CertQuests
What is the AWS Developer Associate certification?
The AWS Certified Developer – Associate is the credential AWS designed for software developers who build, deploy, and maintain applications on AWS. Unlike the Solutions Architect – Associate (SAA-C03), which emphasizes infrastructure design decisions — how to architect a system across VPCs, load balancers, databases, and availability zones — the Developer Associate tests hands-on application development skills: writing code that integrates with AWS services via the SDK, building and deploying Lambda functions, managing DynamoDB data models at the application layer, and using the AWS developer toolchain (CodeCommit, CodeBuild, CodeDeploy, CodePipeline) to automate delivery pipelines.
The current exam version, DVA-C02, was launched in March 2023 and reflects AWS’s shift toward serverless-first application architectures. The exam was substantially updated from its predecessor (DVA-C01) to increase coverage of Lambda, API Gateway, DynamoDB, SQS, SNS, EventBridge, Step Functions, and AWS SAM (Serverless Application Model) — the services that underpin modern cloud-native application development. The DVA-C02 also introduced expanded coverage of AWS security for developers, particularly Cognito (user authentication), KMS (encryption), Secrets Manager, and IAM roles for services, reflecting the growing expectation that developers own security in their application code, not just in infrastructure.
In the AWS certification hierarchy, Developer Associate sits at the same tier as Solutions Architect Associate and SysOps Administrator Associate. It is a standalone credential — there is no prerequisite — but many developers pursue it after Cloud Practitioner as their first specialization, particularly those with an application development rather than infrastructure background. The DevOps Professional (DOP-C02) is the natural next step for those who want to advance to the professional tier on the developer and operations track.
Exam format and domains
DVA-C02 is administered at Pearson VUE testing centers and as an online proctored exam. The fee is $150 USD. The passing score is 720 out of 1000 on a scaled basis, consistent with other AWS Associate exams. The exam contains 65 questions to be answered in 130 minutes. Questions include multiple choice (single correct answer) and multiple response (two or more correct answers from five or more options). AWS includes 15 unscored questions used for future exam development — these are not identified during the exam, so all questions should be answered.
| Domain | Weight |
|---|---|
| 1. Development with AWS Services | 32% |
| 2. Security | 26% |
| 3. Deployment | 24% |
| 4. Troubleshooting and Optimization | 18% |
Domain 1: Development with AWS Services — 32%
This is the largest domain and covers the core AWS services that developers interact with daily. The primary focus is serverless application development: writing and configuring AWS Lambda functions (execution role, memory allocation, timeout, concurrency limits, provisioned concurrency), integrating Lambda with API Gateway (REST APIs vs. HTTP APIs, proxy integration vs. Lambda integration, request/response mapping templates), managing DynamoDB at the application layer (primary key design, query vs. scan operations, local and global secondary indexes, DynamoDB Streams, Conditional Writes, Transactions), and working with messaging services (SQS standard vs. FIFO queues, SQS visibility timeout and dead-letter queues, SNS topics and subscriptions, EventBridge event buses and rules).
Beyond serverless, Domain 1 also covers S3 for application development (presigned URLs for secure object access, S3 event notifications triggering Lambda, multipart upload for large objects, S3 Select for server-side data filtering), Elastic Beanstalk (deployment environments, configuration files in `.ebextensions`, blue/green deployments), and ECS and Fargate (task definitions, container port mappings, ECS task roles vs. execution roles, ECR for container image storage). The domain also covers application integration patterns: when to use SQS vs. SNS vs. EventBridge vs. Step Functions for different workflow orchestration requirements, and how to use AWS SDK clients correctly (including handling retries and exponential backoff for throttled API calls).
