DevOps Engineering on AWS Certification Cheat Sheet 2026

The 30 highest-yield DevOps Engineering on AWS Certification facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which AWS CodeDeploy deployment type is supported for AWS Lambda functions? → Blue/green
2. Which AWS Global Accelerator feature improves availability by routing traffic to the nearest healthy endpoint across AWS regions? → Anycast IP with health-based routing
3. Which S3 feature allows you to automatically replicate objects to buckets in other AWS regions for disaster recovery? → Cross-Region Replication
4. Which CodeDeploy lifecycle event hook runs BEFORE the application revision is downloaded to the instance? → BeforeInstall
5. A CodeBuild project needs to cache Maven dependencies between builds. Which cache type should be configured? → Amazon S3 cache
6. In AWS CodeDeploy, what deployment configuration gradually shifts traffic from the original to the replacement environment? → Blue/green deployment
7. What AWS IAM feature allows you to set permission boundaries that limit the maximum permissions an IAM entity can have? → Permission boundaries
8. Which AWS service aggregates and visualizes logs from EC2, Lambda, ECS, and other AWS resources? → Amazon CloudWatch Logs
9. What does the appspec.yml file control in an AWS CodeDeploy deployment? → How CodeDeploy maps source files to destinations and lifecycle event hooks
10. Which buildspec.yml phase in CodeBuild is used to run the actual build commands? → build
11. In AWS CDK, which construct type represents opinionated, multi-resource patterns for common architectural use cases? → L3 constructs
12. What is the default retention period for AWS CloudTrail event history in the console? → 90 days
13. Which ELB type is optimized for handling millions of requests per second with ultra-low latency at the TCP layer? → Network Load Balancer
14. Which AWS service records API calls made in your AWS account, providing a full audit trail? → AWS CloudTrail
15. Which deployment configuration in AWS CodeDeploy ensures that at least half of the instances remain in service during an in-place deployment? → CodeDeployDefault.HalfAtATime
16. Which feature of AWS CodeBuild allows you to cache dependencies to speed up future builds? → Build caching
17. In AWS CodeDeploy for ECS, what resource type defines the routing of traffic to the blue and green task sets? → Application Load Balancer listener rule
18. What is the purpose of an approval action in AWS CodePipeline? → Pauses the pipeline and waits for manual approval before proceeding
19. Which AWS policy type can be applied to an entire AWS Organization or OU to restrict the maximum permissions available to member accounts? → Service Control Policy (SCP)
20. What does Amazon CloudWatch Real User Monitoring (RUM) collect? → Performance data from real user browser sessions
21. When using AWS CodeDeploy with an in-place deployment strategy on EC2 instances, what happens to the application during the deployment? → The application on existing instances is stopped, updated, and restarted
22. Which CloudWatch feature automatically detects unusual patterns in metrics without requiring you to set static thresholds? → CloudWatch Anomaly Detection
23. Which metric dimension in CloudWatch helps you track the latency of individual Lambda function invocations? → Duration
24. In a CodePipeline with a manual approval action, the pipeline has been waiting for approval for 7 days. What happens by default? → The approval action expires and the pipeline execution is abandoned
25. Which AWS service is used to create fully managed continuous delivery pipelines? → AWS CodePipeline
26. Which AWS Config resource type is used to create custom compliance rules using Lambda functions? → AWS::Config::ConfigRule with type CUSTOM_LAMBDA
27. Which AWS service can be used as a source stage in CodePipeline to store and version Git repositories? → AWS CodeCommit
28. Which AWS service continuously monitors AWS resource configurations and evaluates them against desired configurations? → AWS Config
29. What CloudFormation function retrieves the value of a parameter or resource output from the same template? → Ref
30. Which deployment strategy in AWS CodeDeploy routes a percentage of traffic to the new version while keeping the rest on the old version? → Canary