AWS Certified Developer Associate Exam Training DVA-C02

Set up a free-tier AWS account, enable multi-factor authentication, and configure a billing alarm as you learn IAM concepts like role-based and attribute-based access control and how to assume roles.

Learn how to create and manage AWS accounts with IAM users, groups, roles, and policies; avoid the root account and authenticate via the management console, CLI, or SDK.

Compare the free and paid AWS accounts, learn about $200 in credits and how the free tier works, then follow along to sign up and verify your root account.

Configure your AWS account with an IAM alias, enable IAM billing access, and create a $5 monthly budget with email alerts via CloudWatch Billing and Cost Explorer.

Explore how AWS identity and access management authenticates and authorizes users, groups, roles, and policies, and differentiate root from IAM users while using access keys and the security token service.

Create an iam user and an admins group, attach administrator access, and sign in to the management console as that user to explore group-based permissions and iam identity center options.

Explain IAM authentication methods and multi-factor authentication in AWS, including console access with username, password, and MFA, plus programmatic access via access keys for the CLI and API.

Set up multi-factor authentication for your AWS IAM user by using an authenticator app (Google Authenticator or Orphy), scanning a QR code, entering codes, and validating login with MFA.

Learn how AWS security token service issues short-lived credentials with session token via an EC2 instance profile and IAM role to access S3, using STS AssumeRole and a trust policy.

Explore role-based and attribute-based access control, showing how groups and tags grant least-privilege permissions through AWS managed policies and conditional policies.

learn to create an IAM user with no permissions, set up an EC2 full-access role, and enable a test user to switch roles with STS assume role for secure access.

Learn to install the AWS command line interface, configure credentials for secure access to AWS resources, navigate help and basic commands, and assume a role using the CLI.

Install the AWS CLI on Linux and Windows, with quick setup steps, verify installation with aws --version, and configure credentials to enable access to AWS services.

Configure the aws cli credentials for a user, generate and securely store access keys, and grant full ec2 and s3 permissions on linux and windows using aws configure.

Explore the AWS CLI with practical commands for EC2 and S3, including help, describe instances, bucket creation and removal, and file copy operations.

Learn how to assume an IAM role via the AWS CLI, configure profiles with role ARNs, and manage EC2 full access and S3 permissions.

Explore Amazon VPC, elastic load balancing, and EC2 as prerequisites, then create a custom VPC, launch EC2 instances, and deploy load balancers to scale for high availability.

Learn how Amazon VPC builds region-level, isolated networks with public and private subnets, route tables, gateways, NAT, and security controls via security groups and network ACLs.

Explore how Amazon EC2 delivers on-demand virtual servers in a VPC, with ENIs, subnets, availability zones, public and private connectivity, EBS storage, instance types, and high-performance networking options.

Learn to create a custom VPC from scratch and compare the VPC wizard approach, configuring public and private subnets across two availability zones, an internet gateway, and route tables.

Explore Amazon elastic block store and instant stores, comparing persistent network volumes with ephemeral host-attached storage, and learn to back up with snapshots to S3 and move across availability zones.

Launch two ec2 instances across two availability zones, create and attach a 10 gb ebs data volume, format and mount it to /data, then snapshot for cross-availability-zone reuse.

Understand Amazon elastic file system (efs), a Linux-only shared file system with regional and one-zone deployments, NFS connectivity, multiple storage classes, durability, and cross-region disaster recovery.

learn to create an Amazon elastic file system via CLI, launch instances across availability zones, mount the EFS with NFS, and enable encryption in transit with EFS tools.

Explore ec2 instance metadata and user data, compare v1 and v2, access via curl, view ami and ip details, and run base64-encoded scripts on first boot across Linux and Windows.

Learn by hands-on exploration of EC2 instance metadata and user data, configuring IMDS v1 and v2 with token-based authentication, and deploying a web page via a data-driven bash script.

Explain how access keys and IAM roles enable EC2 to access S3 resources via the AWS CLI. Show how STS-backed IAM roles avoid long-term credentials and secure credentials.

Connect to an EC2 instance, configure the AWS CLI with access keys, and demonstrate using an IAM role with S3 read-only access to provide temporary credentials.

Learn how Amazon EC2 auto scaling maintains availability and scales by launching or terminating instances in response to CloudWatch metrics, status checks, load balancer status, and scheduling.