Domain 2: Security — 26%
Security is the second-largest domain and reflects DVA-C02’s strong emphasis on developer-owned security — the practices and AWS services that keep application code secure, rather than the network-perimeter and infrastructure security that appears more prominently in the SAA-C03. The domain centers on IAM for developers: the difference between IAM users, roles, and resource-based policies; how to configure IAM roles for Lambda functions and ECS tasks so that code running inside AWS services can call other AWS services without long-lived credentials; the principle of least privilege in the context of application permissions; and how to use IAM policy conditions (like `aws:RequestedRegion`, `s3:prefix`, `dynamodb:LeadingKeys`) to scope permissions tightly.
Amazon Cognito is heavily tested as the standard AWS solution for user authentication in applications. The exam tests the distinction between User Pools (user directory + authentication, issues JWT tokens) and Identity Pools (federated identity, exchanges tokens for temporary AWS credentials), and how the two work together in a typical web application flow. AWS Secrets Manager and Systems Manager Parameter Store are tested as the correct mechanisms for storing database credentials, API keys, and other secrets that application code needs at runtime — the exam expects candidates to know that hardcoding credentials in Lambda environment variables or application code is incorrect, and that Secrets Manager with automatic rotation is the recommended approach for credentials that rotate. KMS is tested in the context of encrypting DynamoDB data, S3 objects, SQS messages, and environment variables in Lambda; candidates must understand envelope encryption (KMS generates a data key, the data key encrypts the data, KMS encrypts the data key) and its implications for cost and throughput.
Domain 3: Deployment — 24%
The Deployment domain covers the AWS developer toolchain and infrastructure-as-code, with particular depth on AWS SAM (Serverless Application Model) and CloudFormation. AWS SAM is the primary focus for serverless deployments: the SAM template structure (`AWS::Serverless::Function`, `AWS::Serverless::Api`, `AWS::Serverless::SimpleTable`), the `sam build` / `sam deploy` workflow, SAM policy templates for common Lambda IAM patterns, and SAM local (`sam local invoke`, `sam local start-api`) for local testing of Lambda functions before deployment. CloudFormation is tested alongside SAM: stack creation and updates, change sets (previewing changes before applying them), rollback triggers, cross-stack references with `Outputs` and `ImportValue`, and the `cfn-init` helper scripts for EC2 instance bootstrapping.
The AWS CodePipeline ecosystem is tested as the delivery mechanism that ties development to deployment: CodeCommit (Git-compatible source repository hosted in AWS), CodeBuild (managed build service using `buildspec.yml` to define build phases, environment variables, and artifact output), CodeDeploy (deployment automation for EC2, Lambda, and ECS with in-place, rolling, blue/green, and canary deployment strategies), and CodePipeline (orchestrator that wires source, build, test, and deploy stages together). The exam tests how these services integrate — a typical pipeline question describes a scenario (e.g., a Lambda function that must be deployed with zero downtime using a canary release strategy) and asks which CodeDeploy deployment configuration or which combination of services implements it correctly. Elastic Beanstalk deployment policies (all-at-once, rolling, rolling with additional batch, immutable, blue/green) are also covered in this domain.
Domain 4: Troubleshooting and Optimization — 18%
The final domain covers observability and performance optimization for AWS applications. CloudWatch is the primary service tested: CloudWatch Logs (log groups, log streams, log retention policies, metric filters to create custom metrics from log patterns), CloudWatch Metrics (standard metrics for Lambda, DynamoDB, SQS, API Gateway; custom metrics from application code using the PutMetricData API), CloudWatch Alarms (threshold alarms, composite alarms, alarm actions like SNS notifications or Auto Scaling), and CloudWatch Dashboards for operational visibility. The exam also tests CloudWatch Logs Insights (query syntax for analyzing log data) and CloudWatch Evidently for feature flagging and A/B testing in production.
