AWS Certified DevOps Engineer Professional DOP-C02 Training - OEM Certk

The DevOps Engineering on AWS course teaches you how to combine DevOps cultural philosophies, best practices, and tools to accelerate the development, delivery, and maintenance of applications and services in the AWS Cloud.

Demo AWS Certified DevOps Engineer Professional DOP-C02 Training

This training covers continuous integration (CI), continuous delivery (CD), infrastructure as code, microservices, monitoring and logging, and communication and collaboration.
Through hands-on labs, you will gain experience building and deploying AWS CloudFormation templates and CI/CD pipelines for applications running on Amazon EC2, serverless environments, and container-based platforms.

Prerequisites:

Before attending this training, we recommend you have:

• Experience developing in at least one high-level programming language
• Experience building automated infrastructures and administering operating systems
• Understanding of modern development and operations processes and methodologies
• Ability to implement and manage CI/CD systems and methodologies on AWS
• Ability to automate security controls, governance processes, and compliance validation
• Ability to define and deploy monitoring, metrics, and logging systems on AWS

Course Outcomes:

By the end of this training, you will be able to:

• Apply DevOps best practices to develop, deliver, and maintain applications and services at high velocity on AWS
• Identify the benefits, roles, and responsibilities of small, autonomous DevOps teams
• Design and implement infrastructure on AWS to support DevOps projects
• Use AWS Cloud9 to write, run, and debug your code

Target Audience:

This training is designed for IT professionals aiming for the AWS Certified DevOps Engineer – Professional certification, with at least two years of experience provisioning, operating, and managing AWS environments.

CertKit content:

E-learning courses:

AWS DevOps Engineer Pro (DOP-C02): CI/CD - CodePipeline & Source Integrations

Course: 1 Hour, 20 Minutes

• Course Overview
• CI/CD and SDLC Key Concepts
• Source Integrations: Git Providers with AWS CodeConnections
• CodePipeline Core Concepts: Stages, Actions, and Artifacts
• Creating a Baseline Pipeline with CodePipeline, CodeConnections, and CodeBuild
• Build Stage with CodeBuild
• Implementing buildspec.yml: Essentials and Artifact Output
• Pipeline Artifact Security with S3 and KMS
• Secret Management for Builds: Secrets Manager vs. Parameter Store
• Injecting Secrets Securely into CodeBuild
• Multi-Account Pipeline Patterns and Cross-Account Roles
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Building and Manging Artifacts

Course: 1 Hour, 9 Minutes

• Course Overview
• Artifact Strategy Fundamentals: Versioning, Promotion, and Lifecycle
• AWS CodeArtifact Concepts: Domains, Repositories, and Upstreams
• Publishing and Consuming Private Packages with CodeArtifact
• Build Output Artifacts in CodeBuild and S3: Packaging and Retention
• Using CodeArtifact in CodeBuild and Producing Versioned Output Artifacts
• Container Artifacts in Amazon ECR: Tags, Immutability, and Scanning
• Building, Pushing, and Scanning Container Images in ECR
• Automated Image Creation with EC2 Image Builder: AMIs and Container Pipelines
• Creating an Image Builder Pipeline and Producing Golden Images
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Automated Testing in CI/CD Pipelines

Course: 1 Hour, 6 Minutes

• Course Overview
• CI/CD Testing Strategy and Stage Placement
• Unit Tests, Test Reports, and Coverage Automation in CodeBuild
• Configuring Unit Tests, JUnit Reports, and Coverage Gates
• Pull Request and Merge Validation Patterns
• Implementing Pull Request Validation with CodeCommit, EventBridge, and CodeBuild
• Integration Tests with Ephemeral Test Environments
• Creating Ephemeral CloudFormation Test Stacks for Integration Testing
• Security and Quality Scans as Pipeline Gates
• Scaling Test Execution with CodeBuild Batch Builds
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): EC2 Deployment Strategies with CodeDeploy

Course: 1 Hour, 22 Minutes

• Course Overviews
• CodeDeploy for EC2: Deployment Types and Core Components
• Preparing EC2 Instances for CodeDeploy Deployments
• AppSpec Files and Lifecycle Hooks for EC2 Deployments
• Creating an In-Place Deployment Group and Deploying a Revision
• Deployment Configurations: Minimum Healthy Hosts and Zonal Progression
• Blue/Green EC2 Deployments with an Application Load Balancer
• Stop Conditions, Monitoring, and Rollback Strategies
• Implementing Automatic Rollback with CloudWatch Alarms
• CodeDeploy Troubleshooting: Logs, Agent Health, and Common Failures
• Debugging a Failed Deployment and Remediating the Root Cause
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Container Deployments - ECS, EKS, & Progressive Delivery

