Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →toddkasper/aws-devops-engineer-professional
AWS DevOps engineering — CI/CD pipelines (CodePipeline, CodeBuild, CodeDeploy), infrastructure as code (CloudFormation, CDK, Systems Manager), deployment strategies (blue/green, canary), resilient multi-AZ/multi-region design, CloudWatch monitoring and logging, event-driven incident response and automated remediation, and security/compliance automation.
Passed 19 of 22 test cases with the skill, and 18 of 22 without it.
1 fixed18 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
A CloudFormation stack uses a Lambda-backed Custom Resource to invoke an external API. During updates, the stack stays stuck in `UPDATE_IN_PROGRESS` for over an hour before timing out. What design constraint must be set on the Lambda function's execution timeout relative to CloudFormation, and what response signal must the Lambda send back to CloudFormation? Describe both requirements.
| Checked | Without skill | With skill |
|---|---|---|
| Specify setting the Lambda timeout shorter than CloudFormation's 1-hour wait limit. | Missed | Passed |
| Require the Lambda function to post a SUCCESS or FAILED response to CloudFormation's S3 pre-signed URL. | Passed | Passed |
The instructions your model reads when the skill loads.
Operational playbook for AWS DevOps work. Each section states the rule to apply: decision criteria for deployment strategy, failure modes to catch in review, and verify steps. Query the AWS APIs — never assume from IaC source or console screenshots (state diverges from templates the moment a manual change is made).
Load this skill when… building or reviewing a CI/CD pipeline (CodePipeline, CodeBuild, CodeDeploy); authoring or debugging CloudFormation/CDK/SAM templates; designing deployment strategies (blue/green, canary, rolling); configuring observability stacks, automated remediation, or compliance-as-code on AWS. Not this skill: threat-detection, IAM policy depth, or encryption → see
aws-security-specialty; enterprise architecture trade-offs → seeaws-solutions-architect-professional.
Study resources and credential logistics: references/study-resources.md.
Verify steps — use your project's MCP/automation, the AWS CLI (
aws) or CloudShell, or the Console, in that order.
[volatile — verify live], CodeBuild concurrent builds per account [volatile — verify live]), EC2 instance type availability by region [volatile — verify live], CloudWatch high-resolution metric pricing [volatile — verify live], CodeDeploy deployment config names and timeout defaults [volatile — verify live], and any feature announced after the last-reviewed date in this file's frontmatter.[volatile — verify live] (changes with AWS service updates) or [opinion — house style] (a defensible default, not the only valid choice).Core stack: CodeConnections (source; preferred — supports GitHub, GitLab, Bitbucket) → CodeBuild (build/test) → CodeDeploy or ECS/EKS deploy action → CodePipeline (orchestrator). CodeArtifact for private artifact repositories (npm, Maven, PyPI).
CodeCommit note
[volatile — verify live]: CodeCommit is not in the current DOP-C02 in-scope services list; lead new pipeline designs with CodeConnections. CodeCommit was closed to new customers Jul 2024 and returned to GA Nov 2025 — status may continue to evolve; confirm against the official exam guide and AWS docs before citing it in exam prep or new architecture work.
Role boundaries: build role has no deploy permissions; deploy role has no build permissions. Cross-account pipelines require a KMS CMK (not SSE-S3) on the artifact bucket, plus trust policies in both accounts.
Secrets in builds: reference Secrets Manager ARNs or Parameter Store SecureString paths in the CodeBuild environment block — never plaintext in buildspec.yml or environment variables. Rotation does not require pipeline changes.
| Strategy | What it does | Best for | Rollback |
|---|
test cases passed, vs 18 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.