AWS X-Ray is the distributed tracing service most heavily tested in this domain. X-Ray is the AWS solution for tracking requests as they flow through distributed applications across Lambda, API Gateway, DynamoDB, SQS, and other services. The exam tests how to enable X-Ray tracing (for Lambda, enable active tracing in the function configuration; for API Gateway, enable X-Ray tracing on the stage; for SDK calls, wrap the AWS SDK client with the X-Ray SDK recorder), how to read service maps and traces in the X-Ray console to identify latency bottlenecks, and how to use annotations and metadata to add custom data to X-Ray trace segments. The domain also covers Lambda performance optimization: reducing cold start latency (using smaller deployment packages, using Lambda SnapStart for Java, using provisioned concurrency for latency-sensitive functions), and DynamoDB performance optimization (choosing the right partition key to avoid hot partitions, using DAX for read-heavy workloads, using DynamoDB Accelerator to cache results and reduce DynamoDB read capacity consumption).
DVA-C02 vs SAA-C03 vs DOP-C02: which AWS cert is right for you?
SAA-C03 — Solutions Architect Associate
Focus: Design highly available, cost-optimized, and secure AWS architectures. Depth: Infrastructure decisions — VPC design, load balancer selection, RDS vs. DynamoDB vs. Aurora tradeoffs, S3 storage classes, disaster recovery strategies. Target role: Cloud architect, solutions architect, DevOps engineer who owns infrastructure. Best if: You design AWS infrastructure and want the most widely recognized AWS credential — SAA-C03 is the single most-sought-after AWS cert in job postings.
DVA-C02 — Developer Associate
Focus: Build, deploy, and debug applications on AWS. Depth: Application development — Lambda code, DynamoDB data modeling, API Gateway configuration, CodePipeline setup, X-Ray tracing, Cognito authentication flows. Target role: Software developer, backend engineer, full-stack developer building on AWS. Best if: You write the application code that runs on AWS and want a credential that validates your developer-side AWS skills, not just infrastructure design.
DOP-C02 — DevOps Professional
Focus: Automate, monitor, and continuously deliver applications on AWS at scale. Depth: Advanced CI/CD pipeline design, infrastructure as code (CloudFormation, CDK), incident and event response, high availability patterns, governance at scale. Target role: Senior DevOps engineer, platform engineer, SRE. Best if: You hold DVA-C02 (or SAA-C03) and want to advance to the professional tier — DOP-C02 is one of only two Professional-tier AWS certifications and signals senior-level cloud automation expertise.
DVA-C02 and SAA-C03 have significant overlap in services covered (both test Lambda, DynamoDB, SQS, S3, IAM, CloudFormation) but the emphasis is different. SAA-C03 asks “which architecture pattern solves this business problem?” while DVA-C02 asks “how do you write the code and configure the service correctly?” Many developers pursue both, since the combination signals both design-level and implementation-level cloud competency. The DVA-C02 + SAA-C03 combination is particularly common in roles like “Senior Cloud Developer” or “Full-Stack Cloud Engineer.”
Key services to master for DVA-C02
The AWS developer certification track in 2026
AWS’s certification strategy continues to evolve, and DVA-C02 reflects several important 2026 trends in cloud-native application development. First, serverless is now the default: the DVA-C02 blueprint allocates substantially more coverage to Lambda, API Gateway, DynamoDB, SQS, SNS, and EventBridge than its predecessor did, reflecting the reality that most new AWS application workloads are being built serverless-first rather than EC2-first. Candidates who prepared for DVA-C01 primarily through EC2 and EBS experience will find DVA-C02 demands a deeper shift to serverless mental models.
Second, developer security is a first-class exam topic: the 26% weight given to the Security domain in DVA-C02 is higher than many candidates expect for a developer exam. This reflects industry-wide adoption of “shift left” security principles, where developers are expected to own authentication (Cognito), secrets management (Secrets Manager), encryption (KMS), and least-privilege IAM role design — not just write application logic and hand security off to a separate team. Organizations using AWS are increasingly requiring developers to demonstrate these skills, and DVA-C02’s blueprint makes this expectation explicit.
