AWS Certified Data Engineer – Associate (DEA-C01) study guide
What the DEA-C01 exam tests, domain by domain, and how to tell the right answer from the nearly right one. Each topic links to fuller study notes and free practice questions.
Last checked against the official exam guide and AWS documentation · How we write our content
About the DEA-C01 exam
The AWS Certified Data Engineer – Associate exam checks whether you can build and run data pipelines on AWS: ingest batch and streaming data, transform it, choose and model data stores, keep pipelines healthy and the data trustworthy, and secure and govern it. AWS aims it at people with the equivalent of 2 to 3 years of data engineering experience and 1 to 2 years of hands-on AWS.
| Questions | 65: 50 scored and 15 unscored, which aren’t marked |
| Time | 130 minutes |
| Question types | Multiple choice (one answer from four) and multiple response (two or more from five or more) |
| Score | Scaled from 100 to 1,000; 720 to pass |
| Scoring model | Compensatory: you need to pass overall, not in each domain |
| Guessing | An unanswered question counts as wrong, and there is no penalty for a wrong answer, so answer everything |
Check the official certification page for the current price, languages and booking options before you book.
What the exam really tests
Questions describe a data flow (sources, volumes, latency needs, consumers) and ask which service, setting or fix fits. The same few decisions come up across all four domains:
- Batch or streaming? Minutes of delay and files suggest Glue, EMR or Athena; seconds and events suggest Kinesis, MSK or Firehose.
- Serverless or cluster? “Least operational overhead” favors Glue, Athena, Firehose, Redshift Serverless and EMR Serverless over clusters you size and patch.
- How is the data laid out? Partitioning, columnar formats (Parquet, ORC), compression and file sizes decide both speed and cost.
- Who can see what? Lake Formation for fine-grained lake permissions, IAM for services, KMS for encryption, masking for PII.
Troubleshooting questions are common too: a hot shard, a skewed Spark join, a Redshift query waiting on a lock, a crawler that made a hundred tables. Learn the symptom that points to each cause.
How to read a question
- Note the data’s volume, format and arrival pattern, and how fresh the result must be.
- Note the qualifier: lowest cost, least operational overhead, fastest queries, least privilege.
- Rule out options that miss the latency requirement or that need a cluster when the question wants serverless.
- Between the rest, prefer native features (Firehose format conversion, Glue job bookmarks, Redshift COPY) over custom code.
How the domains add up
Data Ingestion and Transformation is the largest domain at about a third of the exam. Data Store Management is next. Operations and security together make up the remaining 40%, and their questions often reuse the services from the first two domains.
Domain 1: Data Ingestion and Transformation 34%
The largest domain covers getting data in and reshaping it: streaming with Kinesis, Firehose and MSK, batch ingestion and migration with DMS, AppFlow and DataSync, scheduling and event triggers, transforming with Glue, EMR and Lambda, file formats, orchestration with Step Functions, MWAA and Glue workflows, pipeline code and CI/CD, and preparing data for generative AI.
Streaming ingestion with Kinesis and MSK
Kinesis Data Streams holds ordered, replayable records in shards; Amazon Data Firehose delivers streams to S3, Redshift and other destinations with no code; Amazon MSK runs Apache Kafka. Know capacity, partition keys and when to use each.
Study notes and 3 free questions on Streaming ingestion with Kinesis and MSKBatch ingestion and migration with DMS and AppFlow
AWS DMS migrates databases with full load and change data capture, AppFlow pulls from SaaS apps, DataSync and Transfer Family move files, and Snowball moves data offline. Know which source each handles.
Study notes and 2 free questions on Batch ingestion and migration with DMS and AppFlowEvent triggers and schedules
Pipelines start on events (a file lands in S3, a record arrives) or on schedules. Know S3 event notifications vs EventBridge, EventBridge Scheduler with time zones, Glue triggers and Lambda event sources.
Study notes and 2 free questions on Event triggers and schedulesThrottling, fan-out and replay
Stream consumers compete for shard throughput, records expire after the retention period, and producers get throttled. Know enhanced fan-out, retention, resharding, backoff and how to replay data safely.
Study notes and 2 free questions on Throttling, fan-out and replayTransformation with AWS Glue
AWS Glue runs serverless Spark and Python ETL jobs. Know DynamicFrames and resolveChoice, job bookmarks for incremental loads, worker types and auto scaling, Flex execution, Glue Studio, and connections to data in a VPC.
