DVA-C02 logo
Focused certification exam prep
Start practice

DVA-C02 Domain 3: Deployment (24%) - Complete Study Guide 2026

TL;DR
  • Domain 3 (Deployment) is 24% of the DVA-C02 exam, tested across 50 scored questions of 65 total.
  • Expect deep CodeDeploy, CodePipeline, CodeBuild, SAM, and CloudFormation scenario questions, not memorization.
  • Canary, linear, and all-at-once deployment configs for Lambda and ECS are a recurring exam theme.
  • Unanswered questions count as incorrect, so eliminate wrong deployment strategies rather than skipping.

Domain 3 Overview: What "Deployment" Actually Covers

Domain 3, Deployment, makes up 24% of the DVA-C02 exam - the second-largest domain behind Development with AWS Services at 32%. If you're mapping out your prep across all four content areas, this domain sits right in the middle of the weighting, which means it deserves serious study time but shouldn't crowd out Domain 1 or Domain 2 (Security at 26%). For the full breakdown of how all four domains fit together, see the DVA-C02 Exam Domains 2026: Complete Guide to All 4 Content Areas.

Deployment on this exam is not about clicking "Deploy" in the console. AWS is testing whether you understand how code moves from a developer's commit to a running, production-safe application using AWS-native CI/CD tooling. That means CodeCommit-adjacent workflows, CodeBuild buildspecs, CodePipeline stage design, CodeDeploy deployment configurations, SAM templates, and CloudFormation stack behavior all show up as scenario-based multiple choice and multiple response questions.

Why This Domain Trips People Up: Domain 3 questions frequently combine two or three services in one scenario - for example, a CodePipeline stage that triggers CodeBuild, which then hands off to CodeDeploy with a canary deployment config. You need fluency across the whole pipeline, not isolated service knowledge.

CodeDeploy, CodePipeline, and CodeBuild in Depth

These three services form the backbone of Domain 3 and appear constantly in exam scenarios. Understanding what each one does - and where the boundaries between them lie - is non-negotiable.

AWS CodeDeploy

Candidates must know how CodeDeploy automates deployments to EC2/on-premises instances, Lambda, and ECS, including the AppSpec file structure and lifecycle event hooks.

  • AppSpec.yml hooks: BeforeInstall, AfterInstall, ApplicationStart, ValidateService for EC2; different hooks for Lambda (BeforeAllowTraffic, AfterAllowTraffic)
  • Deployment groups, deployment configurations, and rollback triggers on failed alarms
  • In-place vs. blue/green deployments for EC2 and ECS

AWS CodePipeline

Expect questions on stage/action structure, artifact passing between stages, and manual approval actions.

  • Source, Build, Test, and Deploy stage sequencing and parallel actions
  • Integrating third-party source providers and triggering pipelines via EventBridge
  • Cross-account and cross-region pipeline configurations

AWS CodeBuild

You need working knowledge of buildspec.yml phases and how build environments are configured.

  • Phases: install, pre_build, build, post_build, and artifact definitions
  • Environment variables, including Parameter Store and Secrets Manager references
  • Build caching to speed up dependency installation

These CI/CD services also intersect heavily with Domain 1 topics like Lambda and API Gateway - if you haven't reviewed that material yet, the DVA-C02 Domain 1: Development with AWS Services (32%) - Complete Study Guide 2026 is worth reading alongside this one, since pipeline questions often deploy the exact resources covered there.

Deployment Strategies You Must Compare Cold

One of the most exam-tested skills in Domain 3 is being able to distinguish deployment strategies instantly, without re-reading definitions. AWS loves to present a business requirement ("minimize downtime," "shift traffic gradually," "roll back automatically on error rate spikes") and ask which strategy or configuration satisfies it.

