- Domain 3 Overview: What "Deployment" Actually Covers
- CodeDeploy, CodePipeline, and CodeBuild in Depth
- Deployment Strategies You Must Compare Cold
- SAM, CloudFormation, and Infrastructure as Code
- Lambda Deployment Mechanics
- How Domain 3 Questions Are Actually Written
- A Domain-Aware Study Schedule
- Common Mistakes That Cost Points
- FAQ
- Domain 3 (Deployment) is 24% of the DVA-C02 exam, tested across 50 scored questions of 65 total.
- Expect deep CodeDeploy, CodePipeline, CodeBuild, SAM, and CloudFormation scenario questions, not memorization.
- Canary, linear, and all-at-once deployment configs for Lambda and ECS are a recurring exam theme.
- Unanswered questions count as incorrect, so eliminate wrong deployment strategies rather than skipping.
Domain 3 Overview: What "Deployment" Actually Covers
Domain 3, Deployment, makes up 24% of the DVA-C02 exam - the second-largest domain behind Development with AWS Services at 32%. If you're mapping out your prep across all four content areas, this domain sits right in the middle of the weighting, which means it deserves serious study time but shouldn't crowd out Domain 1 or Domain 2 (Security at 26%). For the full breakdown of how all four domains fit together, see the DVA-C02 Exam Domains 2026: Complete Guide to All 4 Content Areas.
Deployment on this exam is not about clicking "Deploy" in the console. AWS is testing whether you understand how code moves from a developer's commit to a running, production-safe application using AWS-native CI/CD tooling. That means CodeCommit-adjacent workflows, CodeBuild buildspecs, CodePipeline stage design, CodeDeploy deployment configurations, SAM templates, and CloudFormation stack behavior all show up as scenario-based multiple choice and multiple response questions.
CodeDeploy, CodePipeline, and CodeBuild in Depth
These three services form the backbone of Domain 3 and appear constantly in exam scenarios. Understanding what each one does - and where the boundaries between them lie - is non-negotiable.
AWS CodeDeploy
Candidates must know how CodeDeploy automates deployments to EC2/on-premises instances, Lambda, and ECS, including the AppSpec file structure and lifecycle event hooks.
- AppSpec.yml hooks: BeforeInstall, AfterInstall, ApplicationStart, ValidateService for EC2; different hooks for Lambda (BeforeAllowTraffic, AfterAllowTraffic)
- Deployment groups, deployment configurations, and rollback triggers on failed alarms
- In-place vs. blue/green deployments for EC2 and ECS
AWS CodePipeline
Expect questions on stage/action structure, artifact passing between stages, and manual approval actions.
- Source, Build, Test, and Deploy stage sequencing and parallel actions
- Integrating third-party source providers and triggering pipelines via EventBridge
- Cross-account and cross-region pipeline configurations
AWS CodeBuild
You need working knowledge of buildspec.yml phases and how build environments are configured.
- Phases: install, pre_build, build, post_build, and artifact definitions
- Environment variables, including Parameter Store and Secrets Manager references
- Build caching to speed up dependency installation
These CI/CD services also intersect heavily with Domain 1 topics like Lambda and API Gateway - if you haven't reviewed that material yet, the DVA-C02 Domain 1: Development with AWS Services (32%) - Complete Study Guide 2026 is worth reading alongside this one, since pipeline questions often deploy the exact resources covered there.
Deployment Strategies You Must Compare Cold
One of the most exam-tested skills in Domain 3 is being able to distinguish deployment strategies instantly, without re-reading definitions. AWS loves to present a business requirement ("minimize downtime," "shift traffic gradually," "roll back automatically on error rate spikes") and ask which strategy or configuration satisfies it.
| Strategy | How It Works | Typical Use Case |
|---|---|---|
| All-at-once | All instances/functions updated simultaneously | Dev/test environments, fastest but riskiest |
| Rolling | Updates in batches across instances | Balance speed and availability on EC2 |
| Canary | Small traffic percentage shifted first, then rest after a wait period | Lambda and API Gateway traffic shifting |
| Linear | Traffic shifted in equal increments at fixed intervals | Lambda deployments needing gradual rollout |
| Blue/Green | New environment stood up fully, traffic cut over, old environment retained for rollback | ECS and EC2 deployments requiring instant rollback |
For Lambda specifically, CodeDeploy supports named canary and linear configurations (e.g., Canary10Percent5Minutes, Linear10PercentEvery1Minute) tied to weighted alias traffic shifting. Memorizing a few of these exact naming patterns pays off directly on exam day, since questions sometimes ask you to pick the configuration that matches a stated rollout window.
Key Takeaway
If a scenario mentions "gradual traffic shifting with automatic rollback on CloudWatch alarm," the answer almost always involves CodeDeploy canary or linear deployment configs paired with Lambda aliases - not a manual API Gateway stage variable swap.
SAM, CloudFormation, and Infrastructure as Code
Infrastructure as Code is deeply embedded in Domain 3. You're expected to read and reason about CloudFormation templates and SAM templates, not just know they exist.
- CloudFormation fundamentals: stack creation, change sets, nested stacks, drift detection, and stack policies that prevent accidental resource updates or deletions.
- SAM (Serverless Application Model): transform syntax, SAM CLI commands (sam build, sam package, sam deploy), and how SAM simplifies Lambda/API Gateway/DynamoDB resource definitions compared to raw CloudFormation.
