Chapter 2 of 6 · AWS DOP-C02
Configuration Management and IaC
CloudFormation, CDK, SAM, Service Catalog, multi account setup and Systems Manager.
- 5topics
- 24 minfast track
- 1diagrams and exhibits
- 17%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1CloudFormation Templates and StacksWrite reusable CloudFormation templates with parameters, conditions and intrinsic functions, and manage stacks with change sets…5 min
- 2CloudFormation Lifecycle and Custom ResourcesControl CloudFormation creation and updates with creation policies, cfn-init, update policies, stack policies and Lambda backed…5 min
- 3CDK, SAM and Service CatalogChoose between the AWS CDK, SAM and Service Catalog for reusable infrastructure, and understand constructs, bootstrapping…4 min
- 4Organizations, Control Tower and StackSetsAutomate multi account and multi Region AWS setups with Organizations, service control policies, Control Tower Account Factory…Diagram5 min
- 5Systems Manager and Workflow AutomationAutomate operations at scale with Systems Manager Run Command, Automation, State Manager, Patch Manager and Parameter Store, plus…5 min
About this chapter
What this chapter covers
This chapter is about describing infrastructure as code and then running it at scale. It starts with a single template and ends with hundreds of accounts, Regions and servers managed by automation.
It follows the second domain of the AWS Certified DevOps Engineer Professional DOP-C02 outline. The three outline topics are reusable infrastructure definitions, multi account and multi Region account automation, and automated solutions for large and complex environments.
How the topics fit together
The pages move from one stack to a whole organization.
- CloudFormation is the engine underneath. Its lifecycle features cover readiness signals, rolling updates and custom logic.
- CDK and SAM generate CloudFormation from code or shorthand, and Service Catalog publishes approved products.
- Organizations, Control Tower and StackSets create accounts, apply controls and push baselines everywhere.
- Systems Manager and Step Functions handle day to day operations and long workflows across a fleet.
Whenever a question mentions many accounts or Regions, look for the managed multi account service first, before any custom script.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Try each tool in a sandbox. A small template with a creation policy, a CDK app and a StackSet pushed to a test OU will make the exam wording much easier to read.
Ready for more practice?
The full AWS DOP-C02 question bank has 844 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by AWS. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.