Learn to create an auto scaling group for two EC2 instances across availability zones using a launch template and user data to install an Apache web server, with health checks.

Discover how Amazon elastic load balancing ensures high availability and fault tolerance by distributing traffic across EC2 instances, ECS containers, IP addresses, Lambda functions, or other load balancers.

Configure an application load balancer in front of an auto scaling group, using a dynamic target group to register instances across two availability zones and route traffic with health checks.

Create a dynamic scaling policy for the auto scaling group with target tracking by request count per target, scale across availability zones, and coordinate with the load balancer.

Create an auto scaling group and an application load balancer with the AWS CLI, using a launch template, subnets, target groups, and listeners.

Learn how a VPC isolates resources, uses route tables and internet gateways, and subnets; then explore EC2 basics with AMI, snapshots, and IAM roles, elastic load balancers and target groups.

Explore Amazon S3, an object-based storage system central to the exam, and examine how CloudFront caches media worldwide to boost performance and key exam settings.

Explore Amazon S3 as an object-based storage service with buckets and keys, accessed via http rest apis for put, get, and post, plus metadata and vpc private endpoints.

Explore Amazon S3 storage classes—Standard, Intelligent Tiering, Standard-IA, One Zone-IA, Glacier, and Glacier Deep Archive—and compare durability (11 nines), availability, latency, and archiving use cases that drive cost and access.

Learn to create and configure S3 buckets, manage objects, choose storage classes, enable encryption and versioning, and apply bucket policies to control public access and object sharing.

Learn how IAM policies, bucket policies, and ACLs control access to S3 buckets and objects, comparing identity-based and resource-based policies, their use cases, and the deny-first authorization process.

Explore S3 permissions and bucket policies by creating a test user, applying identity-based and bucket policies, and testing put, get, and delete object actions with deny overrides.

Explore S3 versioning to preserve and restore object versions, learn cross-region replication (CRR) and same-region replication across accounts, and manage lifecycle rules for transitions between storage classes and expirations.

Configure and test S3 replication between source and destination buckets in the same region or across regions. Enable versioning, set up an IAM role, and explore lifecycle rules.

Learn how multi-factor authentication protects Amazon S3 operations with MFA delete and MFA Protected API Access, including versioning requirements, bucket policies, and CLI usage.

Explore Amazon S3 encryption options: SSE-S3, SSE-KMS, SSE-C, and client-side encryption, and note that new uploads are encrypted by default.

Enforce S3 encryption with a KMS key by applying a bucket policy that denies put objects when x-amz-server-side-encryption is not aws:kms, and require the SSE header during upload.

Learn how to configure S3 event notifications to deliver object creation events to SNS, SQS, or Lambda, and verify via email notification using an SNS topic.

Create an S3 presigned URL to grant temporary access to a specific object without public bucket access. Generate with AWS S3 presign for a 3600-second expiry.

Enable server access logging for an S3 bucket by using a separate target bucket and optional prefix, and grant write access to the S3 log delivery group.

Learn how CORS enables browser requests between origins, define origins by DNS name, protocol, and port, and configure S3 CORS rules with allowed origins, methods, and headers.

Learn design patterns to optimize Amazon S3 performance, using parallelization across prefixes, S3 transfer acceleration, byte-range fetches, and caching with CloudFront or ElastiCache, and latest AWS SDKs.

Explore how Amazon CloudFront uses edge locations to cache content from origins like S3 or EC2, reducing latency with global distributions, path patterns, and cache policies.

Learn to secure content with CloudFront signed URLs and cookies, authenticate via Lambda, and enforce access through origin access identity and origin access control.

Configure CloudFront cache and behavior settings to route static website requests to the static website bucket, or jpg and pdf requests to their respective buckets via origin access control.

Discover how Amazon Route 53 handles DNS resolution, domain registration, hosted zones (private zones), health checks, and routing policies such as failover, geolocation, latency, multi value answer, and weighted routing.

Explore Amazon S3 basics: buckets, objects, encryption options, IAM and bucket policies, versioning, logging, and MFA delete; CloudFront caching and distributions, including signed URLs and signed cookies for secure access.

Explore AWS CloudFormation for infrastructure as code using template files to automate resource creation, and AWS Elastic Beanstalk as a PAAS environment for deploying code with EC2 instances and databases.

