The AWS Certified DevOps Engineer Professional exam is the credential most cloud engineers want and most of them put off. It is not because the syllabus is unfamiliar. It is because DOP-C02 stops asking you what a service does and starts asking you which of four workable designs an experienced engineer would actually ship. That shift catches people out, and it is the reason a plan built around watching a video course rarely survives contact with the real thing.
This guide gives you a 12-week study plan for the AWS Certified DevOps Engineer Professional certification, mapped to the six official DOP-C02 domains and weighted the way the exam is weighted. It covers what the exam really tests, how hard it is compared with the associate exams you have already passed, the services that carry the most marks, and how to read a three-paragraph scenario without burning eight minutes on it.
What the DOP-C02 Exam Actually Tests
AWS Certified DevOps Engineer Professional validates your ability to provision, operate and manage distributed application systems on AWS. In practice that means automation. Almost every question is really asking how you would remove a human from a process while keeping the process auditable.
Here are the exam facts you need before you plan anything:
| Detail | DOP-C02 |
|---|---|
| Exam cost | $300 USD |
| Duration | 180 minutes |
| Questions | 75 (65 scored, 10 unscored) |
| Question types | Multiple choice and multiple response |
| Passing score | 750 out of a scaled 100 to 1,000 |
| Delivery | Pearson VUE test centre or online proctored |
| Languages | English, Japanese, Korean, Simplified Chinese |
| Validity | 3 years |
| Recommended experience | 2 or more years provisioning, operating and managing AWS environments |
Exam Tip: The 10 unscored questions are not marked or identified, so you cannot tell which ones they are. Never assume a question you find bizarre is one of the unscored items. Answer everything as though it counts.
The six domains and their weights
The DOP-C02 blueprint splits into six domains. The weights matter enormously, because they tell you where your study hours should go.
| Domain | Weight |
|---|---|
| 1. SDLC Automation | 22% |
| 2. Configuration Management and Infrastructure as Code | 17% |
| 3. Resilient Cloud Solutions | 15% |
| 4. Monitoring and Logging | 15% |
| 5. Incident and Event Response | 14% |
| 6. Security and Compliance | 17% |
Notice that no single domain dominates. That is unusual, and it is a trap. There is no domain you can safely skip and still scrape 750. Domain 1 is the largest at 22%, but domains 2 and 6 combined are 34%, which means infrastructure as code and compliance automation together outweigh the pipeline content people traditionally cram.
Who Should Sit AWS Certified DevOps Engineer Professional
There is no formal prerequisite. AWS removed the requirement to hold an associate certification first, so you can book DOP-C02 today with nothing else on your Credly profile.
That does not mean you should. The exam assumes fluency you are meant to have absorbed already. You will be expected to read a CloudFormation snippet without pausing, know what an IAM condition key does, and understand VPC networking well enough that the exam does not bother explaining it.
You are ready to start this plan if you can honestly say yes to most of these:
- You have deployed something to AWS that other people depend on.
- You have written or heavily modified infrastructure as code, in CloudFormation, the CDK or Terraform.
- You have debugged a failing CI/CD pipeline without following a tutorial.
- You understand IAM roles, trust policies and assumed-role sessions.
- You have looked at CloudWatch Logs to work out why something broke.
If two or three of those are shaky, add four weeks of hands-on work before week one, or sit an associate exam first. Our AWS Solutions Architect Associate study plan and AWS CloudOps Engineer Associate plan both make sensible stepping stones, and the CloudOps material overlaps heavily with DOP-C02 domains 4 and 5.
How Hard Is DOP-C02, Really?
Harder than any associate exam, and easier than Solutions Architect Professional for most people. The reason is scope. SAP-C02 asks you to hold an entire multi-account enterprise in your head. DOP-C02 keeps the scope tighter but goes deeper, and it punishes surface knowledge ruthlessly.
Here is how the professional exams compare in practice:
| Exam | Questions | Time | What makes it hard |
|---|---|---|---|
| DOP-C02 (DevOps Pro) | 75 | 180 min | Deep service configuration detail, long scenarios, automation nuance |
| SAP-C02 (Solutions Architect Pro) | 75 | 180 min | Enormous breadth, multi-account and hybrid architecture, migration strategy |
| SCS-C03 (Security Specialty) | 65 | 170 min | Narrow but very deep, heavy IAM policy evaluation |
The specific difficulty of DOP-C02 is question length. An associate question is often two sentences. A DOP-C02 question is regularly three paragraphs describing a company, its current pipeline, a business constraint and a failure it wants to prevent. Four answers follow, and typically two of them genuinely work. You are being asked which one works with the least operational overhead.
Exam Tip: When two answers both solve the problem, pick the one using more AWS managed services and less custom code. A solution built on EventBridge and Systems Manager beats one built on a cron job on an EC2 instance, almost every time.
