💸 Catch expensive AWS mistakes before deployment! See cost impact in GitHub PRs for Terraform & CDK. Join the Free Beta!
AWS DevOps Engineer Professional Exam Guide: 8-Week Study Plan [2026]

AWS DevOps Engineer Professional Exam Guide: 8-Week Study Plan [2026]

Pass the AWS DevOps Engineer Professional (DOP-C02) exam with our 8-week study plan. Includes domain cheat sheets, resources, exam strategy, and practice tips.

January 4th, 2026
26 min read
0 views
--- likes

The AWS DevOps Engineer Professional exam has a reputation for being one of the most challenging AWS certifications. Even experienced engineers with years of AWS experience fail on their first attempt.

I've seen it happen repeatedly: engineers with solid production experience walk into this exam confident and walk out deflated. The problem isn't their knowledge. It's their preparation approach.

Most exam guides dump a list of services to study without teaching you how to study them, in what order, or how long to spend on each domain. That's why I created this guide differently.

In this article, you'll learn:

  • Whether the DevOps Professional certification is worth your time investment
  • A structured 8-week study plan organized by exam domain weightings
  • Which resources to use (and which to skip)
  • Exam-day strategies that actually work
  • What to do if you fail (it's not the end of the world)

By the end of this guide, you'll have a complete roadmap from "where do I start?" to walking out of the testing center with a passing score.

Is the AWS DevOps Engineer Professional Worth It?

Before investing 100+ hours of study time, you need to answer this question honestly.

The AWS Certified DevOps Engineer Professional (DOP-C02) validates your ability to implement and manage continuous delivery systems, automate security controls, define monitoring and logging systems, and implement highly available, scalable, and self-healing systems on AWS. This isn't a beginner certification. It's proof that you can architect and operate sophisticated automation at scale.

Here's what makes it valuable:

  1. Career advancement: DevOps Professional certification holders typically move into senior engineering roles, DevOps lead positions, or platform engineering teams. It's one of only two Professional-level AWS certifications (the other being Solutions Architect Professional).

  2. Salary impact: Professional certifications demonstrate expertise that commands higher compensation. The certification validates skills that organizations actively seek but struggle to find.

  3. Technical credibility: When you recommend CI/CD patterns or infrastructure automation approaches to stakeholders, the certification adds weight to your recommendations.

  4. Foundation for specialization: The DevOps Professional covers security automation, monitoring, and infrastructure as code deeply. This creates a strong foundation for specialty certifications like Security or Advanced Networking.

Who should wait: If you have less than two years of hands-on AWS experience, or if you've never built a CI/CD pipeline or deployed infrastructure as code, this exam will be unnecessarily difficult. Start with the AWS Developer Associate or CloudOps Engineer Associate exams first.

Prerequisites: Who Should Take This Exam

AWS targets this exam at experienced practitioners, not those just starting their cloud journey. Understanding the prerequisites helps you gauge whether you're ready or need more preparation.

Required Experience Level

According to AWS, the target candidate should have two or more years of experience in provisioning, operating, and managing AWS environments. Beyond the time requirement, AWS expects specific technical competencies:

  • Experience building highly automated infrastructure
  • Proficiency with the software development lifecycle and programming/scripting (Python, Bash, or similar)
  • Experience administering operating systems (Linux or Windows)
  • Familiarity with modern development and operations processes
  • Experience securing AWS infrastructure

What's explicitly out of scope: Advanced networking (complex routing algorithms, failover techniques), deep database optimization, full-stack application development, and providing security recommendations to developers. The exam focuses on operational automation, not these specialized areas.

A useful self-assessment: Can you explain how CodePipeline orchestrates deployments across multiple accounts? Do you understand when to use CloudFormation StackSets versus individual stacks? Have you implemented monitoring with CloudWatch Alarms that trigger automated remediation? If these concepts feel foreign, invest time in hands-on practice before booking your exam.

While not strictly required, following a certification progression builds foundational knowledge that makes the Professional exam more approachable:

The recommended path:

  1. Start with Cloud Practitioner (optional): Establishes foundational AWS knowledge
  2. Choose your Associate focus: Developer Associate if you're code-focused, CloudOps Engineer Associate if you're operations-focused
  3. Progress to DevOps Professional: The Professional exam combines concepts from both Associate exams

Can you skip the Associate certifications? Yes, but it's harder. If you skip Associates, add 4-6 weeks to your study timeline and focus on foundational concepts during the first weeks, particularly those covered in the AWS Developer Associate which forms half the foundation for DevOps Professional. Check out our Cloud Practitioner exam guide if you want to start from the beginning.

Exam Format and Specifications

Understanding the exam mechanics helps you prepare strategically. There are no surprises when you know exactly what to expect.