Explore infrastructure as code with AWS CloudFormation by defining resources in JSON or YAML templates, deploying stacks, using change sets, and leveraging stack sets for multi-account, multi-region deployments.

Learn to create and update AWS CloudFormation stacks using templates, including EC2 instances, security groups, volumes, and S3 buckets, and apply changes with change sets.

Create a nested stack using the AWS CLI and CloudFormation, linking VPC and subnet one and subnet two templates via S3 URLs.

Explore the key building blocks of CloudFormation templates, including resources, parameters, mappings, outputs, and conditions, and learn how intrinsic functions like Ref, Fn Get Att, and FindInMap drive runtime values.

Review a complex VPC template and deploy it with cloud formation to create a two AZ network with public and private subnets, an internet gateway, and route tables, with outputs.

Understand platform as a service with Aws Elastic Beanstalk, including code deployment by zip, and how Elastic Beanstalk manages environments, versions, auto scaling, and load balancing.

Create and deploy a web server Elastic Beanstalk application in AWS, using a sample app and the required service role and key pair, then monitor health and manage versions.

Explore advanced Elastic Beanstalk configuration with .eb extensions, including option_settings, resources, and files, and implement SSL/TLS via AWS Certificate Manager for HTTPS on load balancers.

Master infrastructure as code and PaaS with CloudFormation templates in json or yaml, orchestrating stacks, stack sets, and nested stacks, and deploying apps with Elastic Beanstalk.

Learn AWS lambda, a serverless service that runs code without managing servers, with triggers, synchronous and asynchronous invocation, versions and aliases, plus a brief AWS SAM overview.

Explore how serverless services enable event-driven architectures on AWS, connecting S3, Lambda, SQS, DynamoDB, and SNS via event notifications, with automatic scaling and cost efficiency.

Learn how AWS Lambda delivers serverless compute for event-driven tasks, triggering from sources like API Gateway, S3, SQS, or Kinesis, with automatic scaling and pay-per-use pricing.

Invoke lambda functions via console, function URL, HTTP/HTTPS, API, SDK, or CLI; choose synchronous or asynchronous, and use event source mappings and event notifications from S3, SQS, Kinesis, and DynamoDB.

Invoke lambda functions via the AWS CLI in CloudShell, test with payload.json, and compare synchronous (200) and asynchronous (202) invocations, observing lambda responses and CloudWatch logs.

Learn how Lambda versions capture code, dependencies, runtime, and settings as immutable artifacts identified by ARNs, and use aliases to route traffic and enable blue/green deployments.

Learn to manage AWS Lambda versions and aliases, publish and invoke specific versions or aliases, and route traffic with weighting to control deployments without changing application code.

Explore Lambda deployment packages, choosing container images or zip archives, configure environment variables and layers, and deploy via CLI or CloudFormation while observing region, size, and timeout limits.

Explore how to configure AWS Lambda environment variables for DB host, DB user, and DB pass in Python, reference them in code, and secure them with KMS encryption.

Configure lambda destinations and dead letter queues to route invocation records by success or failure for asynchronous and stream-based invocations, set retries, and send failed events to a dlq.

Explore AWS Lambda destinations and dead letter queues by simulating success and failure. Route results to SQS queues via asynchronous invocation and inspect the messages.

Explore how Lambda concurrency works with region quotas and throttling, including default limits and reserved and provisioned concurrency, auto scaling, and cost considerations.

Learn to monitor AWS Lambda with CloudWatch metrics and alarms, log execution data in CloudWatch logs, and trace requests with AWS X-Ray, including IAM permissions for logs and tracing.

Connect your lambda to a VPC private subnet via an ENI and enable internet access with a NAT gateway. Front the function with an Application Load Balancer to route requests.

Explore securing lambda functions with proper function execution role permissions, KMS-encrypted code and env vars, Secrets Manager, TLS, and code signing via AWS Signer to ensure trusted deployments.

Master best practices for Lambda development, such as separating the handler from core logic, reusing the execution environment, using environment variables, and limiting dependencies.

Explore AWS SAM to define Lambda functions, API endpoints, and DynamoDB tables with a shorthand YAML template, then package and deploy using sam package and sam deploy.

