
• CloudWatch Metrics and Alarms: standard one-minute versus high-resolution one-second metrics, composite alarms, and alarm actions into SNS, EventBridge, or Auto Scaling.
• Lambda troubleshooting: cold starts (SnapStart, provisioned concurrency, smaller packages), memory tuning, the timeout-versus-memory relationship, dead-letter queues, and on-failure destinations.
• API Gateway: stage-level caching with per-key cache invalidation, method-level throttling, and usage plans tied to API keys.
• S3 performance: multipart upload, Transfer Acceleration, and the per-prefix request rate ceiling.

What Changed in Exam Guide Version 2.1

The current DVA-C02 exam guide is Version 2.1, published December 12, 2024. Most guides still describe the original blueprint. Here is what actually changed, straight from the guide's Revisions page.

Services added to the in-scope list:

• Amazon Q Developer

Services removed from the in-scope list:

• AWS Copilot
• Amazon CodeGuru

Services removed from the out-of-scope list (meaning they are no longer explicitly excluded):

• AWS Device Farm, Amazon Lex, AWS Service Catalog, AWS Database Migration Service (DMS)

New skills added. These are the highest-signal additions, because a new skill line usually means new questions:

• Use Amazon Q Developer for development assistance, and to generate automated tests
• Implement event-driven patterns using Amazon EventBridge
• Implement resilient application code for third-party integrations - retry logic, circuit breakers, error handling
• Implement Lambda functions for real-time data processing and transformation
• Use specialized data stores based on access patterns, for example Amazon OpenSearch Service
• Implement application-level authorization for fine-grained access control
• Handle cross-service authentication in microservices architectures
• Implement application-level data masking and sanitization
• Implement data access patterns for multi-tenant applications
• Prepare application configurations for different environments, for example AWS AppConfig
• Test event-driven applications
• Debug service integration issues
• Create application health checks and readiness probes
• Implement application-level caching, optimize resource usage, and analyze performance issues
• Use application logs to identify performance bottlenecks

If your study material predates December 2024, it will not mention Amazon Q Developer, AppConfig, OpenSearch as a data-store choice, or circuit breakers - and it will still be teaching you CodeGuru, which is no longer in scope.

Emerging Topics: The AI Questions Nobody Warns You About

The DVA-C02 exam guide contains an Emerging topics section that almost no third-party guide mentions. AWS states you might encounter questions on evolving areas of competence beyond the content outline, and that these questions appear as pretest items and do not affect your score.

The listed emerging skill areas are:

• Using AI-assisted development tools to generate, review, and optimize code - spec-driven code generation, automated code reviews, intelligent code completion, refactoring suggestions, security scanning
• Identifying and mitigating security risks of integrating AI services into applications - data privacy controls, access management, controlling model inputs and outputs, securing AI agent interactions, keeping sensitive content out of logs
• Using AWS AI tools to generate tests and automate repetitive testing workflows
• Using AWS AI tools to support CI/CD workflows - automated deployment approvals, environment provisioning, post-deployment validation
• Using AWS AI tools to analyze errors and generate troubleshooting suggestions
• Using AWS AI tools to identify optimization opportunities - bottleneck detection, resource usage optimization, code efficiency

Two practical takeaways. First, do not lose time or confidence on them during the exam. If a question feels strangely off-blueprint, it is very likely unscored. Answer it quickly and move on. Second, this section is the clearest published signal of where DVA-C03 is heading. If you are studying for the October 2026 exam refresh, spend an evening with Amazon Q Developer rather than guessing at a blueprint that has not been released.

The Complete DVA-C02 In-Scope Service List

The exam guide publishes an explicit in-scope list. Studying anything outside it is optional; studying everything inside it is not. This list is non-exhaustive by AWS's own note, but it is the closest thing to a syllabus you will get.

Three things to notice, because they are the most common blind spots:

• AWS AppSync is in scope and is missing from most study courses. Know that it is managed GraphQL, that it supports resolvers to DynamoDB, Lambda, and HTTP data sources, and that it handles real-time subscriptions.
• Amazon OpenSearch Service is in scope as a specialized data store. You are not expected to administer a cluster; you are expected to know when full-text or log search beats a DynamoDB query.
• AWS CodeCommit appears on neither list. It was closed to new customers in 2024. The in-scope Developer Tools list is Amplify, CloudShell, CodeArtifact, CodeBuild, CodeDeploy, CodePipeline, X-Ray, and Q Developer. If a practice question hinges on CodeCommit-specific behavior, it is not tracking the current guide - though a question stem may still use a generic "source repository."