Questions and Scoring

The DOP-C02 exam tests your knowledge through 75 questions in 180 minutes (3 hours). Here's what you need to know:

SpecificationDetails
Total Questions75 (65 scored, 10 unscored)
Time Limit180 minutes (3 hours)
Passing Score750 out of 1,000
Question TypesMultiple choice, multiple response, ordering, matching, case study
Exam Cost$300 USD
LanguagesEnglish, Japanese, Korean, Simplified Chinese

Key insight: 10 questions are unscored and used by AWS to evaluate future exam content. You won't know which questions these are, so treat every question seriously. The compensatory scoring model means you don't need to pass each domain individually. A strong performance in SDLC Automation can offset a weaker performance in another domain.

Extended time: If English isn't your first language, you can request an additional 30 minutes (210 minutes total) through your AWS Certification account. Follow this advice on getting extra time for your AWS exams.

New Question Types in 2025+

Beyond traditional multiple-choice questions, AWS has introduced new question formats you should prepare for:

Ordering Questions: Arrange steps in a logical sequence. Example: "Order the steps to implement a blue/green deployment using CodeDeploy."

Matching Questions: Pair items from two lists. Example: "Match each deployment strategy with its appropriate use case."

Case Study Questions: Read a scenario, then answer multiple related questions. These test your ability to apply knowledge holistically rather than in isolation.

Strategy for new question types: For ordering questions, identify the first and last steps first. They're usually the most obvious. For matching questions, start with the pairs you're most confident about, then use elimination for the rest.

Domain Breakdown and Weightings

The exam content spans six domains, each with specific weightings that determine how many questions you'll see from each area:

DomainWeightQuestions (approx.)
Domain 1: SDLC Automation22%~17 questions
Domain 2: Configuration Management and IaC17%~13 questions
Domain 3: Resilient Cloud Solutions15%~12 questions
Domain 4: Monitoring and Logging15%~12 questions
Domain 5: Incident and Event Response14%~11 questions
Domain 6: Security and Compliance17%~13 questions

Strategic insight: SDLC Automation is the largest domain at 22%. If you master CI/CD services (CodePipeline, CodeBuild, CodeDeploy), you're setting yourself up for success on nearly a quarter of the exam.

The 8-Week Study Plan

This structured plan assumes 10-15 hours of study per week. Adjust the timeline based on your experience level: experienced AWS practitioners might compress to 4-6 weeks, while those newer to AWS should extend to 10-12 weeks.

Important: Book your exam date before starting Week 1. Having a concrete deadline creates accountability and prevents endless "I'll study a bit more first" delays.

Week 1-2: SDLC Automation (22% of exam)

This is the largest domain, so we dedicate two full weeks to mastering it.

Focus areas:

  • AWS CodePipeline: Stages, actions, manual approvals, cross-account pipelines
  • AWS CodeBuild: buildspec.yml syntax (must memorize), build phases, environment variables
  • AWS CodeDeploy: appspec.yml syntax (must memorize), deployment configurations
  • AWS CodeCommit: Repository management, triggers, branch policies
  • AWS CodeArtifact: Artifact repository management, upstream repositories

Must-know deployment strategies:

  • Blue/green deployments (when and how)
  • Canary deployments (gradual rollout)
  • Rolling deployments (in-place updates)
  • Immutable deployments (replace entire fleet)

Week 1 activities:

  • Watch video course content on CI/CD services
  • Read AWS documentation on CodePipeline and CodeBuild
  • Study buildspec.yml syntax until you can write one from memory

Week 2 activities:

  • Focus on CodeDeploy and deployment strategies
  • Build a complete CI/CD pipeline in your AWS account
  • Take domain-specific practice questions (target: 70%+)

Checkpoint: Can you explain the difference between blue/green and canary deployments? Can you write a basic buildspec.yml from memory?

Week 3: Configuration Management and IaC (17%)

Infrastructure as Code is fundamental to DevOps practices. This week focuses on CloudFormation and its ecosystem.

Focus areas:

  • CloudFormation template syntax, intrinsic functions, resource attributes
  • AWS CDK: How it relates to CloudFormation, construct levels, when to use it
  • AWS SAM: Serverless application deployment, SAM transform
  • StackSets: Multi-account, multi-region deployments
  • AWS Systems Manager: Configuration management at scale

Key syntax to memorize:

  • CloudFormation intrinsic functions (!Ref, !GetAtt, !Sub, !Join, !If)
  • CloudFormation resource attributes (DependsOn, CreationPolicy, DeletionPolicy)
  • CloudFormation helper scripts (cfn-init, cfn-signal, cfn-hup)

Week 3 activities:

  • Review CloudFormation template anatomy and syntax (see GetAtt cheat sheet for reference)
  • Understand when to choose CDK, CloudFormation, or SAM
  • Build a CloudFormation template with nested stacks
  • Practice StackSets for multi-account deployments

Checkpoint: Can you explain when to use !Ref versus !GetAtt? Do you understand how CDK stacks synthesize to CloudFormation?