Course: 2 Hours, 34 Minutes

• Course Overview
• Container Deployment Strategies on AWS: Choosing ECS vs EKS
• ECS Rolling Updates and Automated Rollback Controls
• Rolling Update for an ECS Service with a New Task Definition1
• Blue/Green Deployments for ECS Services
• Blue/Green Deployment of an ECS Service with Traffic Shifting
• Progressive Delivery on ECS: Circuit Breaker, Events, and Safe Rollback
• Triggering an ECS Circuit Breaker Failure and Observing Rollback
• EKS Rollouts: Kubernetes Deployments, Health Probes, and Rollback
• Rolling Update and Rollback on EKS with kubectl rollout
• Canary Releases on EKS with AWS App Mesh Weighted Routing
• Canary Traffic Shifting on EKS Using App Mesh Route Weights
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Serverless Deployments - SAM/CDK, Lambda, and Safe Rollouts

Course: 1 Hour, 5 Minutes

• Course Overview
• Lambda Deployment Fundamentals: Versions, Aliases, and Traffic Shifting
• Safe Deployments with AWS SAM: AutoPublishAlias and DeploymentPreference
• Deploying a Lambda with SAM and Enable Canary Traffic Shifting
• CodeDeploy for Lambda: Canary/Linear Patterns, Hooks, and Alarms
• Validation Hooks: Pre-Traffic and Post-Traffic Testing for Safe Cutovers
• Implementing Canary Deployment with Hooks and CloudWatch Alarm Rollback
• AWS CDK Rollout Patterns: Alias + LambdaDeploymentGroup
• Implementing CDK-Based Traffic Shifting with a Lambda Deployment Group
• Using Observability to Troubleshoot Serverless Rollouts
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): CloudFormation Infrastructure as Code (IaC)

Course: 1 Hour, 11 Minutes

• Course Overview
• CloudFormation Foundations for DevOps Engineers
• Author Reusable CloudFormation Templates
• Deploying a Stack and Reading Stack Events
• Safe Infrastructure Updates with Change Sets
• Implementing and Executing a Change Set
• Drift Detection and Lifecycle Governance
• Managing Drift and Remediating to Desired State
• Guardrails: Stack Policies, Termination Protection, and Rollback Triggers
• Template Quality and Policy-as-Code for CloudFormation
• Implementing IaC Adoption for Existing Resources with IaC Generator and Linting
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): IaC at Scale - CDK, Modules, StackSets, and Service Catalog

Course: 1 Hour, 4 Minutes

• Course Overview
• AWS CDK at Scale: Constructs, Apps, Stacks, and Environments
• CDK Bootstrap and Deployment Safety Considerations
• Implementing a Multi-Stack CDK Application
• Reusable Infrastructure with CloudFormation Modules and the Registry
• Using CloudFormation Modules in Templates
• CloudFormation StackSets for Multi-Account and Multi-Region Standardization
• Implementing a Baseline with StackSets and Monitoring Operations
• AWS Service Catalog: Portfolios, Products, and Constraints for Governance
• Implementing an Approved Product with Service Catalog
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Multi-Account Foundations - Organizations & Control Tower

Course: 1 Hour, 16 Minutes

• Course Overview
• Multi-Account Strategy: Isolation, Shared Services, and Blast Radius
• AWS Organizations Fundamentals: Accounts, OUs, and Org-Wide Management
• Creating an Organization and Building an OU Hierarchy
• AWS Control Tower Landing Zone Concepts and Prerequisites
• Setting Up a Control Tower Landing Zone
• Account Factory Workflows and Account Provisioning Methods
• Provisioning a New Account with Account Factory
• Deliver Existing Accounts Under Governance: Register OUs and Enroll Accounts
• Registering an Existing OU and Enrolling an Existing Account
• Operational Baselines and Onboarding Pitfalls to Avoid
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Systems Manager, AppConfig, & OpsWorks Configuration Management