Out-of-Scope Services: Where Not to Spend Time

AWS publishes the explicit exclusion list too. If a service is here, no scored question depends on knowing it:

Note what is not on either list: Amazon Bedrock. It is neither in-scope nor explicitly excluded, so do not build a study plan around it, but the emerging-topics section means AI tooling can appear as an unscored item.

---

Per-Service Deep Dive: The 10 Services You Must Master

1. AWS Lambda

Lambda is the highest-impact service on DVA-C02. If you can only go deep on two services, make one of them Lambda.

• Execution model: execution environment re-use, cold-start causes (new environment, configuration change, code change, scale-up), and /tmp ephemeral storage configurable from 512 MB to 10,240 MB.
• Memory and CPU: 128 MB to 10,240 MB in 1 MB increments. CPU scales with memory; at 1,769 MB a function gets the equivalent of one vCPU. That single fact answers a surprising number of optimization questions.
• Timeout: maximum 900 seconds (15 minutes).
• Concurrency: default 1,000 concurrent executions per Region, increasable. Reserved concurrency both guarantees and caps capacity; provisioned concurrency pre-warms environments to remove cold starts and bills separately. Note that new AWS accounts start with reduced concurrency quotas that AWS raises automatically with usage - a common surprise in a fresh lab account.
• Packaging: 50 MB zipped when uploaded directly through the Lambda API, SDKs, or console; upload larger archives via Amazon S3; 250 MB unzipped for the total contents including layers and custom runtimes; 10 GB for container images.
• Layers: 5 layers per function, versioned independently.
• Environment variables: 4 KB total for all variables combined.
• Payload limits: 6 MB each way for synchronous invocations, 1 MB for asynchronous, and up to 200 MB for a streamed response.
• Error handling: asynchronous invocations retry twice by default; on-failure destinations route failed events to SQS, SNS, EventBridge, or Lambda. Destinations carry more context than a dead-letter queue and are the current best practice.
• Cold-start mitigation: SnapStart, provisioned concurrency, smaller deployment packages, and lighter initialization code outside the handler.

2. Amazon DynamoDB

• Primary key: partition key alone, or partition key plus sort key. Partition key design is the number one performance lever.
• Indexes: 20 GSIs per table by default and 5 LSIs per table. A GSI can use a completely different partition key and is eventually consistent with its own capacity; an LSI shares the base table's partition key, must be created with the table, and can serve strongly consistent reads.
• Capacity modes: provisioned with RCUs and WCUs plus optional auto scaling, or on-demand pay-per-request.
• Capacity arithmetic (the exam makes you compute it): one RCU is one strongly consistent read per second for an item up to 4 KB, or two eventually consistent reads per second. One WCU is one write per second for an item up to 1 KB. Round the item size up to the next whole unit first. A 7 KB item read strongly consistent costs 2 RCUs per read, so 3 reads per second needs 6 RCUs; writing that same 7 KB item 10 times per second needs 70 WCUs. Transactional reads and writes consume double, because DynamoDB performs one prepare and one commit for every item.
• Transactions: TransactWriteItems and TransactGetItems handle up to 100 items and 4 MB per call.
• Streams: a 24-hour change log. Design for at most two simultaneous readers per shard; for global tables, AWS recommends one.
• PartiQL: SQL-compatible SELECT, INSERT, UPDATE, and DELETE against DynamoDB.
• TTL: the attribute must be a Number holding an epoch-seconds timestamp. Deletion is a background process, typically within 48 hours of expiry, so never rely on TTL for precise-time deletion - filter expired items in your query too.
• DAX: in-memory cache in front of DynamoDB delivering microsecond reads, deployed in your VPC, eventually consistent for reads.