Study notes and 3 free questions on Transformation with AWS GlueProcessing with Amazon EMR
Amazon EMR runs Spark, Hive, Presto and other frameworks on EC2, EKS or serverless. Know node types, Spot for task nodes, EMRFS on S3, transient vs long-running clusters, and EMR Serverless.
Study notes and 1 free question on Processing with Amazon EMRFile formats and conversion
Columnar formats (Parquet, ORC) and compression cut query cost and time; row formats (CSV, JSON, Avro) suit ingestion. Know splittable compression, the small files problem, and how to convert with Firehose, Glue or Athena CTAS.
Study notes and 2 free questions on File formats and conversionTroubleshooting transformations
Transformation jobs fail or crawl for a few common reasons: data skew, unsplittable files, out-of-memory executors, schema mismatches and small files. Know how to read the Spark UI and Glue metrics and fix each one.
Study notes and 1 free question on Troubleshooting transformationsOrchestration with Step Functions, MWAA and Glue workflows
Step Functions, Amazon MWAA (managed Apache Airflow) and Glue workflows coordinate pipeline steps with dependencies, retries and error handling. Know which fits, and Standard vs Express workflows.
Study notes and 2 free questions on Orchestration with Step Functions, MWAA and Glue workflowsLambda for data processing
Lambda handles light, event-driven data work: transform records, validate files, enrich streams. Know its limits, event source mappings for Kinesis, DynamoDB Streams and SQS, error handling, and when to use Glue instead.
Study notes and 1 free question on Lambda for data processingData APIs and source connections
Pipelines connect to sources through APIs and connectors: API Gateway in front of Kinesis or Lambda, JDBC and ODBC connections, Redshift Data API, Athena and Glue APIs. Know how to expose and consume data safely.
Study notes and 1 free question on Data APIs and source connectionsIaC, AWS SAM and CI/CD for pipelines
Build pipelines as code with CloudFormation, the AWS CDK or AWS SAM, store them in Git, and deploy through CI/CD. Know drift detection, environments, testing data code and versioning Glue scripts.
Study notes and 1 free question on IaC, AWS SAM and CI/CD for pipelinesLLMs and vectors in data pipelines
Data engineers prepare data for generative AI: chunking and embedding documents, loading vector stores, keeping them in sync, and using models in pipelines through Amazon Bedrock. Know the AWS services for each step.
Study notes and 1 free question on LLMs and vectors in data pipelines
Domain 2: Data Store Management 26%
Data Store Management asks you to choose the right store (S3, Redshift, DynamoDB, RDS, OpenSearch and others), design Redshift and DynamoDB tables, use open table formats such as Apache Iceberg, catalog data with Glue, partition and compress it for fast, cheap queries, manage its lifecycle and retention, and evolve schemas safely.
Choosing a data store
Choose a data store by access pattern: S3 for the data lake, Redshift for warehouse analytics, DynamoDB for key lookups at scale, RDS and Aurora for transactions, OpenSearch for search and logs, and others for graphs, time series and caching.
Study notes and 1 free question on Choosing a data storeRedshift table design
Redshift performance depends on table design: distribution styles (AUTO, EVEN, KEY, ALL), sort keys, compression encodings and workload management. Know how to spot skew and fix slow joins.
Study notes and 2 free questions on Redshift table designRedshift Spectrum, federated queries and materialized views
Redshift can query data without loading it: Spectrum reads S3, federated queries read RDS and Aurora, and data sharing reads other clusters. Materialized views precompute results for fast dashboards.
Study notes and 2 free questions on Redshift Spectrum, federated queries and materialized viewsLoading and unloading Redshift
COPY loads data into Redshift in parallel from S3 and other sources; UNLOAD exports query results to S3. Know file splitting, manifests, IAM roles, auto-copy, staging tables for upserts, and streaming ingestion.
Study notes and 2 free questions on Loading and unloading RedshiftDynamoDB data modeling
DynamoDB performance depends on keys: a high-cardinality partition key spreads load, sort keys enable range queries, and indexes add access patterns. Know capacity modes, GSIs vs LSIs, streams, TTL and exporting to S3.
Study notes and 2 free questions on DynamoDB data modelingOpen table formats and Apache Iceberg
Open table formats such as Apache Iceberg add transactions, updates and deletes, schema evolution and time travel to data in S3. Know how Athena, Glue, EMR and Redshift use Iceberg, S3 Tables, and the maintenance tables need.