- SAM deployment traffic shifting: the AutoPublishAlias property combined with DeploymentPreference (Canary, Linear, AllAtOnce) settings inside a SAM template - this is a frequent, very specific exam target.
- Rollback behavior: what happens when a CloudFormation stack update fails and how automatic rollback interacts with change sets.
Lambda Deployment Mechanics
Because Lambda is central to Domain 1 as well, Domain 3 questions often layer deployment mechanics on top of it. Make sure you're comfortable with:
- Versions vs. aliases, and why aliases (not versions) are the target for traffic-shifting deployments
- Lambda deployment packages: .zip archives vs. container images, and size limits that affect packaging decisions
- Lambda layers for sharing dependencies across functions without bloating each deployment package
- Environment variable management across deployment stages (dev, test, prod) via separate aliases or separate function versions
This overlap between Domain 1 and Domain 3 is intentional - AWS designed the exam so that deployment knowledge reinforces development knowledge. If serverless deployment feels shaky, it's worth reviewing both this guide and the Domain 1 material together rather than in isolation.
How Domain 3 Questions Are Actually Written
DVA-C02 uses multiple choice (one correct answer) and multiple response (select two or three) formats. Domain 3 questions typically follow a pattern: a paragraph describing a team's current deployment process and a pain point, followed by "which solution requires the LEAST operational overhead" or "which approach meets the requirement with minimal code changes."
A few patterns worth internalizing:
- Scenarios that describe downtime concerns almost always point toward blue/green or canary deployments over all-at-once.
- Scenarios mentioning "automatic rollback" point toward CodeDeploy deployment configurations tied to CloudWatch alarms, not manual intervention.
- Scenarios about repeatable, version-controlled infrastructure point toward CloudFormation or SAM over manual console configuration or imperative CLI scripting.
- Scenarios about build environment customization point toward CodeBuild buildspec phases and custom Docker build images.
Since 15 of the 65 questions on the exam are unscored pretest items mixed in without identification, you won't know which questions "count." Treat every question - including any unfamiliar AI-assisted development or AI security items that AWS has signaled may appear as pretest content - with the same level of care. For a broader sense of how difficult this exam feels in practice, see How Hard Is the DVA-C02 Exam? Complete Difficulty Guide 2026.
A Domain-Aware Study Schedule
Generic study techniques like spaced repetition or timeboxed review sessions only help if they're pointed at the right material at the right time. Here's how to sequence Domain 3 within a broader multi-week plan without letting it dominate your schedule relative to its 24% weight.
CI/CD Service Fundamentals
- Build hands-on familiarity with CodePipeline stage design and CodeBuild buildspec files
- Deploy a sample app end-to-end through a pipeline to internalize artifact flow
CodeDeploy and Deployment Strategies
- Compare canary, linear, rolling, and blue/green configurations side by side
- Practice reading AppSpec.yml files and identifying lifecycle hooks
SAM and CloudFormation
- Write and modify a basic SAM template with a DeploymentPreference block
- Trigger a CloudFormation rollback intentionally to observe behavior
If you're building a full study plan rather than focusing on one domain, the DVA-C02 Study Guide 2026: How to Pass on Your First Attempt lays out a complete week-by-week structure across all four domains, including Domain 2's security topics and Domain 4's troubleshooting content.
Common Mistakes That Cost Points
- Confusing CodeDeploy deployment types with CodePipeline stages - CodeDeploy handles the actual instance/function update mechanics; CodePipeline orchestrates the overall workflow across services.
- Assuming versions can receive shifted traffic directly - only aliases support weighted traffic shifting in Lambda; versions are immutable snapshots.
- Overlooking rollback triggers - CodeDeploy rollback on alarm requires explicitly configuring a CloudWatch alarm and attaching it to the deployment group; it doesn't happen automatically by default.
- Treating SAM and raw CloudFormation as interchangeable in every scenario - SAM adds transform-specific shortcuts (like AutoPublishAlias) that plain CloudFormation templates don't have natively.
- Skipping buildspec.yml practice - candidates who've never written one often misidentify which phase (install, pre_build, build, post_build) a given command belongs in.
Practicing with realistic scenario-based questions on our AWS Developer Associate practice test platform is one of the fastest ways to surface these gaps before exam day, since the platform mirrors the multiple choice and multiple response format you'll see at the Pearson VUE test center or online proctored session.
FAQ
Domain 3 (Deployment) accounts for 24% of the exam. With 50 scored questions out of 65 total, that works out to roughly 12 scored questions on deployment topics, though the exact count can vary slightly between exam forms.
AWS lists no formal labs for this exam, and there's no prerequisite requirement, but AWS recommends at least one year of hands-on experience with AWS application development. Building and running an actual pipeline with CodeBuild and CodeDeploy will make scenario questions far easier to reason through than studying definitions alone.
Difficulty is subjective, but Domain 3 (24%) involves more moving parts across multiple CI/CD services, while Domain 2 (26%) focuses more on IAM, KMS, and Cognito concepts. Many candidates find Domain 3 harder due to the number of services that interact in a single scenario. See the DVA-C02 Domain 2: Security (26%) - Complete Study Guide 2026 for a direct comparison of topics.
Unanswered questions count as incorrect, and there's no separate penalty for guessing wrong. With 130 minutes for 65 questions, pace yourself so multi-service deployment scenarios don't eat disproportionate time - flag and move on if needed.
Yes. The certification is valid for 3 years and renews by passing the latest Developer - Associate exam or the AWS Certified DevOps Engineer - Professional exam, which builds heavily on deployment and CI/CD concepts covered here.