Despite the "Developer" name, DVA-C02 barely asks you to think like a traditional programmer. You will see boto3 snippets and pseudocode, but nothing you compile. What it actually tests is whether you know which AWS service to call, with what configuration, and how that service behaves when something fails partway through. That distinction is the first thing candidates coming from a pure software background need to unlearn before they start practicing.
AWS scores this exam across four content domains, and the gap between the top and bottom domain is wide enough to change how you should budget your prep time.
Development with AWS Services, 32%. The largest domain by a clear margin. Covers writing and configuring Lambda functions, working with DynamoDB (partition keys, GSIs, conditional writes), interacting with S3, SQS, SNS, and Step Functions through SDKs, and understanding idempotency and retry behavior in distributed application code.
Security, 26%. Larger than Deployment, which surprises people who assume "developer" means the exam is mostly about writing and shipping code. Expect IAM policy evaluation logic, temporary credentials via STS, KMS envelope encryption, Secrets Manager versus Parameter Store, and Cognito user pools versus identity pools.
Deployment, 24%. CI/CD pipeline construction with CodePipeline, CodeBuild, and CodeDeploy, plus packaging and deploying applications with SAM and the Serverless Application Model's transform behavior in CloudFormation.
Troubleshooting and Optimization, 18%. Reading CloudWatch Logs and metrics to diagnose a failing Lambda function or a throttled DynamoDB table, and X-Ray tracing to find the actual bottleneck in a distributed call chain.
Development and Security alone account for 58% of your score. A candidate who spends equal time on all four domains is quietly under-preparing for the majority of the exam.
DVA-C02 is usually the first AWS credential a hands-on developer pursues, often right after Cloud Practitioner or sometimes skipping it entirely if they already write application code for a living. It attracts two distinct groups: software engineers moving from a traditional or on-prem background into cloud-native application work, and existing AWS users, such as QA engineers or junior cloud engineers, who want to formalize skills they already use day to day. It is less common among people whose job is primarily infrastructure or operations rather than writing application code that runs on AWS services; that audience tends to gravitate toward SysOps Administrator Associate instead.
The official DVA-C02 exam runs 130 minutes for 65 questions, a mix of multiple choice and multiple response, with 50 questions scored and 15 unscored pretest items you cannot distinguish from the rest. Scoring is scaled from 100 to 1,000, and 720 is the passing mark. The exam fee is 150 USD, roughly half the cost of a Professional-level exam, and it is delivered through Pearson VUE at a test center or via online proctoring.
Unanswered questions are scored as incorrect, so guessing on a question you are unsure of always beats leaving it blank. Where candidates actually lose time is in questions that describe a Lambda function's behavior under concurrency limits or a DynamoDB table hitting throttling, then ask which configuration change fixes it. These require you to reason about runtime behavior rather than recall a definition, and rereading the scenario twice under time pressure is often faster than guessing on the first pass.
Work through DVA-C02 questions in domain-sized blocks rather than randomly, and check your score per domain before moving to the next set. Because Development and Security carry more than half the scoring weight, a shaky score in either one has a bigger effect on your overall result than the same shakiness in Troubleshooting.
When a question gives you a Lambda configuration (memory, timeout, concurrency, environment variables) and asks what will happen, resist the urge to answer from memory of "how Lambda generally works." Walk through the specific numbers given, since the exam frequently sets a trap where the general behavior and the behavior under the stated configuration differ.
For Security domain questions, read the IAM policy statement in full before jumping to the answer choices. A single explicit Deny buried in a policy, or a missing condition key, is usually the entire point of the question.
Confusing Secrets Manager with Systems Manager Parameter Store is one of the most common errors, since both store configuration values but differ in rotation support, pricing, and integration patterns. The exam expects you to know when each is the right choice, not just that both exist.
Another recurring mistake is misjudging DynamoDB capacity behavior, particularly the difference between on-demand and provisioned capacity, and how a hot partition causes throttling even when the table's overall provisioned throughput looks sufficient on paper.
A third is underestimating how much of the Deployment domain is about SAM and CloudFormation transforms rather than CodeDeploy alone. Candidates who only study CodeDeploy hooks and skip SAM template syntax tend to lose points on Deployment questions they assumed they had covered If you're preparing for another certification, try our AIP-C01 practice exam practice test.
Build a small serverless application end to end: an API Gateway endpoint backed by Lambda, reading and writing to DynamoDB, with a SAM template deploying the whole stack through a CodePipeline. Doing this once will teach you more about how the four domains connect than reading about each service in isolation, because DVA-C02 questions frequently blend a Development concept with a Security or Deployment twist in the same scenario.
Read the actual IAM policy evaluation logic documentation rather than relying on a summary of it. Questions on explicit deny, implicit deny, and policy evaluation order are common enough that memorizing the flowchart pays off directly.
Practice reading CloudWatch Logs Insights query syntax, since a handful of Troubleshooting questions describe a log query and ask what it returns or how to fix it, rather than only asking what CloudWatch is used for.
Run through the practice questions below by domain, note where your accuracy drops below roughly 75%, and go back to AWS's own documentation for that specific service rather than a general study guide. Once you can consistently explain not just the right answer but why the other three options fail under the exact configuration given in the question, you are testing at the level DVA-C02 expects.
Last updated on Oct, 9 2026