3. Amazon S3

• Consistency: strong read-after-write consistency for all operations. Any resource telling you otherwise predates December 2020.
• Storage classes: Standard, Intelligent-Tiering, Standard-IA, One Zone-IA, Glacier Instant Retrieval, Glacier Flexible Retrieval, Glacier Deep Archive. Know minimum storage durations and retrieval characteristics.
• Request rates: at least 3,500 PUT/COPY/POST/DELETE and 5,500 GET/HEAD requests per second per partitioned prefix, with no limit on the number of prefixes. Parallelize across prefixes to scale; expect transient 503 Slow Down responses while S3 scales.
• Versioning and Object Lock: versioning must be enabled before Object Lock, which offers governance and compliance modes.
• Event notifications: to SQS, SNS, Lambda, or EventBridge. EventBridge removes the one-target-per-event-type constraint and adds filtering.
• Presigned URLs: they carry the permissions of the signing identity and expire with the signing credentials. A URL signed with temporary role credentials cannot outlive that session, which caps it at 12 hours.
• Multipart upload: a single PUT tops out at 5 GB, so anything larger requires multipart. AWS recommends multipart above roughly 100 MB. Add a lifecycle rule to abort incomplete multipart uploads - that one is exam gold and a real-world cost saver.
• CORS: configured on the bucket, required for browser-based SPA access.

4. AWS IAM and AWS STS

• Policy types: identity-based, resource-based (bucket policies, KMS key policies, Lambda resource policies), permission boundaries, SCPs, session policies, and legacy ACLs.
• Evaluation logic: explicit Deny always wins, then explicit Allow, otherwise implicit Deny. Identity-based and resource-based policies are evaluated together, which is why a bucket policy can grant cross-account access that the caller's own policy never mentions.
• Roles versus users: services use roles and get temporary credentials through STS. Human access should come from IAM Identity Center federation, not long-lived IAM user keys.
• Condition keys: global ones such as aws:SourceIp, aws:SecureTransport, and aws:MultiFactorAuthPresent, plus service-specific ones such as s3:prefix and dynamodb:LeadingKeys for row-level multi-tenant isolation.
• Cross-account pattern: the target account creates a role trusting the caller's role ARN; the caller calls sts:AssumeRole. Add an External ID for third-party access.

5. AWS CloudFormation, SAM, and CDK

• Template anatomy: Parameters, Mappings, Conditions, Resources, Outputs, Metadata, Transform.
• Intrinsic functions: Ref, Fn::GetAtt, Fn::Sub, Fn::Join, Fn::Select, Fn::Split, Fn::ImportValue, Fn::FindInMap, Fn::If, Fn::Equals. Know the difference between Ref and GetAtt on the same resource type.
• Stack lifecycle: CREATE and UPDATE states, rollback behavior on failure, change sets to preview updates, and drift detection.
• DeletionPolicy and UpdateReplacePolicy: Retain, Snapshot (for RDS, EBS, Redshift), or Delete. Essential for data-layer stacks.
• Nested stacks versus cross-stack references: nested stacks for repeated patterns, Exports plus Fn::ImportValue for shared resources. Remember that an exported value cannot be deleted while another stack imports it.
• SAM and CDK: both compile down to CloudFormation. SAM is a template transform for serverless; CDK is code that synthesizes templates.

6. AWS X-Ray

• Traces and segments: one trace per request; each downstream call becomes a subsegment.
• Annotations versus metadata: annotations are indexed key-value pairs you can filter on in the console and via GetTraceSummaries. Metadata is arbitrary JSON that is stored but not indexed. This distinction is nearly guaranteed to appear.
• Sampling: by default the first request each second is traced plus a percentage of additional requests; sampling rules are configurable centrally.
• Instrumentation: the X-Ray SDK auto-instruments AWS SDK clients, HTTP clients, and SQL drivers. Lambda needs active tracing enabled and the right IAM permissions.

7. AWS CI/CD: CodePipeline, CodeBuild, CodeDeploy, CodeArtifact

• CodePipeline: stages and actions, source through build through test through deploy, manual approval actions, and cross-Region artifact buckets.
• CodeBuild: buildspec.yml with install, pre_build, build, and post_build phases, plus artifacts and cache sections. Compute types scale from small upward. Test reports surface pass/fail trends.
• CodeDeploy: appspec.yml at the root of the revision. Lifecycle hooks differ by platform - Lambda uses BeforeAllowTraffic and AfterAllowTraffic, ECS adds hooks around the replacement task set, and EC2 has the full ApplicationStop through ValidateService sequence.
• CodeArtifact: private package repository for npm, PyPI, Maven, NuGet, and generic formats. Upstream repositories proxy public registries.