Course: 57 Minutes

• Course Overview
• Configuration Management on AWS: Choose the Right Service
• Systems Manager Building Blocks for Configuration
• Run Command and SSM Documents for Controlled Changes
• Desired-State Configuration with State Manager Associations
• AWS AppConfig and OpsWorks in Modern DevOps
• Enforcing a Baseline with Systems Manager Run Command
• Maintaining Desired State with a State Manager Association
• Deploying Safe Feature Flag Rollouts with AWS AppConfig
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Governance at Scale - SCPs, Config, Security Hub, & GuardDuty

Course: 1 Hour, 3 Minutes

• Course Overview
• Governance at Scale: Preventative vs. Detective Controls
• Service Control Policies: Design Principles and Evaluation Model
• Creating and Testing an SCP on an OU
• AWS Config at Scale: Aggregators, Conformance Packs, and Remediation
• Deploying a Conformance Pack and Configure Auto Remediation
• Security Hub at Scale: Standards, Controls, and Delegated Administration
• Enabling Security Hub Across an Organization and Turning On a Standard
• GuardDuty at Scale: Organization Auto-Enable and Noise Reduction
• Enabling Organization-Wide GuardDuty and Creating Suppression Rules
• Governance Reporting and Evidence Across Services
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Automating Ops Runbooks with Step Functions, Lambda, & Systems Manager

Course: 1 Hour, 12 Minutes

• Course Overview
• Ops Runbook Automation Patterns and Design Principles
• Step Functions Service Integrations and Resilient Error Handling
• Building a Step Functions Runbook Using AWS SDK Integrations
• Systems Manager Automation Runbooks as Building Blocks
• Invoking an SSM Automation Runbook from Step Functions (Synchronous Pattern)
• Event-Driven Ops: Triggering Runbooks with EventBridge
• Triggering a Remediation Workflow from an EventBridge Rule
• Scaling Remediation: Map vs. Distributed Map and Concurrency Controls
• Implementing Bulk Remediation with Map State and Guardrails
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): AWS DevOps Engineer Pro (DOP-C02): Fleet Operations with AWS Systems Manager

Course: 1 Hour, 8 Minutes

• Course Overview
• Systems Manager Fleet Operations: Managed Nodes and Prerequisites
• Patch Manager Fundamentals: Baselines, Patch Groups, and Compliance States
• Patching Governance with Baselines and Patch Groups (On-Demand Scan/Install)
• Scheduled Patching with Maintenance Windows: Concurrency and Error Thresholds
• Configuring a Maintenance Window for Patch Installation
• Inventory at Scale: Collection, Resource Data Sync, and Reporting
• Configuring Inventory Collection and a Resource Data Sync
• Compliance and Investigations: Compliance, Explorer, and OpsCenter
• Enabling Explorer/OpsCenter and Work an OpsItem to Closure
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Scalability Engineering - Auto Scaling, Load Balancing, & Caching

Course: 1 Hour, 12 Minutes

• Course Overview
• Scalability Fundamentals: Load, Latency, and Bottlenecks
• Auto Scaling Policies: Target Tracking vs. Step Scaling
• Implementing a Scaling Web Tier and Validating Scale-Out
• Load Balancer Behaviors That Affect Scale and Stability
• Troubleshoot Scaling Failures and Flapping
• Caching Strategy with CloudFront: TTLs, Behaviors, and Invalidation
• Creating a CloudFront Distribution and Observing Cache Hit Ratios
• When and How to Use Application Caching with ElastiCache
• Adding ElastiCache to Reduce Origin Load
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): High Availability for Compute & Multi-AZ Data Layers

Course: 1 Hour, 16 Minutes

• Course Overview
• High Availability Fundamentals
• ALB Target Health and Auto Scaling Replacement
• Building a Multi-AZ Web Tier with ALB and an Auto Scaling Group
• Session State, Shared Storage, and Caching Stateless App Tier Patterns
• Validating Recovery with Instance Termination and Health-Based Replacement
• Data Layer High Availability: RDS Multi-AZ and Aurora Failover Concepts
• Creating an RDS Multi-AZ DB and Performing a Failover Test
• Route 53 Health Checks and Failover Routing for Highly Available Endpoints
• Configuring Route 53 Failover Between Two Endpoints
• Finding and Fixing Single Points of Failure in Existing Workloads
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Distributed Tracing & Service Observability

