Exam Overview

Exam Details

  • Duration: 130 minutes
  • Questions: 65
  • Passing Score: 720/1000
  • Format: Multiple choice & multiple response
  • Cost: ~$150-300 USD
  • Validity: 3 years

Exam Domains

DomainWeight
Development with AWS Services32%
Security26%
Deployment24%
Troubleshooting & Optimization18%

Lambda Deep Dive

Limits

  • Memory: 128 MB – 10,240 MB
  • Timeout: max 15 minutes
  • Temp storage (/tmp): 512 MB – 10 GB
  • Concurrent executions: 1,000 (soft limit)
  • Package: 50 MB zipped, 250 MB unzipped

Invocation Types

  • Synchronous — wait for result (API Gateway, ALB)
  • Asynchronous — no wait (S3, SNS, EventBridge); retries 2x; DLQ
  • Poll-based — Lambda polls (SQS, Kinesis, DynamoDB Streams)

Lambda Features

  • Versions — immutable snapshots of code + config
  • Aliases — named pointers to versions (PROD, DEV)
  • Canary / Linear deployments — gradual traffic shifts with CodeDeploy
  • Layers — reusable dependencies shared across functions
  • Container Images — up to 10 GB; use Lambda base images

DynamoDB for Developers

ConceptDescription
Primary KeyPartition Key only (simple) OR Partition Key + Sort Key (composite)
GSIGlobal Secondary Index — different partition key; eventual consistency
LSILocal Secondary Index — same partition key, different sort key; must be at creation
Read ConsistencyEventually Consistent (default, cheaper) vs Strongly Consistent
DynamoDB StreamsOrdered record of item changes; trigger Lambda
TTLAuto-delete items after expiry timestamp (free)
DAXIn-memory cache; microsecond read latency; write-through
TransactionsACID transactions across multiple items/tables

CI/CD on AWS

ServicePurposeLike
CodeCommitPrivate Git repositoriesGitHub/GitLab
CodeBuildBuild & test (compile, run tests, create artifacts)Jenkins, GitHub Actions
CodeDeployDeploy to EC2, Lambda, ECS, on-premisesSpinnaker
CodePipelineOrchestrate full CI/CD pipelineGitLab CI
CodeArtifactArtifact repository (npm, Maven, PyPI)Nexus

CodeDeploy Deployment Strategies

StrategyBehavior
In-Place (EC2)Deploy to existing instances; brief downtime per instance
Blue/Green (EC2)New instances; shift traffic via LB; zero downtime
All-at-once (Lambda)Immediate 100% shift
Canary (Lambda/ECS)X% traffic for N minutes, then 100%
Linear (Lambda/ECS)Gradual shift X% every N minutes

API Gateway

  • REST API — full features, 29s timeout, edge-optimized or regional
  • HTTP API — simpler, 70% cheaper than REST API
  • WebSocket API — bidirectional; real-time apps, chat, gaming
  • CORS — must be enabled for browser cross-origin calls
  • Stages — dev, staging, prod; each can have throttling/canary settings
  • Usage Plans & API Keys — throttle and monetize APIs
  • Caching — reduce backend calls; TTL 0-3600s

Monitoring & X-Ray

CloudWatch

  • Metrics — every service sends metrics (CPU, requests, errors)
  • Alarms — trigger SNS/ASG when threshold breached
  • Logs — Lambda writes here automatically
  • Log Insights — SQL-like query language for logs

X-Ray

  • Distributed tracing for microservices & Lambda
  • Service Map — visual of all components
  • Requires: X-Ray SDK + X-Ray Daemon (EC2) or active tracing (Lambda)
  • Annotations (indexed) vs Metadata (not indexed)
  • Sampling rules — control % of requests to trace

📋 Study Checklist

Progress0%
  • Configure AWS CLI with profiles
  • Know SDK credential resolution order
  • Understand Lambda invocation types (sync, async, poll)
  • Know Lambda limits: 15 min, 10 GB memory, 250 MB package
  • Explain Lambda versions, aliases, canary deployments
  • Know DynamoDB primary keys, GSI vs LSI
  • Understand DynamoDB capacity modes (provisioned vs on-demand)
  • Explain DAX, Streams, TTL, Transactions
  • Know CodeCommit, CodeBuild, CodeDeploy, CodePipeline
  • Explain blue/green, canary, linear deployment strategies
  • Configure API Gateway REST vs HTTP API
  • Enable CORS in API Gateway
  • Use CloudWatch Logs, Metrics, and Alarms
  • Implement distributed tracing with X-Ray
  • Use SSM Parameter Store vs Secrets Manager
  • Understand SQS visibility timeout and DLQs
  • Know Kinesis Data Streams shards and partition keys
  • Use Elastic Beanstalk deployment policies
  • Understand Cognito User Pools vs Identity Pools
  • Know S3 pre-signed URLs for temporary access