Week 4: Security and Compliance (17%)

Security is a cross-cutting concern that appears throughout the exam. This week builds your security automation knowledge.

Focus areas:

  • IAM deep dive: Policies, roles, trust policies, cross-account access
  • AWS Config: Rules for compliance monitoring, automatic remediation
  • GuardDuty: Threat detection, findings, integration with EventBridge
  • Amazon Inspector: Vulnerability scanning, integration with CI/CD
  • Secrets management: Parameter Store vs Secrets Manager

Must-know concepts:

Week 4 activities:

  • Study IAM policy syntax and evaluation logic
  • Understand the difference between identity-based and resource-based policies
  • Practice implementing cross-account access with IAM roles
  • Review AWS Config managed rules and custom rules

Checkpoint: Can you write an IAM policy from scratch? Do you understand how Config Rules detect non-compliant resources?

Week 5: Monitoring, Logging & Resilience (30%)

This week combines Domains 3 and 4 because they're tightly integrated. Understanding monitoring is essential for building resilient systems.

Focus areas:

  • CloudWatch metrics, logs, alarms (deep dive)
  • AWS X-Ray for distributed tracing
  • Multi-AZ vs multi-region architectures
  • Disaster recovery strategies (backup/restore, pilot light, warm standby, hot standby)
  • High availability patterns for databases (RDS, DynamoDB Global Tables)

Key CloudWatch metrics to know:

  • ELB: SurgeQueueLength, SpillOverCount
  • EC2: StatusCheckFailed, CPUCreditUsage, CPUCreditBalance
  • HTTP status codes: HTTPCode_Backend_5xx, HTTPCode_ELB_4xx

DR strategies (memorize the spectrum):

  1. Backup and Restore: Cheapest, longest recovery time
  2. Pilot Light: Minimal infrastructure running, scale up on failover
  3. Warm Standby: Scaled-down replica running, quick failover
  4. Hot Standby: Full replica running, near-instant failover

Week 5 activities:

  • Set up CloudWatch dashboards with custom metrics
  • Implement CloudWatch alarms with automated actions
  • Practice X-Ray tracing in a sample application
  • Review RDS Multi-AZ and read replica patterns

Checkpoint: Can you design a disaster recovery solution given specific RPO/RTO requirements?

Week 6: Incident Response + Integration Practice (14%)

This week covers automated incident response and integrates knowledge from all previous domains.

Focus areas:

  • Amazon EventBridge for event-driven automation
  • Auto Scaling lifecycle hooks
  • Automated remediation patterns
  • Elastic Beanstalk configuration management
  • Integration: How all services work together

Key concepts:

  • EventBridge rules and targets
  • Lambda-based automated remediation
  • Auto Scaling termination policies
  • Systems Manager automation documents

Week 6 activities:

  • Implement EventBridge rules that trigger Lambda functions
  • Practice Auto Scaling lifecycle hooks for custom actions
  • Take a full-length practice exam (target: 60%+)
  • Review any weak areas identified

Checkpoint: Can you design an automated response to a security finding from GuardDuty?

Week 7: Practice Exams + Weak Spot Remediation

No new content this week. Focus entirely on practice exams and targeted review.

Week 7 activities:

  • Take 2-3 full practice exams in timed mode
  • Target score: 85%+ before the real exam
  • Review every wrong answer, understand why you missed it
  • Identify your weakest 1-2 domains from score breakdowns
  • Deep dive on those weak domains

How to review practice exam answers:

  1. Don't just read the correct answer, understand why other options are wrong
  2. Note patterns in questions you miss (usually reveals knowledge gaps)
  3. Create flashcards for frequently missed concepts
  4. Re-read relevant AWS documentation for topics you're weak on

Checkpoint: Are you consistently scoring 85%+ on practice exams? Can you explain why each answer is correct?

Week 8: Final Review + Exam Day Prep

Light review only. No new material. Focus on confidence and logistics.

Week 8 activities:

  • Review your notes and flagged weak areas (don't cram new content)
  • Complete the system test for online proctoring (24 hours before exam)
  • Prepare your testing environment or plan your test center visit
  • Get good sleep the night before
  • Take the exam with confidence

Day-before checklist:

  • Valid government-issued ID ready (name must match AWS account)
  • Testing environment prepared (quiet, clean, good lighting)
  • System test completed (for online exams)
  • Know your exam time and location
  • Get a full night's sleep

Essential AWS Services to Master

While the study plan covers all domains, some services appear repeatedly across the exam. Mastering these services gives you an outsized advantage.

CI/CD Services (CodePipeline, CodeBuild, CodeDeploy)

These three services form the backbone of AWS-native CI/CD. The exam tests your understanding of how they work together, not just individually.