Third, AI/ML integration is entering developer workflows: while DVA-C02 does not specifically certify ML skills (the MLA-C01 Machine Learning Engineer Associate and ML Specialty cover those), developers in 2026 are increasingly expected to integrate AWS AI services — Amazon Bedrock for generative AI, Amazon Rekognition for image analysis, Amazon Comprehend for text analysis, Amazon Textract for document processing — into applications via the standard AWS SDK patterns that DVA-C02 already covers. Developers who pass DVA-C02 are well-positioned to extend their skills into AI-augmented application development without needing to understand the underlying model training infrastructure.
DVA-C02 is the credential that proves you can take an architecture diagram and turn it into working code on AWS. It tests the layer between “the architect designed this” and “it’s running in production.”
Salary impact and career outcomes
DVA-C02 is the most developer-facing of the AWS Associate credentials, and salary data from 2026 reflects a strong premium over non-certified peers. Cloud developers with DVA-C02 earn median base salaries of $95,000 to $135,000 in North American markets. Senior cloud engineers who hold DVA-C02 alongside SAA-C03 or DOP-C02 and have substantial hands-on experience (typically 3–7 years) reach $140,000 to $160,000, particularly in organizations where cloud-native development is a core competitive capability. The premium over comparable software engineering roles without cloud certification is typically 15–30%, reflecting the ongoing shortage of developers with hands-on AWS application development experience validated by credential.
The job titles most commonly associated with DVA-C02 in 2026 postings include: Cloud Application Developer, Backend Engineer (AWS), Serverless Engineer, Full-Stack Cloud Developer, AWS Solutions Developer, and DevOps Developer. The credential appears in job descriptions at companies ranging from AWS itself (for partner and professional services roles) to enterprise organizations digitally transforming their application portfolios, to cloud-native startups where developers are expected to own their full deployment pipeline on AWS. DVA-C02 is also a common stepping stone for developers targeting the AWS Certified DevOps Engineer – Professional (DOP-C02), which builds directly on the deployment and CI/CD knowledge DVA-C02 introduces.
Who should pursue DVA-C02 in 2026
Study approach and resources
AWS provides a free DVA-C02 exam guide at the AWS Certification site that lists the specific services and features that appear on the exam — reading this guide carefully is the single most important preparation step, because it shows exactly where the exam focuses. The recommended AWS training path is the Developing on AWS instructor-led course (3 days), which covers the Lambda, DynamoDB, API Gateway, SQS/SNS, Cognito, X-Ray, and CodePipeline content that the exam tests most heavily. AWS also offers a self-paced digital version of this course on AWS Skill Builder (subscription required).
For hands-on preparation, AWS Free Tier is sufficient for most DVA-C02 study scenarios. Candidates should focus practical time on: building a Lambda function triggered by API Gateway with DynamoDB as the data store (the canonical serverless stack), configuring a CodePipeline that deploys a Lambda function via SAM, enabling X-Ray on Lambda and API Gateway and reading the resulting service map, and setting up a Cognito User Pool and integrating it with an API Gateway authorizer. These four hands-on exercises cover the majority of DVA-C02’s highest-weight scenarios and build the operational intuition the exam tests.
DVA-C02’s most commonly failed areas are IAM for services (confusing execution roles vs. resource-based policies, and mixing up what the Lambda execution role controls vs. what a Cognito Identity Pool role controls), SQS visibility timeout behavior (candidates frequently misunderstand what happens when a message becomes visible again after timeout expires), and DynamoDB GSI vs. LSI constraints (LSIs must be defined at table creation and share the table’s partition key; GSIs can be added any time and use any attribute as a partition key). Targeted practice questions on these three areas catch the majority of gap candidates miss on the real exam.
AWS Skill Builder offers a free Official Practice Question Set for DVA-C02 (20 questions with explanations) and a paid Official Practice Exam (65 questions, full exam simulation). The practice question set is the starting point for understanding how the exam phrases questions and where your knowledge gaps are. AWS also offers a DVA-C02 Exam Prep Official Study Guide as a free digital resource aligned to all four exam domains.
Practice AWS developer questions free on CertQuests.
AWS Practice Questions →