Course: 1 Hour, 5 Minutes

• Course Overview
• Why Distributed Tracing: From Symptoms to Root Cause
• X-Ray Fundamentals: Traces, Segments, Sampling, and Service Maps
• Instrumenting a Sample App and Viewing Traces in the X-Ray Console
• OpenTelemetry and ADOT: When and How to Use the Collector
• Deploying the ADOT Collector and Export Traces to X-Ray
• Troubleshooting with ServiceLens and Trace-Driven Workflows
• Performing a Trace-Based Root Cause Analysis
• Production Tracing Practices: Sampling, Privacy, and Cost Controls
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): CloudWatch Metrics & Logs

Course: 1 Hour, 34 Minutes

• Course Overview
• Monitoring Data Types in AWS: Metrics vs. Logs vs. Traces
• CloudWatch Metrics Model: Namespaces, Dimensions, and Resolution
• Secure Collection with the CloudWatch Agent and IAM
• Implementing the CloudWatch Agent with Systems Manager to Ship Metrics and Logs
• Log Group Hygiene: Retention, Encryption, and Access Controls
• Turning Log Events into Metrics with Metric Filters
• Implementing a Log Metric Filter and Alarm for Error Rates
• Real-Time Log Processing with Subscription Filters
• Configuring CloudWatch Logs Streaming to Firehose and Delivering to Amazon S3
• Investigative Workflows with Logs Insights and Live Tail
• Using Logs Insights Queries to Investigate an Application Issue
• Export Metrics at Scale with CloudWatch Metric Streams
• Configuring a Metric Stream to Firehose for an S3 Analytics Destination
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Disaster Recovery & Automated Recovery

Course: 1 Hour, 1 Minutes

• Course Overview
• Disaster Recovery (DR) Fundamentals: RTO/RPO and Strategy Selection
• Backup Automation with AWS Backup: Plans, Vaults, and Policies
• Configuring an AWS Backup Plan and Run an On-Demand Backup
• Database Recovery Workflows: RDS Snapshots and Point-in-Time Restore
• Restoring an RDS Database from Snapshot or to a Point in Time
• Cross-Region DR and Failover Orchestration Concepts
• Configuring a DR Failover Test Using Route 53 Failover Routing
• Designing and Running DR Tests and Game Days
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Event Sources & Routing with Amazon EventBridge

Course: 1 Hour, 4 Minutes

• Course Overview
• Event Sources, Signals, and Action Pipelines with EventBridge
• Reliable Rule Building: Event Patterns, Filtering, and Target Design
• Routing CloudTrail API Calls to an SNS Notification
• AWS Health Event Integration for Service-Aware Response
• Creating an EventBridge Rule for AWS Health Events and Notify via SNS
• Operational Safeguards: Retries, DLQs, and Input Transformation
• Configuring Archive and Replay Events for Troubleshooting and Backfills
• Event Processing Patterns: Fan-Out, Idempotency, and Workflow Targets
• Building a Point-to-Point Integration with EventBridge Pipes
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Event-Driven Remediation with AWS Config & Systems Manager

Course: 1 Hour, 10 Minutes

• Course Overview
• From Detection to Remediation: A Safe Change Lifecycle
• Designing Config Rules and Conformance Packs for Desired State
• Configure Auto-Remediate Missing Tags and Automation Runbook
• Remediation Guardrails: Permissions, Scope, Rate Controls, and Error Handling
• Building a Custom Remediation Runbook with Document Builder
• Compliance Change Signals and EventBridge Integration
• Triggering an Automation Runbook from a Compliance Change Event
• Fleet Configuration Changes with Systems Manager and Auto Scaling
• Executing a Fleet Fix with Run Command After an Event Trigger
• Scaling Remediation Across Accounts: Organizational Rules and Central Operations
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Incident Response with Incident Manager & ChatOps

Course: 1 Hour, 5 Minutes

• Course Overview
• Incident Response on AWS: Roles, Phases, and Preparedness
• Incident Manager Core Concepts: Incidents, Response Plans, and Related Items
• Engaging Responders: Contacts and Escalation Plans
• Creating Contacts and an Escalation Plan for On-Call Engagement
• Automation and Collaboration: Runbooks and Chat Channels
• Building a Response Plan with a Runbook and a Chat Channel
• Automatic Incident Creation from CloudWatch Signals
• Triggering an Incident from a CloudWatch Alarm and Validate Runbook Execution
• Post-Incident Analysis: Timelines, Root Cause, and Action Items
• Performing a Post-Incident Analysis and Capture Improvement Actions
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Troubleshooting System & Application Failures