CodePipeline orchestrates the entire delivery workflow:

  • Stages contain actions (source, build, test, deploy, approval)
  • Actions can run in parallel or sequentially
  • Cross-account pipelines require IAM roles in both accounts
  • Manual approval actions pause the pipeline for human review

CodeBuild compiles code, runs tests, and produces artifacts:

  • buildspec.yml defines build phases (install, pre_build, build, post_build)
  • Environment variables can come from Parameter Store or Secrets Manager
  • Build cache improves performance for repeated builds
  • Reports provide test results and code coverage

CodeDeploy deploys applications to EC2, ECS, Lambda, or on-premises:

  • appspec.yml defines deployment lifecycle hooks
  • Deployment configurations control rollout speed (OneAtATime, HalfAtATime, AllAtOnce)
  • Rollback triggers automatically when alarms fire

Infrastructure as Code (CloudFormation, CDK, SAM)

Understanding when to use each IaC tool is just as important as knowing how they work.

ToolBest ForKey Feature
CloudFormationAny AWS infrastructureNative AWS, declarative YAML/JSON
AWS CDKComplex infrastructure, reusable patternsProgramming languages, constructs
SAMServerless applicationsSimplified syntax, local testing

CloudFormation essentials:

  • Template anatomy (Resources is the only required section)
  • Intrinsic functions for dynamic values
  • StackSets for multi-account deployments
  • Drift detection for configuration compliance

See our CloudFormation resource properties reference for a complete list of configurable properties.

Configuration Management (Systems Manager)

Systems Manager is a Swiss Army knife for operational tasks. Understand these capabilities:

  • Parameter Store: Store configuration data and secrets (use SecureString for sensitive values)
  • Run Command: Execute commands across managed instances
  • Patch Manager: Automate OS patching with baselines and maintenance windows
  • Session Manager: Secure shell access without SSH keys (see Session Manager guide)
  • Automation: Run multi-step workflows for operational tasks

Monitoring and Observability (CloudWatch, X-Ray)

CloudWatch is central to monitoring and appears in nearly every exam scenario.

CloudWatch components:

  • Metrics: Numerical data points (built-in and custom)
  • Logs: Application and system logs (retention policies, insights queries)
  • Alarms: Automated actions when thresholds are breached
  • Dashboards: Visualization for operational awareness

X-Ray for distributed tracing:

  • Trace requests across services
  • Identify performance bottlenecks
  • Visualize service maps

Security Services (IAM, Config, GuardDuty, Secrets Manager)

Security services appear throughout the exam, not just in Domain 6.

IAM fundamentals:

  • Policies define permissions (identity-based vs resource-based)
  • Roles provide temporary credentials
  • Trust policies control who can assume a role
  • Cross-account access requires roles in both accounts

AWS Config for compliance:

  • Managed rules for common compliance checks
  • Custom rules using Lambda functions
  • Remediation actions for non-compliant resources

Secrets management:

  • Parameter Store: Free tier available, simple key-value storage
  • Secrets Manager: Automatic rotation, costs more

Study Resources: Free vs Paid

You don't need to spend a fortune on study materials, but strategic investments can accelerate your preparation.

AWS Skill Builder (Official - Free + Paid)

AWS Skill Builder is the official exam preparation platform. Understanding the free vs paid tiers helps you budget effectively.

Free tier includes:

  • 600+ digital courses
  • Exam guides and sample questions
  • Learning paths for each certification

Subscription ($29/month) adds:

  • Official practice exams
  • AWS Builder Labs (hands-on labs in real AWS environment)
  • AWS Jam challenges
  • Enhanced learning paths

My recommendation: The $29/month subscription is worth it for the official practice exams and Builder Labs. Subscribe for 2 months during your study period, then cancel.

Video Courses (Stephane Maarek, Adrian Cantrill)

Video courses provide structured learning that's easier to follow than documentation alone.

Stephane Maarek (Udemy):

  • Comprehensive coverage of all exam domains
  • Regularly updated for current exam version
  • Includes practice questions
  • Often on sale for $15-20

Adrian Cantrill:

  • Deep technical dives with production-focused examples
  • Excellent for visual learners
  • More expensive but thorough

Which to choose? Maarek for efficiency and exam focus. Cantrill for depth and real-world application. Either works well.

Practice Exams (Tutorials Dojo, Official)

Practice exams are essential. You should take multiple full-length exams before the real thing.

AWS Official Practice Exam:

  • Available on Skill Builder (subscription required)
  • Best for understanding question format and difficulty
  • Provides score report with domain breakdown

Tutorials Dojo Practice Exams:

  • Most realistic difficulty level
  • Excellent explanations for every answer
  • Timed and review modes available
  • 75 questions per exam, matching real exam length

How to use practice exams effectively:

  1. Take your first practice exam in Week 6 (before you feel ready)
  2. Review every answer, right or wrong
  3. Take additional exams in Week 7
  4. Target 85%+ before the real exam

Hands-On Labs (AWS Builder Labs, Free Tier)

Theory alone won't pass this exam. Hands-on experience is mandatory.

