DOP-C02 Tests Automated, Multi-Account Operations at Scale — Not Single-Pipeline Setups
A professional exam for engineers who run delivery and operations across many accounts and Regions. Choose the answer that scales automatically to new accounts and leaves no manual step or long-lived credential behind.
Check Your Readiness →Most candidates understand AWS Certified DevOps Engineer - Professional (DOP-C02) concepts — and still fail. This exam tests how you apply knowledge under pressure.
Long scenarios with numeric RTO, RPO or downtime limits and several workable answers; the winner meets the numbers with the least effort and no manual steps. The guide still lists AWS OpsWorks, which reached end of life in May 2024; treat Systems Manager as its replacement.
Run the whole workflow in one Lambda function
Lambda stops at 15 minutes. Use Systems Manager Automation or Run Command with rate controls, or Step Functions to sequence steps with retries, so each step finishes within its own limits.
The SCP allow grants developers access to the buckets
SCPs only filter the maximum permissions available in member accounts; they never grant. Developers still need identity-based IAM permissions, and a permissions boundary can cap what delegated admins create.
Rebuild the AMI because the image is broken
A health check grace period shorter than application start-up makes ELB health checks fail before the app is ready. Lengthen the grace period or use lifecycle hooks, then confirm with the target group health reason.
Troubleshoot the last error message in the event list
Later failures are usually cascades. Find the first CREATE_FAILED or UPDATE_FAILED event and its status reason, fix that resource, then rerun. Drift detection only reports differences and never restores settings.
Poll the AWS Health API every minute from Lambda
AWS Health publishes events to EventBridge. Create a rule matching the event pattern and route it to SNS, Lambda or a Systems Manager Automation runbook, with no polling code to maintain.
Rolling in-place batches reduce capacity and roll back by redeploying the previous revision. Blue/green on EC2 keeps the old fleet for fast rollback, while Lambda and ECS use canary or linear traffic shifting with CloudWatch alarms triggering automatic rollback.
Multi-AZ protects against an Availability Zone failure in one Region only. Cross-Region read replicas need manual or scripted promotion. Aurora Global Database replicates across Regions with typically sub-second lag and managed failover for tight RPO and RTO.
Metric filters only evaluate events ingested after creation and produce numbers, not events. For history use Logs Insights; to stream raw events to Data Firehose, Lambda or another account use a subscription filter. Athena reads S3 exports, not log groups.
Service-managed StackSets with automatic deployment roll baselines out to every new account that joins a target OU, with no execution roles to create. Self-managed permissions need roles in each account and suit setups without AWS Organizations.
A role in another account needs kms:Decrypt in its IAM policy and an allow in the key policy. Pipelines deploying to other accounts need a customer managed key on the artifact bucket, because the AWS managed S3 key cannot be shared.
Strengthen weak areas with exam-style practice questions and detailed explanations.
Simulate the real exam experience and assess your readiness under timed conditions.
Review key concepts, objectives, and exam topics in one place.
Get personalized explanations, learning recommendations, and instant answers.
Follow a structured learning path designed to help you prepare efficiently.
DOP-C02 rewards automation that scales across accounts. Find out where your answers still rely on manual steps.