Explore running a simple AWS SAM hello world app in CloudShell. Build with sam init and deploy via sam deploy guided, observing Lambda and API Gateway outputs.

Deploy a simple file uploader from the serverless application repository, configure an S3 bucket, and observe the cloud formation deployment with lambda and API gateway resources.

Explore AWS Lambda and AWS SAM in a serverless setup, covering synchronous and asynchronous invocation, event source mappings, versioning, deployment packages, layers, environment variables, and best practices for scalable functions.

Explore Amazon DynamoDB, an AWS NoSQL database service, learning about tables, data, pricing, high performance, low latency, and RCUs and WCUs.

Explore Amazon DynamoDB, a fully managed, serverless NoSQL database that scales horizontally, uses tables with items and attributes, and supports global tables for multi-region replication.

Create and configure DynamoDB tables, set partition keys (and optional sort keys), choose on-demand or provisioned capacity, and add items with attributes to explore primary and composite keys.

Explore DynamoDB consistency models, including eventually and strongly consistent reads, and learn how transactions provide ACID, all-or-nothing operations across tables, and pay only for the reads or writes involved.

Explore DynamoDB capacity units, RCUs and WCUs, including provisioned and on-demand capacity, autoscaling, and how to calculate read and write requirements for different consistency and item sizes.

Explore DynamoDB performance and throttling, identifying hot keys, hot partitions, and large items, and apply remedies like uniform activity across partition keys, secondary indexes, exponential backoff, burst, and adaptive capacity.

Explore DynamoDB scan and query APIs, compare costs and consistency, and apply projection expressions and key-based filters to tailor results.

Practice using the DynamoDB scan API with the AWS CLI, populate the My Store table from mystore.json, and explore projection and filter expressions and item counts.

Master the DynamoDB query API to fetch items by key conditions more efficiently than scans, using partition key, sort key, and operators such as eq in cli and console.

Explore local and global secondary indexes in DynamoDB. LSIs share the partition key but use a different sort key, enabling faster queries, while GSIs provide alternative keys with projections.

Learn optimistic locking to prevent concurrent updates in DynamoDB and apply conditional updates using put, update, and delete operations with version checks and condition expressions.

Enable time to live on a DynamoDB table and configure an expiry attribute using unix epoch times to automatically expire items. It supports TTL-based data lifecycle.

Learn how DynamoDB streams capture time-ordered item modifications, store them for up to 24 hours with configurable view types, and trigger near real-time processing with lambda functions.

Increase DynamoDB read performance with DynamoDB Accelerator (DAX), a managed in-memory cache that delivers microsecond latency, compatible with DynamoDB API calls and reads only.

Explore DynamoDB global tables, a fully managed multi-region, multi-master database with asynchronous replication. Create replicas in multiple regions, read and write anywhere, and enable failover for high availability.

Create a global DynamoDB table across regions to enable multi-master replication, synchronizing changes between US East and US West as DynamoDB streams are enabled automatically.

Discover Amazon DynamoDB, a managed nosql service offering key-value and document storage with partitions across availability zones, low latency, dax acceleration, and support for transactions, streams, ttl, and global tables.

Explore AWS application integration services like SQS, SNS, EventBridge, Step Functions, and API gateway, and build APIs and microservices with event-driven architectures through hands-on practice.

Learn how the Amazon Simple Queue Service (SQS) decouples web and app tiers with pull-based messaging, standard versus FIFO queues, and dead-letter handling for reliable, scalable processing.

Explore creating standard and FIFO SQS queues, configure visibility timeout, delivery delay, retention, encryption, and access policies, then test send/receive and dead-letter queue workflows, including long vs short polling.

Explore how Amazon SNS enables a publisher/subscriber model with topics that push messages through multiple transport protocols to diverse subscribers. Compare push-based SNS with pull-based SQS and fan-out.

Create a simple serverless application using sns, sqs, and Lambda to process decoupled messages and log results in CloudWatch.

Orchestrate distributed applications with AWS Step Functions, building a visual workflow of Lambda invocations as a state machine using the Amazon States Language and the console.

Create and run a simple AWS Step Functions state machine using a hello world example, exploring templates, editing, executing, and viewing states like pass, choice, weight, and parallel.

Explore how Amazon EventBridge, a serverless event bus, routes state-change events from AWS and non-AWS sources through rules to targets like Lambda, Kinesis, or SNS, with EC2 termination triggering notifications.

