AWS Developer study plan

Write least-privilege IAM policies for a Lambda execution role and verify each action against the CloudTrail-style access needs of the function

Deploy a Lambda function triggered by S3 object-created events and confirm invocation with test objects

Create a DynamoDB table with a partition key, sort key, and one global secondary index, then query it by both access patterns

Perform create, read, update, and delete operations on that table from application code using an AWS SDK

Build an SQS queue with a dead-letter queue and a redrive policy, then force a message to fail and confirm it lands in the DLQ

Configure an SNS topic fanning out to at least two subscribers and publish a message that reaches both

Add request throttling, stage variables, and an authorizer to an API Gateway REST or HTTP API

Implement idempotent retry handling with exponential backoff and jitter in a consumer process

Choose between SQS, SNS, Kinesis, and Step Functions for four given workload descriptions and justify each choice in writing

Trace the policy evaluation order for identity policies, resource policies, permission boundaries, and explicit denies across five conflicting scenarios

Encrypt and decrypt data using a KMS customer managed key, and explain when an envelope-encryption data key is preferred

Retrieve a database credential at runtime from Secrets Manager and from SSM Parameter Store, and state two tradeoffs between them

Configure a Cognito user pool with an app client and authenticate a test user to obtain tokens

Generate a presigned S3 URL with a short expiry and verify that access fails after expiry

Configure an interface VPC endpoint so a private-subnet workload reaches a service without traversing the internet

Harden a security group and network ACL pair, then prove with a connectivity test which rule blocks traffic

Implement the default credential provider chain order and demonstrate role assumption via STS

Apply encryption in transit and at rest to an application end to end and document where each key lives

Define infrastructure as code for a two-resource stack and deploy it through a change set before applying

Build a pipeline with source, build, and deploy stages that promotes an artifact from staging to production

Configure a CodeDeploy deployment group using a blue/green strategy and roll back automatically on a failed health check

Compare in-place, rolling, blue/green, and canary strategies and select one for each of three stated availability requirements

Package and deploy a container image to a managed container service and update it with a new image tag

Publish a Lambda version and shift traffic between two aliases to perform a canary release

Inject environment-specific configuration and secrets at deploy time without baking them into the artifact

Tag and version every deployable artifact so a specific running version can be traced back to a commit

Instrument an application with distributed tracing and identify the slowest segment of a multi-service request

Create CloudWatch alarms on error rate, latency, and throttle metrics and route notifications to a topic

Reproduce a function timeout and a throttling error, then fix each and record the root cause

Diagnose a hot-partition pattern in a DynamoDB table and redesign the key to distribute writes

Write a triage checklist that maps common error signatures to their likely cause and first diagnostic step

Complete two full-length timed practice sets and score them without consulting notes

Log every missed item with the underlying concept gap rather than the question wording

Re-drill the three weakest concepts until you can explain each aloud without reference material

Re-time your pacing so you finish with at least ten minutes to spare

Verify environment cleanliness by tearing down unused billable resources created during the plan