AWS DevOps Engineer Professional study materials
AWS DevOps Engineer Professional study resources

AWS DevOps Engineer Professional study guide

AWS DevOps Engineer Professional · Work through your exam, one topic at a time.

The AWS Certified DevOps Engineer - Professional is an advanced AWS certification aimed at engineers who build and operate delivery pipelines, automated infrastructure, and production systems on AWS. It suits people who already hold an associate-level AWS certification or have comparable hands-on experience and who now own automation and reliability end to end rather than a single service. The AWS DevOps Engineer Professional study guide has 6 sections and about 1,628 words.

01

SDLC Automation

SDLC Automation on the DevOps Professional exam centers on CodePipeline, CodeBuild, CodeDeploy, and CodeCommit, plus how they wire into existing CI/CD. Know the stage/action model: pipelines are ordered stages, each stage has actions that can run sequentially or in parallel (runOrder), and artifacts move between stages via an artifact store (S3).

293 words, about 1 min
02

Configuration Management and Infrastructure as Code

This domain tests CloudFormation deeply plus configuration tooling (SSM, OpsWorks, Elastic Beanstalk). For CloudFormation, understand templates (Resources, Parameters, Mappings, Conditions, Outputs, Metadata), intrinsic functions (Ref, GetAtt, Sub, Join, If, ImportValue), and stack operations (create/update/delete, change sets, drift detection).

258 words, about 1 min
03

Resilient Cloud Solutions

Resilience questions test multi-AZ vs. multi-Region design, Auto Scaling, load balancing, and failure isolation.

270 words, about 1 min
04

Monitoring and Logging

Monitoring and logging spans CloudWatch (metrics, alarms, Logs, dashboards), CloudTrail, AWS Config, and X-Ray. Know CloudWatch metrics: default vs.

266 words, about 1 min
05

Incident and Event Response

Event response tests EventBridge, SNS/SQS, Lambda, and automated remediation. Know EventBridge rules (event patterns, schedules), targets, and how AWS service events (e.g., EC2 state change, GuardDuty findings, Config compliance changes) route to Lambda, SNS, or SSM Automation.

258 words, about 1 min
06

Security and Compliance

Security and compliance covers IAM (policies, roles, permission boundaries, SCPs), KMS, secrets management, and audit. Know IAM policy types (identity vs.

283 words, about 1 min