AWS Builder Labs:

  • 200+ guided labs in real AWS environment
  • Step-by-step instructions
  • Available with Skill Builder subscription

AWS Free Tier:

  • 12-month free tier for new accounts
  • Always-free tier for some services
  • Build your own projects without cost concerns

Essential hands-on exercises:

  1. Build a complete CI/CD pipeline (CodePipeline, CodeBuild, CodeDeploy)
  2. Deploy infrastructure with CloudFormation and CDK
  3. Implement monitoring with CloudWatch alarms and dashboards
  4. Configure cross-account access with IAM roles

Complete Free Study Path ($0 + exam fee)

Yes, you can pass without buying courses. Here's how:

  1. AWS Skill Builder free courses: Cover all exam domains
  2. Official documentation: The ultimate source of truth
  3. AWS Free Tier: Build real infrastructure
  4. YouTube: Free tutorials on specific topics
  5. Community resources: Reddit, AWS forums, GitHub repos
  6. Our exam guides: This guide plus our Developer Associate and CloudOps Engineer Associate guides

The tradeoff: Free resources require more self-discipline and take longer to synthesize. Video courses save time but cost money. Choose based on your situation.

Check out our complete guide to free AWS learning resources for additional study materials.

Hands-On Experience Requirements

Let me be direct: you cannot pass this exam with theory alone. The questions describe real-world scenarios that require hands-on experience to answer correctly.

AWS explicitly states the target candidate should have two or more years of experience provisioning, operating, and managing AWS environments. If you don't have that, you need to build it through deliberate practice.

Must-Build Mini Projects

Before taking the exam, you should have built each of these:

1. Complete CI/CD Pipeline

  • Source: CodeCommit (or GitHub)
  • Build: CodeBuild with buildspec.yml
  • Deploy: CodeDeploy to EC2 or ECS
  • Orchestration: CodePipeline tying it together

2. Multi-Stack CloudFormation Deployment

  • Parent stack with nested stacks
  • Cross-stack references using exports
  • StackSets deployment to multiple accounts (if you have access)

3. Blue/Green Deployment

  • CodeDeploy deployment group with blue/green configuration
  • Application Load Balancer target group switching
  • Rollback triggered by CloudWatch alarms

4. Automated Compliance Monitoring

  • AWS Config managed rules for common checks
  • Custom Config rule using Lambda
  • Remediation action for non-compliant resources

5. Monitoring and Alerting System

  • CloudWatch custom metrics
  • Alarms with SNS notifications
  • Dashboard for operational visibility

AWS Jam Challenges

AWS Jam provides real-world, open-ended challenges in a live AWS environment. These are particularly valuable for exam preparation because they test practical problem-solving, not memorization.

DevOps-specific Jam challenges:

  • DevOps on AWS (Foundational): Intermediate-level challenges
  • DevOps on AWS (Advanced): Advanced troubleshooting and optimization

Where to access: AWS Skill Builder with subscription. The gamified format makes learning more engaging while building practical skills.

Exam Day Strategy

You've studied for weeks. Now it's time to execute. These strategies help you perform at your best on exam day.

Before the Exam

Technical preparation (for online exams):

  1. Complete the system test 24 hours before your exam
  2. Ensure your webcam and microphone work properly
  3. Prepare a quiet, clean testing space with good lighting
  4. Close all unnecessary applications on your computer
  5. Have a power source ready (don't rely on battery)

ID requirements:

  • Your ID name must exactly match your AWS Certification account name
  • Bring valid government-issued photo ID
  • If your name has changed, update your AWS account before exam day

What you cannot have in the room:

  • Notes or writing materials (scratch paper is not allowed)
  • Phones or electronic devices
  • Headphones (unless for accessibility)
  • Food and beverages

Time Management (2.4 min per question)

With 75 questions in 180 minutes, you have an average of 2.4 minutes per question. Here's how to use that time effectively:

First pass (target: 90 seconds per question):

  • Read the question carefully
  • If you know the answer confidently, select it and move on
  • If you're unsure, flag it and make your best guess
  • Don't leave anything blank

Second pass (remaining time):

  • Review flagged questions with fresh eyes
  • Revisit questions where you changed your answer
  • Use remaining time to double-check answers you weren't confident about

Time checkpoints:

  • 45 minutes in: Should be around question 25
  • 90 minutes in: Should be around question 50
  • 135 minutes in: Should be finishing question 75
  • Final 45 minutes: Review flagged questions

How to Eliminate Wrong Answers

When you're unsure, systematic elimination improves your odds.