Course: 54 Minutes

• Course Overview
• A Practical Triage Framework for Faster Root Cause
• Troubleshoot IaC Failures with CloudFormation Stack Events
• Exploring a CloudFormation Stack Rollback and Isolating the Failing Resource
• Diagnose CI/CD Failures in CodePipeline and CodeBuild
• Performing a CodeDeploy Failure Diagnosis and Validating a Safe Rollback
• Troubleshoot Scaling and Availability Symptoms
• Centralize Evidence with Logs Insights Queries and Guided Drill-Down
• Managing Troubleshooting with OpsCenter and Explorer
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Security Auditing with CloudTrail & CloudTrail Lake

Course: 59 Minutes

• Course Overview
• Design Auditing: What to Log and Why It Matters
• Centralized Trails at Scale: Multi-Region and Organization Trails
• Creating a Secure Trail with KMS Encryption and Log File Integrity
• Trustworthy Logs: Integrity Validation, Retention, and Access Controls
• Validating CloudTrail Log File Integrity with the AWS CLI
• CloudTrail Lake: Event Data Stores and SQL-Based Investigation
• Creating an Event Data Store and Running a CloudTrail Lake Query
• Detection of Unusual Activity with CloudTrail Insights
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Identity and Access Management at Scale

Course: 45 Minutes

• Course Overview
• Choose the Right Identity Building Blocks
• Centralized Human Access with IAM Identity Center Permission Sets
• Configuring a Permission Set and Assigning Access to an AWS Account
• Permission Guardrails: SCPs, Permissions Boundaries, and Session Policies
• Implementing Safe Role Creation Using a Permissions Boundary
• Policy Sprawl Reduction with RBAC, ABAC, MFA, and Automated Rotation
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Automated Security Controls & Compliance Validation

Course: 1 Hour, 14 Minutes

• Course Overview
• Encryption and Key Management Controls for Data Protection
• Enforcing S3 Encryption with SSE-KMS and a Bucket Policy Guardrail
• Certificate Automation and Secrets Hygiene
• Network Security Controls: Web, DDoS, and East-West Filtering
• Managing and Protecting an Application Load Balancer with AWS WAF Managed Rules
• Managed Security Assessment Signals: Vulnerabilities and Sensitive Data
• Enabling Amazon Inspector and Reviewing Findings
• Enabling Macie and Running a Targeted Sensitive Data Discovery Job
• Detecting Unintended External Access with IAM Access Analyzer for S
• Validate Compliance Evidence with Drift Detection and VPC Flow Logs
• Course Summary

AWS DevOps Engineer Pro (DOP-C02): Alerting, Dashboards, & CloudWatch Monitoring

Course: 1 Hour, 25 Minutes

• Course Overview
• Alerting Fundamentals: Alarm States, Evaluation, and Missing Data
• Alarm Actions and Notifications: Turn Signals into Work
• Creating a Metric Alarm with SNS Notification and Runbook Link
• Composite Alarms: Reduce Noise with Boolean Logic
• Building a Composite Alarm for an Application Health Indicator
• Anomaly Detection Alarms: Dynamic Thresholds for Better Signal
• Creating an Anomaly Detection Alarm and Tuning the Threshold Band
• Dashboards for Operations: Widgets, Layouts, and Storytelling
• Building an Ops Dashboard That Combines Metrics and Alarms
• Outside-In Monitoring with Synthetics Canaries
• Creating a Canary, Adding Alarms, and Interpreting Canary Artifacts
• Real User Monitoring with CloudWatch RUM and ServiceLens
• Course Summary

MeasureUp Exam Simulation: Your Road to Success

Hone your testing skills with MeasureUp Exam Simulation, an advanced tool that gives you a realistic exam experience. Practice with accurately modelled questions that mimic actual exams, allowing you to get used to the structure and pressure. With MeasureUp, you not only prepare for your exam, you also increase your chances of success.

• 140+ questions

Tips, Tricks & Links

Take advantage of our comprehensive collection of tips, tricks and links designed specifically to support your preparation for certification exams. These resources offer valuable insights and proven strategies to make your studies more effective. Enhance your learning experience and approach your exams with confidence!