Monitoring and compliance automation are the two areas candidates consistently underestimate. People arrive confident on CodePipeline and get quietly destroyed by AWS Config rules, Systems Manager Automation documents and cross-account log aggregation.
The 12-Week Study Plan for AWS Certified DevOps Engineer Professional
This plan assumes 8 to 10 hours a week. That is roughly 100 to 120 hours total, which is a realistic figure for someone already working in cloud. If you can only manage five hours a week, run it over 18 weeks rather than compressing it.
The plan runs in four phases: foundations, core domains, hard domains, and consolidation.
Weeks 1 to 3: Foundations and SDLC Automation (Domain 1)
This is the biggest domain at 22%, and the one closest to daily DevOps work, so it makes an encouraging start.
Week 1. Read the official DOP-C02 exam guide end to end and write down every service named in it. That list is your syllabus. Then build a CodePipeline that pulls from CodeCommit or GitHub, builds with CodeBuild and deploys to a small application. Break it deliberately and read the failure.
Week 2. Deployment strategies. Learn the difference between blue/green, canary and linear deployments, and know exactly which service implements each. CodeDeploy deployment configurations, ECS blue/green via CodeDeploy, and Lambda alias traffic shifting are all heavily examinable. Understand deployment hooks and automatic rollback triggers.
Week 3. Artefacts and testing. CodeArtifact, ECR image scanning, build caching, and how to run integration tests inside a pipeline stage. Learn how manual approval actions and cross-account pipeline deployments work.
Weeks 4 to 6: Infrastructure as Code and Configuration Management (Domain 2)
17% of the exam, and the domain that separates people who write templates from people who only read them.
Week 4. CloudFormation in depth. Nested stacks, StackSets, change sets, drift detection, custom resources, and the full set of intrinsic functions. Know what DeletionPolicy and UpdateReplacePolicy do, and when a stack update replaces a resource rather than modifying it.
Week 5. Systems Manager. This is the sleeper topic of DOP-C02. State Manager, Patch Manager, Automation documents, Parameter Store, Session Manager and inventory all appear. Build an Automation document that remediates something, because the exam loves that pattern.
Week 6. The CDK, Elastic Beanstalk and OpsWorks-style configuration management, plus AMI pipelines with EC2 Image Builder. Understand golden AMI workflows versus configuration-at-boot with user data.
Exam Tip: If a scenario mentions enforcing a standard across many accounts or regions, the answer usually involves CloudFormation StackSets with AWS Organizations, not a script that loops through accounts.
Weeks 7 to 9: Monitoring, Logging and Incident Response (Domains 4 and 5)
Together these are 29% of the exam, and they are where most failed attempts leak marks.
Week 7. CloudWatch properly. Metric filters, embedded metric format, composite alarms, anomaly detection, CloudWatch Logs Insights queries, and subscription filters that stream logs to Kinesis Data Firehose or Lambda. Know the difference between a metric filter and a subscription filter cold.
Week 8. Centralised logging and tracing. Cross-account log aggregation patterns, log retention and archival to S3, X-Ray for distributed tracing, and CloudTrail organisation trails. Understand which service you reach for when the question says "across all accounts".
Week 9. Event-driven response. EventBridge rules and buses, SNS and SQS patterns, Lambda-based auto-remediation, Auto Scaling lifecycle hooks, and Systems Manager Incident Manager. Practise designing a response to a specific event, because that is the exact shape of a domain 5 question.
Weeks 10 to 11: Security, Compliance and Resilience (Domains 6 and 3)
Week 10. Security and compliance automation, 17%. AWS Config rules and conformance packs, Security Hub, GuardDuty, Inspector, Macie, Secrets Manager rotation, and IAM policy evaluation including permission boundaries and service control policies. If you have taken the security specialty this week is a review. If not, treat it as the hardest week in the plan. Our AWS Security Specialty study plan covers the IAM evaluation logic in more depth than DOP-C02 requires, which is useful if the policy questions are throwing you.
Week 11. Resilient cloud solutions, 15%. Multi-AZ and multi-region designs, RTO and RPO trade-offs, Route 53 routing policies and health checks, Auto Scaling policies, RDS read replicas and failover, and DynamoDB global tables. Be able to match a stated RTO to a specific architecture pattern.
Week 12: Consolidation and Timed Practice
Do not learn anything new this week. Sit full 75-question timed practice exams, review every wrong answer until you can explain why the correct option wins, and revisit your weakest two domains.
The review is the part that matters. A practice exam you take and do not analyse is worth almost nothing. For every question you get wrong, write one sentence explaining the distinguishing feature you missed. That sentence is what you will actually recall in the exam.