Look for these patterns in wrong answers:

  1. Overly complex solutions: When a simple solution exists, the complex answer is usually wrong
  2. Violations of best practices: Answers that skip least privilege or hardcode credentials
  3. Wrong service for the use case: CodeBuild for deployment (wrong), CodeDeploy for building (wrong)
  4. Outdated approaches: CloudWatch Events when EventBridge is an option

Question keyword signals:

  • "Cost-effective" or "minimum cost": Eliminate expensive options
  • "Fastest" or "minimum time": Eliminate slow options
  • "Most secure": Eliminate options with security gaps
  • "Least operational overhead": Eliminate solutions requiring manual maintenance

For scenario questions, use this framework:

  1. Identify what the question is really asking (the requirement)
  2. Eliminate answers that don't meet the requirement
  3. Among remaining options, choose the one that best follows AWS best practices

When to Guess vs Skip

Always answer every question. There is no penalty for wrong answers. Unanswered questions are scored as incorrect, so guessing gives you at least a chance of getting points.

The flag-and-guess workflow:

  1. Read the question
  2. If unsure, make your best guess
  3. Flag the question for review
  4. Continue to next question
  5. Return to flagged questions when you've finished the first pass

This approach ensures you never run out of time with blank answers.

What If You Fail? Recovery Plan

Failure isn't permanent. Many successful certification holders failed their first attempt. What matters is how you respond.

Interpreting Your Score Report

After the exam, you receive a score report showing:

  • Your overall scaled score (100-1,000, need 750 to pass)
  • Performance classification for each domain

Domain performance classifications:

  • Meets Competency: You performed well in this domain
  • Needs Improvement: Focus additional study here

Use this information to target your recovery study. If you "Need Improvement" in SDLC Automation, that's where you spend most of your time before retaking.

3-Week Recovery Study Plan

Week 1: Deep dive on weakest domains

  • Focus exclusively on domains marked "Needs Improvement"
  • Re-read AWS documentation for those services
  • Take domain-specific practice questions
  • Build hands-on labs for those specific areas

Week 2: Practice exams (different from first attempt)

  • Take 2-3 new practice exams (don't just retake the same ones)
  • Review every answer, especially in weak domains
  • Target: 85%+ consistently

Week 3: Integration review + confidence building

  • Light review of all domains
  • Focus on how services work together
  • Take a final practice exam
  • Schedule and take the retake

Retake Policy and Costs

AWS has clear retake policies:

  • Waiting period: 14 calendar days after a failed attempt
  • Cost: Full $300 fee (no discount for retakes)
  • Attempt limits: No limit on the number of attempts

Budget planning: If you failed, budget for one or two retakes. Many people pass on their second or third attempt with focused study.

After You Pass: Certification Benefits

Congratulations! Here's what happens after you earn the certification.

Recertification (3-Year Validity)

AWS certifications are valid for three years from the date earned. Before expiration, you must recertify to maintain active status.

Recertification options:

  1. Pass the current version of the DevOps Engineer Professional exam
  2. Use your 50% discount voucher (see below) to offset the cost

Important: AWS sends reminders before expiration, but maintaining your certification is your responsibility. Expired certifications cannot be recertified; you'd need to take the exam fresh.

50% Discount on Next Exam

After passing any AWS certification, you receive a 50% discount voucher for your next exam. This applies to:

  • Any other AWS certification
  • The same certification (for recertification)

The voucher appears in your AWS Certification account's Benefits section. Use it strategically for expensive Professional ($300) or Specialty ($300) exams.

Next Certification Recommendations

With DevOps Professional under your belt, consider these paths:

Solutions Architect Professional: If you want to broaden your architecture skills. There's significant overlap with DevOps Professional, so the additional study is manageable.

Security Specialty: If you enjoyed the security content in DevOps Professional and want to go deeper. Your automation knowledge provides a strong foundation. See our Security Specialty exam guide.

Advanced Networking Specialty: If your role involves complex networking architectures. Less overlap with DevOps Professional, so expect more new learning.

Domain Cheat Sheets

These condensed notes cover the key points for each exam domain. Use them for quick review during your final preparation week.

Domain 1: SDLC Automation (22%)

AWS CodeBuild

  • Fully managed build service supporting CodeCommit, S3, GitHub, Bitbucket
  • Debug locally with CodeBuild agent
  • buildspec.yml defines build phases and commands

buildspec.yml structure:

AWS CodeBuild buildspec.yml build steps with explanation

AWS CodeDeploy

  • Deployment types: In-place, rolling, blue-green
  • Configurations: OneAtATime, HalfAtATime, AllAtOnce
  • CodeDeploy agent required on EC2 and on-premises instances
  • appspec.yml defines deployment lifecycle hooks

appspec.yml structure:

AWS CodeDeploy appspec.yml deployment steps with explanation

AWS CodePipeline

  • Orchestrates source, build, test, and deploy
  • Actions: Source (CodeCommit, S3, GitHub), Build (CodeBuild, Jenkins), Deploy (CodeDeploy, CloudFormation, Beanstalk), Invoke (Lambda), Approval (SNS)
  • Manual approval for production gates

Deployment Strategies

AWS DevOps Deployment strategies cheat sheet

New Services to Know

  • CodeArtifact: Managed artifact repository for npm, PyPI, Maven
  • Fault Injection Simulator: Chaos engineering for resilience testing
Domain 2: Configuration Management and IaC (17%)