8. Amazon API Gateway

• REST API versus HTTP API versus WebSocket API: REST is full-featured with caching, usage plans, API keys, and request validation. HTTP API is cheaper and faster with a reduced feature set and no built-in caching. WebSocket supports duplex connections with Lambda backends.
• Authorization: IAM, Cognito user pool authorizers, and Lambda authorizers in TOKEN or REQUEST form with configurable result caching. API keys identify a caller for usage plans; they are not authentication.
• Stages and stage variables: point a stage at a different Lambda alias so dev, staging, and prod share one API definition.
• Throttling: the default account-level quota is 10,000 requests per second per Region across API types, with a burst bucket capacity of 5,000 requests. Some newer Regions default to 2,500 RPS. Layer method-level throttling and usage plans underneath.
• Caching: enabled per stage, with per-key caching driven by method request parameters and client-triggered invalidation via a cache-control header.
• The Lambda mismatch: API Gateway defaults to 10,000 RPS while Lambda defaults to 1,000 concurrent executions. That asymmetry is a classic throttling scenario.

9. Messaging: SQS, SNS, and EventBridge

• SQS Standard versus FIFO: Standard offers nearly unlimited throughput, at-least-once delivery, and best-effort ordering. FIFO gives exactly-once processing and strict ordering by MessageGroupId, at 300 transactions per second per API action per partition, or 3,000 messages per second with batching. High throughput mode for FIFO raises this substantially - up to 70,000 TPS without batching in US East (N. Virginia), US West (Oregon), and Europe (Ireland), with lower defaults elsewhere.
• Message size: up to 1 MiB per message. Use the Extended Client Library with an S3 payload pointer for anything larger.
• Retention: 4 days by default, configurable from 60 seconds to 14 days.
• Visibility timeout: 30 seconds by default, 12 hours maximum. Use ChangeMessageVisibility to extend a long-running job. Too short causes duplicate processing; too long delays retries after a crash.
• Long polling: set ReceiveMessageWaitTimeSeconds up to 20 seconds to cut empty receives and cost.
• Dead-letter queues: triggered by maxReceiveCount, and the DLQ must match the source queue type.
• SNS: one topic fanning out to many subscribers - SQS, Lambda, HTTP/S, email, SMS, and Firehose. Filter policies let each subscriber receive only matching messages, avoiding filter logic in your consumers.
• EventBridge: default, custom, and partner event buses. Rules match events by pattern; archive and replay recovers lost processing; the schema registry generates typed bindings; Pipes provides point-to-point integration with optional filtering and enrichment.

10. Amazon Q Developer, AppConfig, and CloudShell

This group replaced CodeGuru in the current guide, and it is where most study material is out of date.

• Amazon Q Developer is now an in-scope service and appears in two explicit skills: using it for development assistance, and using it to generate automated tests. Know it as an AI assistant integrated into the IDE, the CLI, and the console that explains code, suggests implementations, generates tests, and helps troubleshoot AWS errors.
• AWS AppConfig, part of Systems Manager, deploys configuration and feature flags separately from code, with validators and gradual rollout plus automatic rollback on a CloudWatch alarm. The exam guide added preparing environment-specific application configurations as a skill.
• AWS CloudShell: browser-based shell with the AWS CLI pre-installed and persistent home directory storage per Region. Useful when a question asks how to run CLI commands without configuring local credentials.

---

Service Decision Frameworks: What the Scenarios Actually Test

Most DVA-C02 questions are not "what does this service do." They are "three of these four would technically work, so which one does AWS want here." Learn these three splits and a large share of Domains 1 and 3 answers itself.

Compute

Application integration

Infrastructure as code

The tie-break when two options both work: prefer the managed service, the least code, the least operational overhead, and the loosest coupling. That one heuristic decides more questions than any single service fact.

---

Cost and Registration (2026)

How to register: create an AWS Certification account at aws.amazon.com/certification/, then schedule through Pearson VUE for either a testing center or an online proctored session. Your government-issued photo ID must match the name on your Certification profile exactly.

Free extra time for non-native English speakers: AWS offers a 30-minute exam extension to non-native English speakers taking the exam in English. You request it once through Request Exam Accommodations in your AWS Certification Account, and it then applies to all future registrations. It is not a medical accommodation and needs no documentation, and a surprising number of eligible candidates never claim it.