Learn how to create an amazon eventbridge event bus and rule to trigger on ec2 instance state changes, using an sns topic and cloudtrail for notifications and data capture.

Amazon api gateway creates and publishes rest, http, and websocket APIs, integrates with Lambda, and supports OpenAPI definitions, offering edge-optimized, regional, and private deployment with authorization and throttling.

Learn the structure of an API with resources and methods, explore various integrations, and master mapping templates using velocity template language to map requests and responses.

Explore API gateway stages and deployments, how stage variables configure Lambda endpoints and aliases, and how Swagger or OpenAPI definitions are imported or exported, with caching and throttling.

Build a rest api with api gateway and a lambda proxy integration, creating a Python function that returns a personalized greeting based on input name, city, and time of day.

Master API gateway caching and throttling to optimize performance, including stage-level cache with TTL and encryption, and per-client and server-side throttling and usage plans.

Configure caching and throttling for an API stage to reduce calls and improve latency, including cache cluster, rate limiting, burst limits, optional AWS WAF Web ACL, and client certificates.

Learn how API gateway usage plans and API keys identify users, control access, differentiate basic and premium plans, and apply throttling and quotas to specific stages and methods.

Create and manage API keys and usage plans in Amazon API Gateway, configure throttling, rate limits, and quotas, and attach keys to stages for tiered customer access.

Design and deploy a simple microservice using API Gateway, AWS Lambda, and DynamoDB by creating permissions, a Lambda function, and a REST API to store items in a DynamoDB table.

Learn API Gateway access control with resource-based and identity-based policies, Lambda authorizers, and Cognito user pools to securely authorize API invocations.

Master application integration basics with SQS and SNS, API gateway options (REST, HTTP, WebSocket), authorization, deployments, and concepts like dead-letter queues, long polling, and event-driven AWS apps.

Learn how Amazon elastic container service (ECS), elastic Kubernetes service (EKS), and elastic container registry (ECR) enable running, managing, and storing Docker containers on AWS, serverless or with customizable infrastructure.

Learn how AWS elastic container service orchestrates docker containers with clusters, tasks, and services, using task definitions and images in ECR, with Fargate or EC2 options.

Compare ECS launch types: EC2 and Fargate, plus ECS Anywhere for on premises. Learn cost models, storage (EFS, EBS), and image registries (ECR, Docker Hub) with serverless versus control.

Assign IAM roles to ECS with an instance role for host and task roles for running tasks, enforcing least privilege; on Fargate rely on task roles in the task definition.

Explore ecs task placement strategies for ec2 launch time, including binpack, random, and spread, with constraints and cluster query language examples to prepare for the exam.

Scale Amazon ECS with service and cluster auto scaling, using capacity providers and target tracking, step, and scheduled policies guided by CloudWatch metrics.

Explore how an application load balancer uses container awareness to route port 80 traffic from a single listener to dynamic host ports across ECS instances, with nat gateway considerations.

Create an ECS cluster with the EC2 launch type and an auto scaling group of EC2 instances. Review the ECS agent setup, cloud formation deployment, and upcoming task launches.

Create an Engine X task definition for EC2 ECS with AWS VPC, 0.25 vCPU and 0.5 GB memory, on a two-instance cluster, and attach service with an application load balancer.

Explore Amazon elastic container registry, a fully managed registry integrated with ECS and EKS, supporting namespaces and docker v2 standards, with public and private repositories and push-pull workflows.

Build an AWS Fargate cluster and blue-green CI/CD pipeline behind an application load balancer. Create an Engine X image, push it to ECR, and prepare for code updates.

Create a Fargate cluster and service in a blue-green ci/cd pipeline, configure target groups, subnets, and security groups, and deploy the engine x image from ecr to ecs.

Explore Amazon Elastic Kubernetes Service (EKS), a managed Kubernetes implementation that runs on AWS or on premises for hybrid deployment, with scalable workloads and automated container orchestration.

Explore aws copilot’s command line to launch and manage containerized applications using infrastructure as code templates, deploying to ecs, fargate, or app runner in a hands-on demo.

Master Amazon ecs and eks exam topics, from Fargate and Docker containers to load balancing, task definitions, placement strategies, and auto scaling across ecs and eks environments.