AWS CloudFormation

  • Infrastructure as code in YAML or JSON
  • Version control, replicate, update templates like code
  • Integrated with CI/CD tools

Template anatomy:

AWSTemplateFormatVersion: "2010-09-09"
Description: String
Metadata: template metadata
Parameters: set of parameters
Mappings: set of mappings
Conditions: set of conditions
Transform: set of transforms
Resources: set of resources (REQUIRED)
Outputs: set of outputs

Stack update types:

TypeDescription
No interruptionNo disruption, same physical ID
Some interruptionSome disruption, same physical ID
ReplacementResource recreated, new physical ID

Helper scripts:

ScriptPurpose
cfn-initExecutes metadata, typically in user data
cfn-hupMonitors metadata, applies changes
cfn-signalSignals CreationPolicy or WaitCondition completion
cfn-get-metadataViews stack metadata

Resource attributes:

AttributePurpose
CreationPolicyWait for signal before marking complete
DeletionPolicyRetain or snapshot on stack delete
DependsOnExplicit resource ordering
UpdatePolicyHow to update AutoScaling groups

New IaC Tools

  • AWS CDK: Define infrastructure with programming languages
  • AWS SAM: Simplified serverless application deployment
  • AWS Proton: Platform engineering templates

Key Concepts

  • StackSets for multi-account, multi-region deployments
  • Drift detection for configuration compliance
  • Know when to use CloudFormation vs CDK vs SAM
Domain 3: Resilient Cloud Solutions (15%)

Key Concepts

  • Multi-AZ vs multi-region architectures
  • Implement HA, scalability, and fault tolerance
  • Design and automate disaster recovery
  • Evaluate deployments for points of failure

Amazon RDS High Availability

  • Cross-region snapshot copies for disaster recovery
  • Read replicas for cross-region failover
  • Asynchronous replication
  • ElastiCache in front of RDS for read offloading

DynamoDB High Availability

  • Global tables for multi-region data
  • Reduce latency for eventually consistent reads
  • On-demand capacity for bursty workloads

Disaster Recovery Strategies

StrategyRecovery TimeCostDescription
Backup & RestoreHoursLowestRestore from backups
Pilot Light10s of minutesLowCore systems running, scale up on failover
Warm StandbyMinutesMediumScaled-down replica, quick scale-up
Hot StandbySecondsHighestFull replica, instant failover

Know these definitions:

  • RPO (Recovery Point Objective): How much data loss is acceptable
  • RTO (Recovery Time Objective): How quickly must you recover

New Services

  • Resilience Hub: Assess application resilience
  • Elastic Disaster Recovery: Automated failover
Domain 4: Monitoring and Logging (15%)

Amazon CloudWatch

  • Collect metrics and logs
  • Monitor with alarms and dashboards
  • Act with Auto Scaling and EventBridge
  • Analyze trends and patterns

Key ELB metrics:

  • SurgeQueueLength: Backend can't keep up with requests
  • SpillOverCount: Requests dropped when queue is full

Key EC2 metrics:

  • StatusCheckFailed: Instance or system check failed
  • CPUCreditUsage/Balance: T-instance CPU credit tracking

HTTP status codes:

  • HTTPCode_Backend_5xx: Backend at capacity
  • HTTPCode_ELB_4xx: Connection timeouts

CloudWatch Logs

  • CloudWatch agent on instances/containers
  • Log events in log streams
  • Log streams grouped in log groups
  • Retention policies for cost management

Amazon Kinesis

  • Real-time streaming data for quick incident response
  • Data Streams: Real-time, more setup
  • Firehose: Fully managed, delivers to S3/Redshift/OpenSearch
  • Data Analytics: Real-time analysis

AWS CloudTrail

  • Track user activity and API usage
  • Enable in all regions
  • Enable log file validation and encryption
  • Integrate with CloudWatch Logs
  • Centralize logs from all accounts

New Services

  • Amazon Managed Grafana: Managed visualization
  • Amazon Managed Service for Prometheus: Managed metrics
  • X-Ray: Distributed tracing
Domain 5: Incident and Event Response (14%)

Key Concepts

  • Troubleshoot issues and restore operations
  • Automate healing and event-driven actions
  • Set up alerting and automated remediation

Logging Strategy

  • CloudWatch Logs agent for EC2/ECS
  • Centralize logging in a separate account
  • Use Kinesis Firehose to move logs to S3
  • Log comprehensively, retain for analysis

Elastic Beanstalk Configuration

  • CloudFormation supports Beanstalk
  • Supports: Tomcat, Apache/PHP/Python, Nginx/Apache/Node.js, Passenger/Ruby
  • Multi-AZ support (no multi-region)
  • .ebextensions for configuration

Auto Scaling Configuration

Lifecycle hooks:

  • Instances can pause in wait state (max 48 hours, default 1 hour)
  • Use for custom actions before launch/termination

Termination policies:

  • Default, AllocationStrategy, OldestLaunchTemplate
  • OldestLaunchConfiguration, ClosestToNextInstanceHour
  • NewestInstance, OldestInstance

CreationPolicy with cfn-signal:

  • Wait for instance configuration to complete
  • Signal success before moving to next resource

EventBridge (formerly CloudWatch Events)

  • Event-driven automation
  • Rules match events to targets
  • Schedule-based or event-based triggers
Domain 6: Security and Compliance (17%)

AWS IAM

  • Use roles instead of users when possible
  • Trust policy: Who can assume the role
  • Permission policy: What the role can do

Data Protection

  • S3 server-side encryption (SSE-S3, SSE-KMS, SSE-C)
  • EBS encryption (service-side or host)
  • Glacier encrypted by default
  • EFS supports KMS encryption

GuardDuty

  • Protects accounts and workloads
  • Monitors for suspicious activity
  • Custom threat lists and trusted IP lists
  • Analyzes: CloudTrail, VPC Flow Logs, DNS logs

AWS Config

  • Track resource configuration changes
  • Notifications and automatic remediation
  • Compliance monitoring and security analysis

Amazon Inspector

  • Agent-based vulnerability detection
  • Verifies security best practices
  • Add to CI/CD for EC2 security assessments
  • Lambda + EventBridge for automatic assessments

Systems Manager

  • Patch management with baselines
  • Run Command for remote execution
  • State Manager for configuration
  • Session Manager for secure shell access
  • Maintenance windows for scheduled tasks

Credential Storage

ServiceUse CaseFeatures
Parameter StoreConfiguration, secretsFree tier, KMS encryption
Secrets ManagerSecrets with rotationAutomatic rotation, higher cost
License ManagerLicense trackingWhere licenses are activated

AWS Trusted Advisor

Check categories (see Trusted Advisor reference):

  • Cost Optimization
  • Performance
  • Security
  • Fault Tolerance
  • Service Limits

Requires a support plan for full access.

Personal Health Dashboard

  • EC2 instance retirement/maintenance messages
  • Open issues, scheduled changes, notifications

Service Catalog

  • Managed catalogs of approved IT services
  • Limit access to underlying AWS services
  • Governance and compliance requirements
  • Self-service for approved resources

EC2 Instance Compliance

  • Golden AMIs with pre-defined configurations
  • Bootstrap with user data scripts
  • Configuration management (Puppet, Chef, Ansible, OpsWorks)

Frequently Asked Questions

How long does it really take to prepare?

With 2+ years of AWS experience and 10-15 hours per week of study, most people are ready in 6-10 weeks. Without significant AWS experience, expect 12-16 weeks.

Can I pass without Associate certifications?

Yes, but it's harder. If you skip Associates, add 4-6 weeks to your study timeline and focus on foundational concepts during the first weeks.

Is the exam harder than practice tests?

The real exam is comparable to Tutorials Dojo practice exams. AWS official practice exams may feel slightly easier. If you're scoring 85%+ on Tutorials Dojo, you're ready.

Do I need to memorize CloudFormation syntax?

Yes, especially intrinsic functions (!Ref, !GetAtt, !Sub, !Join), resource attributes (DependsOn, CreationPolicy), and helper scripts (cfn-init, cfn-signal). You won't have documentation available during the exam.

What if I run out of time?

Use the flag-and-guess strategy. Never leave questions blank. Even random guessing is better than no answer because there's no penalty for wrong answers.

Can I take notes during the exam?

No. Physical notes, scratch paper, and writing instruments are prohibited. The online exam provides a digital notepad you can use.

Online vs test center - which is better?

Personal preference. Online is convenient but requires strict environment setup. Test centers provide a controlled environment but require travel. Both have the same exam content and difficulty.

What's the difference between DOP-C01 and DOP-C02?

DOP-C02 is the current version (updated 2023). It emphasizes SDLC automation more heavily and includes newer services like CodeArtifact, Proton, and Fault Injection Simulator. Study for DOP-C02.


The AWS DevOps Engineer Professional certification is challenging, but achievable with structured preparation. Follow the 8-week study plan, build hands-on experience with the must-build projects, and take practice exams until you're consistently scoring 85%+.

Book your exam date today. That concrete deadline will keep you accountable throughout your preparation.

Have you taken the DOP-C02 exam? Share your experience in the comments below - your tips could help the next person preparing for this certification.

Get Production-Ready, SOC 2 Compliant AWS Accounts from Day One

We deploy AWS Landing Zones using infrastructure as code with pre-configured multi-account architecture, built-in security controls and guardrails including monitoring to stay in control of what happens so you can safely start deploying workloads immediately.

Share this article on ↓

Subscribe to our Newsletter

Join ---- other subscribers!