Recertification Strategy (2026)

AWS Associate certifications are valid for 3 years. The AWS recertification page lists three routes for AWS Certified Developer - Associate, and the third is recent enough that most competing guides still tell you recertification is exam-only:

1. Renew by passing the current version of this exam - whichever series code is live at that time. Extends validity by 3 years.
2. Renew by passing AWS Certified DevOps Engineer - Professional (DOP-C02). AWS lists this as a recertification option for both Developer - Associate and CloudOps Engineer - Associate. Extends validity by 3 years.
3. Maintain on AWS Skill Builder. Complete the selected maintenance courses and hands-on labs to extend validity by 1 year, no exam. AWS requires an active certification within 90 days of expiration and an active paid Skill Builder subscription (Monthly, Annual, or Team).

For every route, the new time is added from the date you complete the action, not from your original expiry date. Your AWS Certified benefits include a 50% discount voucher, which applies to either renewal exam.

Budget accordingly: a $150 Associate exam every three years, a $300 Professional exam that renews two Associate credentials at once, or a Skill Builder subscription (from $29/month) if you want a year of breathing room without sitting an exam. If you are heading toward DevOps or platform work anyway, the DOP-C02 route is the best value.

Remember the two-year block on retaking a passed exam. You cannot re-sit DVA-C02 early just to reset the clock. The exception is written into the policy: when an exam is reissued under a new exam guide and series code, you become eligible for that new version - so passing DVA-C02 now does not lock you out of DVA-C03.

10-Week DVA-C02 Study Plan for Working Developers

This plan assumes 8-10 hours per week and roughly a year of prior hands-on AWS experience. Compress it if you study full time; stretch it to 14-16 weeks if AWS is new to you.

Time Allocation: Match the Blueprint, Not Your Comfort Zone

Most failed attempts come from candidates who spent 40 hours on Lambda because it was fun and 6 hours on IAM policy evaluation because it was not.

Recommended Resources: Free First, Then Paid

When you evaluate any third-party resource in 2026, apply one test: does it mention exam guide version 2.1, Amazon Q Developer, or the DVA-C03 transition? If not, it has not been meaningfully updated since 2024.

Hands-On Labs Are Non-Negotiable

DVA-C02 tests implementation knowledge. Build these six projects in a free-tier account before test day:

1. Serverless REST API: API Gateway plus Lambda plus DynamoDB, secured with a Cognito user pool.
2. S3 static site with presigned uploads: S3 plus CloudFront, with a Lambda that issues presigned PUT URLs.
3. Event-driven pipeline: S3 PUT triggers Lambda into DynamoDB, with SNS fan-out to SQS and a DLQ.
4. Step Functions orchestration: a state machine using Map, Parallel, Retry, Catch, and a callback-token approval step.
5. CI/CD: source through CodeBuild through CodeDeploy, doing a canary shift to a Lambda alias via a SAM pipeline.
6. Observability stack: X-Ray tracing plus CloudWatch Logs Insights plus EMF metrics plus an alarm into SNS.

Deliberately break each one. Set a visibility timeout below the function duration and watch the duplicates. Remove an IAM permission and read the AccessDenied message carefully. The exam is largely a test of whether you have seen these failures before.

Test-Day Strategy

Before the exam:

• Confirm the name on your AWS Certification profile matches your government photo ID exactly.
• For online proctoring, run the Pearson VUE system test at least 24 hours ahead. Webcam, microphone, and bandwidth failures cost the whole slot.
• Clear your workspace completely - no notes, no second monitor, no phone in reach. Expect a full room scan.
• If you are a non-native English speaker taking the exam in English, request the 30-minute extension in advance.

During the exam:

• 130 minutes across 65 questions is about 2 minutes per question. You cannot tell scored from unscored items, so budget evenly and never burn 6 minutes on one scenario. Flag it and move on.
• Read the last sentence of the stem first on long scenarios. The qualifier - "MOST cost-effective," "LEAST operational overhead," "MOST secure" - is what actually decides the answer.
• Eliminate aggressively. Two options are usually obviously wrong; between the final two, pick the AWS-idiomatic one: managed service, least code, least operational overhead, loosest coupling.
• Multiple-response questions state how many to select. There is no partial credit - all correct answers and no incorrect ones.
• Use the Help button. AWS puts a list of AWS service short names and their full names there deliberately. Know it exists so you are not decoding abbreviations under time pressure.