StrategyHow It WorksTypical Use Case
All-at-onceAll instances/functions updated simultaneouslyDev/test environments, fastest but riskiest
RollingUpdates in batches across instancesBalance speed and availability on EC2
CanarySmall traffic percentage shifted first, then rest after a wait periodLambda and API Gateway traffic shifting
LinearTraffic shifted in equal increments at fixed intervalsLambda deployments needing gradual rollout
Blue/GreenNew environment stood up fully, traffic cut over, old environment retained for rollbackECS and EC2 deployments requiring instant rollback

For Lambda specifically, CodeDeploy supports named canary and linear configurations (e.g., Canary10Percent5Minutes, Linear10PercentEvery1Minute) tied to weighted alias traffic shifting. Memorizing a few of these exact naming patterns pays off directly on exam day, since questions sometimes ask you to pick the configuration that matches a stated rollout window.

Key Takeaway

If a scenario mentions "gradual traffic shifting with automatic rollback on CloudWatch alarm," the answer almost always involves CodeDeploy canary or linear deployment configs paired with Lambda aliases - not a manual API Gateway stage variable swap.

SAM, CloudFormation, and Infrastructure as Code

Infrastructure as Code is deeply embedded in Domain 3. You're expected to read and reason about CloudFormation templates and SAM templates, not just know they exist.

  • CloudFormation fundamentals: stack creation, change sets, nested stacks, drift detection, and stack policies that prevent accidental resource updates or deletions.
  • SAM (Serverless Application Model): transform syntax, SAM CLI commands (sam build, sam package, sam deploy), and how SAM simplifies Lambda/API Gateway/DynamoDB resource definitions compared to raw CloudFormation.
  • SAM deployment traffic shifting: the AutoPublishAlias property combined with DeploymentPreference (Canary, Linear, AllAtOnce) settings inside a SAM template - this is a frequent, very specific exam target.
  • Rollback behavior: what happens when a CloudFormation stack update fails and how automatic rollback interacts with change sets.
Practical Tip: Practice reading a short SAM template with a DeploymentPreference block and identifying what percentage of traffic shifts and when. AWS frequently tests comprehension of a snippet rather than asking you to write one from scratch.

Lambda Deployment Mechanics

Because Lambda is central to Domain 1 as well, Domain 3 questions often layer deployment mechanics on top of it. Make sure you're comfortable with:

  • Versions vs. aliases, and why aliases (not versions) are the target for traffic-shifting deployments
  • Lambda deployment packages: .zip archives vs. container images, and size limits that affect packaging decisions
  • Lambda layers for sharing dependencies across functions without bloating each deployment package
  • Environment variable management across deployment stages (dev, test, prod) via separate aliases or separate function versions

This overlap between Domain 1 and Domain 3 is intentional - AWS designed the exam so that deployment knowledge reinforces development knowledge. If serverless deployment feels shaky, it's worth reviewing both this guide and the Domain 1 material together rather than in isolation.

How Domain 3 Questions Are Actually Written

DVA-C02 uses multiple choice (one correct answer) and multiple response (select two or three) formats. Domain 3 questions typically follow a pattern: a paragraph describing a team's current deployment process and a pain point, followed by "which solution requires the LEAST operational overhead" or "which approach meets the requirement with minimal code changes."

A few patterns worth internalizing:

  1. Scenarios that describe downtime concerns almost always point toward blue/green or canary deployments over all-at-once.
  2. Scenarios mentioning "automatic rollback" point toward CodeDeploy deployment configurations tied to CloudWatch alarms, not manual intervention.
  3. Scenarios about repeatable, version-controlled infrastructure point toward CloudFormation or SAM over manual console configuration or imperative CLI scripting.
  4. Scenarios about build environment customization point toward CodeBuild buildspec phases and custom Docker build images.

Since 15 of the 65 questions on the exam are unscored pretest items mixed in without identification, you won't know which questions "count." Treat every question - including any unfamiliar AI-assisted development or AI security items that AWS has signaled may appear as pretest content - with the same level of care. For a broader sense of how difficult this exam feels in practice, see How Hard Is the DVA-C02 Exam? Complete Difficulty Guide 2026.