Exam Tip: Aim for a consistent 80% or better on realistic practice questions before you book. The 750 pass mark is not 75%, because scoring is scaled, but 80% on quality practice material is a reasonable proxy for readiness.
The Services That Carry the Most Marks
If you are short of time, weight your revision towards these. They appear across multiple domains, which means every hour spent on them pays twice.
- CloudFormation. Appears in domains 1, 2, 3 and 6. The single highest-value service on the exam.
- Systems Manager. Automation, State Manager, Patch Manager and Parameter Store span configuration, security and incident response.
- CloudWatch. Metrics, alarms, Logs Insights and subscription filters underpin the whole of domains 4 and 5.
- EventBridge. The glue in nearly every auto-remediation answer.
- CodePipeline, CodeBuild and CodeDeploy. The backbone of domain 1, with deployment configurations especially examinable.
- AWS Config. Detective controls and conformance packs dominate compliance scenarios.
- IAM and Organizations. Cross-account access, permission boundaries and service control policies appear everywhere.
Services that appear far less than people expect: anything purely analytics-focused, machine learning services, and the deeper networking content. You do not need the depth from the Advanced Networking specialty here.
How to Read a DOP-C02 Scenario Question
You have 180 minutes for 75 questions, which is 144 seconds each. Long scenarios will eat that budget unless you read them in a fixed order.
- Read the final sentence first. It contains the actual question. Everything before it is context that may or may not be relevant.
- Identify the constraint. Almost every question has one: least operational overhead, minimum cost, fastest recovery, no code changes, must be automatic. This constraint is what eliminates the workable-but-wrong answers.
- Scan the answers for disqualifiers. Anything that requires manual intervention when the question demanded automation is out. Anything that needs a new EC2 instance when a managed service exists is usually out.
- Choose between the survivors on operational overhead. Fewer moving parts wins.
- Flag and move on. If you are 90 seconds in without a clear direction, flag it and go. Two easy questions are worth more than one hard one.
Exam Tip: Multiple response questions tell you how many to select. If it says choose two, exactly two are correct and there is no partial credit. Do not agonise over a third plausible option.
Booking, Exam Day and Renewal
Book through your AWS Certification account, which routes you to Pearson VUE. You can sit DOP-C02 at a test centre or take it online with proctoring.
If you go the online route, read the check-in rules properly beforehand. The room scan and clear-desk requirements are stricter than most people expect, and candidates lose exam fees over avoidable breaches. Our guide to OnVUE online proctored exam rules covers exactly what gets you stopped.
The certification is valid for three years. Passing DOP-C02 also recertifies associate-level AWS certifications you already hold, which is a genuine benefit if your CloudOps or Developer Associate credential is approaching expiry.
Frequently Asked Questions
Is the AWS DevOps certification worth it?
For engineers already working in cloud infrastructure, yes. AWS Certified DevOps Engineer Professional is one of the small number of certifications that consistently appears as a preferred requirement in senior platform and SRE job adverts, and professional-level AWS certifications command a clear premium over associate ones. It is less useful as a first certification, because the exam assumes experience you cannot fake.
How much does AWS DevOps Professional certification cost?
The exam costs $300 USD. That is the only mandatory cost, since AWS provides the official exam guide and sample questions free. Budget for a retake if you are new to professional-level exams, and note that AWS sometimes issues 50% discount vouchers to candidates who have recently passed another AWS exam.
What is an AWS Certified DevOps Engineer?
It is someone certified to provision, operate and manage distributed application systems on AWS. In practice the credential validates that you can build CI/CD pipelines, define infrastructure as code, automate security and compliance checks, design self-healing systems, and set up monitoring that detects problems before users report them.
Is DevOps a dead-end job?
No, though the title is shifting. The work described by DOP-C02, automation, infrastructure as code, observability and incident response, is increasingly labelled platform engineering or site reliability engineering rather than DevOps. The skills are the same and demand for them has not fallen. If anything, the growth of AI workloads has increased the value of engineers who can build reliable, automated deployment pipelines.
How long does it take to study for DOP-C02?
Around 100 to 120 hours for someone with two years of hands-on AWS experience, which is what this 12-week plan at 8 to 10 hours a week delivers. Candidates coming straight from an associate certification with limited production experience should expect 150 hours or more, and would benefit from spending part of that on real projects rather than courses.
Ready to Start Practising?
Reading about DOP-C02 scenarios and answering them under time pressure are different skills, and only the second one is tested. The fastest way to find your weak domains is to sit realistic questions early, well before you feel ready, and let the results tell you where weeks 7 to 11 of your plan need to expand.
CertCrush gives you exam-style practice questions with full explanations for every answer, so you learn why the winning option wins rather than just memorising it. Browse the full course catalogue to see what is covered, check the pricing options, or create a free account and start practising today.