After the exam:

• Provisional pass or fail appears on screen at the end of the session.
• The official scaled score arrives within 5 business days, viewable in your AWS Certification Account.
• Your score report includes a section-level classification table. AWS explicitly cautions against over-interpreting it, since section sample sizes are small.
• The digital badge is issued through Credly and is shareable on LinkedIn.

Common Pitfalls That Sink First-Time Scores

1. Treating DVA-C02 like Solutions Architect Associate. Far fewer VPC design questions, far more service-behavior questions. Shift study time toward how services fail.
2. Under-studying IAM policy evaluation. Explicit Deny, then explicit Allow, then implicit Deny, with identity-based and resource-based policies evaluated together. Learn it as a flowchart.
3. Confusing Cognito user pools and identity pools. User pool answers "who are you." Identity pool answers "which AWS APIs may you call," by vending temporary credentials.
4. Skipping X-Ray. Annotations versus metadata, sampling, and subsegments are reliably worth several points.
5. Guessing on CloudFormation intrinsic functions. Fn::Sub, Fn::Join, Fn::GetAtt, and Fn::ImportValue appear inside template snippets in the stem.
6. Ignoring Step Functions. Standard versus Express, Map state, Retry and Catch, and callback tokens are core Domain 1 material.
7. Weak on Lambda concurrency. Reserved caps and guarantees; provisioned pre-warms. Knowing which one solves cold starts versus which one protects a downstream database is a guaranteed scenario.
8. Studying from pre-2025 material. If it teaches CodeGuru as in-scope or never mentions Amazon Q Developer, it is behind exam guide version 2.1.
9. Not practicing timed. 130 minutes feels generous until a 400-word case study appears. Do at least two full-length timed mocks.
10. Booking without checking the calendar. With DVA-C02 ending December 1, 2026, confirm your seat date against that deadline before you pay.

Career Value and the AWS Certification Path

A word on salary claims: AWS publishes neither pass rates nor salary data for its certifications, and third-party salary aggregates for "AWS developer" vary enormously by location, seniority, and how each site defines the role. We would rather give you nothing than give you a fabricated median, so this guide does not quote one. Treat any page that states a precise pass rate or a single national salary figure for DVA-C02 as marketing.

What is verifiable is where the credential sits in the AWS ladder and what it unlocks:

The typical serverless-developer route is CLF-C02 (optional) then DVA-C02 then DOP-C02, and that last step both advances your career and resets your Associate expiry for free.

What actually moves the needle beyond the badge: contributing to AWS SDKs or CDK construct libraries, publishing post-mortems of real incidents you debugged, and being the person on your team who can read a CloudFormation diff and predict what will be replaced.

DVA-C02 vs SAA-C03: Which First?

Both are Associate-tier, both cost $150, and both are broadly comparable in difficulty. Choose by your day job, not by reputation.

If you push code more than you push infrastructure definitions, take DVA-C02. If you draw architecture diagrams more often than you write handlers, take SAA-C03. The service overlap is substantial either way, so whichever you sit second will be noticeably easier.

---

Keep Training with FREE DVA-C02 Practice

Practice AWS Developer Associate scenario questions across Development, Security, Deployment, and Troubleshooting - all 100% FREE.

---

Official Sources Used

• AWS Certified Developer - Associate exam page, including the DVA-C03 update notice and certification FAQ (aws.amazon.com/certification/certified-developer-associate/)
• AWS Certified Developer - Associate (DVA-C02) Exam Guide, version 2.1, including Content Outline, Emerging Topics, In-Scope and Out-of-Scope Services, and Revisions (docs.aws.amazon.com/aws-certification/latest/developer-associate-02/)
• AWS Certification policies: exam retake policy, results timing, and exam pricing by level
• AWS Certification recertification policy (aws.amazon.com/certification/policies/recertification/)
• AWS Certification exam accommodations, including the 30-minute ESL extension
• AWS service documentation for quotas and behavior: Lambda, DynamoDB (service quotas, transactions, provisioned capacity), Amazon S3, Amazon SQS, Amazon API Gateway, AWS KMS, AWS Step Functions, and AWS CodeDeploy

Certification details, fees, and blueprint weights may be revised by AWS, and the DVA-C03 transition is in progress. Always confirm current requirements directly on aws.amazon.com/certification/certified-developer-associate before scheduling.