Scoring Reminder: There's no penalty for guessing beyond the question being marked wrong if left blank, so never leave a Domain 3 question unanswered - eliminate at least one obviously wrong deployment strategy and guess among the rest.

A Domain-Aware Study Schedule

Generic study techniques like spaced repetition or timeboxed review sessions only help if they're pointed at the right material at the right time. Here's how to sequence Domain 3 within a broader multi-week plan without letting it dominate your schedule relative to its 24% weight.

Week 3

CI/CD Service Fundamentals

  • Build hands-on familiarity with CodePipeline stage design and CodeBuild buildspec files
  • Deploy a sample app end-to-end through a pipeline to internalize artifact flow
Week 4

CodeDeploy and Deployment Strategies

  • Compare canary, linear, rolling, and blue/green configurations side by side
  • Practice reading AppSpec.yml files and identifying lifecycle hooks
Week 5

SAM and CloudFormation

  • Write and modify a basic SAM template with a DeploymentPreference block
  • Trigger a CloudFormation rollback intentionally to observe behavior

If you're building a full study plan rather than focusing on one domain, the DVA-C02 Study Guide 2026: How to Pass on Your First Attempt lays out a complete week-by-week structure across all four domains, including Domain 2's security topics and Domain 4's troubleshooting content.

Common Mistakes That Cost Points

  • Confusing CodeDeploy deployment types with CodePipeline stages - CodeDeploy handles the actual instance/function update mechanics; CodePipeline orchestrates the overall workflow across services.
  • Assuming versions can receive shifted traffic directly - only aliases support weighted traffic shifting in Lambda; versions are immutable snapshots.
  • Overlooking rollback triggers - CodeDeploy rollback on alarm requires explicitly configuring a CloudWatch alarm and attaching it to the deployment group; it doesn't happen automatically by default.
  • Treating SAM and raw CloudFormation as interchangeable in every scenario - SAM adds transform-specific shortcuts (like AutoPublishAlias) that plain CloudFormation templates don't have natively.
  • Skipping buildspec.yml practice - candidates who've never written one often misidentify which phase (install, pre_build, build, post_build) a given command belongs in.

Practicing with realistic scenario-based questions on our AWS Developer Associate practice test platform is one of the fastest ways to surface these gaps before exam day, since the platform mirrors the multiple choice and multiple response format you'll see at the Pearson VUE test center or online proctored session.

FAQ

How many Domain 3 questions will I see on the DVA-C02 exam?

Domain 3 (Deployment) accounts for 24% of the exam. With 50 scored questions out of 65 total, that works out to roughly 12 scored questions on deployment topics, though the exact count can vary slightly between exam forms.

Do I need hands-on CodePipeline experience to pass Domain 3?

AWS lists no formal labs for this exam, and there's no prerequisite requirement, but AWS recommends at least one year of hands-on experience with AWS application development. Building and running an actual pipeline with CodeBuild and CodeDeploy will make scenario questions far easier to reason through than studying definitions alone.

Is Domain 3 harder than the Security domain?

Difficulty is subjective, but Domain 3 (24%) involves more moving parts across multiple CI/CD services, while Domain 2 (26%) focuses more on IAM, KMS, and Cognito concepts. Many candidates find Domain 3 harder due to the number of services that interact in a single scenario. See the DVA-C02 Domain 2: Security (26%) - Complete Study Guide 2026 for a direct comparison of topics.

What happens if I run out of time before answering all Domain 3 questions?

Unanswered questions count as incorrect, and there's no separate penalty for guessing wrong. With 130 minutes for 65 questions, pace yourself so multi-service deployment scenarios don't eat disproportionate time - flag and move on if needed.

Does passing Domain 3 knowledge help with recertification later?

Yes. The certification is valid for 3 years and renews by passing the latest Developer - Associate exam or the AWS Certified DevOps Engineer - Professional exam, which builds heavily on deployment and CI/CD concepts covered here.

Ready to pass your DVA-C02 exam?

Put this into practice with free DVA-C02 questions across every exam domain.