Study notes and 2 free questions on Open table formats and Apache IcebergGlue Data Catalog and crawlers
The Glue Data Catalog holds table definitions that Athena, Redshift Spectrum, EMR and Glue share. Crawlers infer schemas and partitions; partition projection and catalog APIs avoid crawling. Know crawler settings and connections.
Study notes and 2 free questions on Glue Data Catalog and crawlersPartitioning, compression and optimization
Partitioning and file layout decide how much data Athena, Spectrum and Glue scan. Partition on columns used in filters, avoid too many small partitions and files, and use partition projection or Iceberg hidden partitioning.
Study notes and 2 free questions on Partitioning, compression and optimizationData lifecycle, versioning and TTL
Data lifecycle questions balance cost and access: S3 storage classes and lifecycle rules, Intelligent-Tiering, Glacier retrieval times, DynamoDB TTL, Redshift unloading, retention rules and deletion for compliance.
Study notes and 1 free question on Data lifecycle, versioning and TTLSchema design, conversion and lineage
Schemas change over time. Know how crawlers, Glue jobs, Athena with Parquet or Iceberg, Redshift and streaming schema registries handle new, renamed and changed columns without breaking pipelines.
Study notes and 1 free question on Schema design, conversion and lineage
Domain 3: Data Operations and Support 22%
This domain is about running pipelines and using the data: querying with Athena, preparing data with DataBrew and SageMaker, analyzing and visualizing with SQL and Amazon Quick Sight, monitoring and logging pipelines, troubleshooting failures and slow jobs, and checking data quality before bad data spreads.
Querying with Athena
Athena runs serverless SQL on data in S3 and charges per TB scanned. Know how columnar formats, partitions and compression cut cost, plus workgroups, CTAS, federated queries, Spark notebooks and query result reuse.
Study notes and 3 free questions on Querying with AthenaData preparation with DataBrew and SageMaker
Data preparation questions ask how analysts and data engineers clean and shape data with little code. Know Glue DataBrew recipes and profiles, SageMaker Data Wrangler, Glue Studio visual jobs and when to write Spark instead.
Study notes and 1 free question on Data preparation with DataBrew and SageMakerSQL analysis and visualization
The exam expects working SQL: joins, aggregations, window functions, CTEs and handling nulls and duplicates. Know Redshift and Athena specifics such as PartiQL for nested data and how to visualize results in Amazon Quick Sight.
Study notes and 2 free questions on SQL analysis and visualizationMonitoring and logging pipelines
Monitoring data pipelines means metrics, logs, alarms and events: CloudWatch for Glue, Lambda, Kinesis and Redshift; CloudTrail for API activity; EventBridge for state changes; and notifications through SNS.
Study notes and 3 free questions on Monitoring and logging pipelinesTroubleshooting and tuning pipelines
Troubleshooting questions describe a failing or slow pipeline and ask for the cause: throttling, skew, small files, memory errors, permissions, timeouts or missing partitions. Know the signal for each and the targeted fix.
Study notes and 3 free questions on Troubleshooting and tuning pipelinesData quality
Data quality checks catch bad data before it spreads. Know AWS Glue Data Quality rules written in DQDL, DataBrew profiles and rules, quarantining bad records, and checks for completeness, uniqueness, freshness and validity.
Study notes and 2 free questions on Data quality
Domain 4: Data Security and Governance 18%
Security and governance questions cover IAM roles for pipeline services, private network access to sources, secrets, fine-grained permissions with Lake Formation, Redshift users, roles, masking and data sharing, encryption with KMS (including across accounts), audit logging, PII discovery and data governance.
IAM for data pipelines
IAM controls who and what can reach data. Know roles for Glue, EMR, Lambda and Redshift, least privilege, resource policies, cross-account access, service-linked roles, and how IAM policy evaluation decides allow or deny.
Study notes and 1 free question on IAM for data pipelinesNetwork access to data sources
Data pipelines often run in VPCs and must reach S3, databases and AWS APIs privately. Know gateway and interface endpoints, Glue connections, security groups, Redshift enhanced VPC routing and endpoint policies.
Study notes and 1 free question on Network access to data sourcesCredentials and secrets
Pipelines need database passwords and API keys without storing them in code. Know AWS Secrets Manager with automatic rotation, Systems Manager Parameter Store, and how Glue, Redshift, DMS and Lambda read secrets.
Study notes and 2 free questions on Credentials and secretsPermissions with Lake Formation
AWS Lake Formation adds fine-grained, database-style permissions to data lake tables: grants on databases, tables, columns, rows and cells, LF-Tags for scale, and cross-account sharing. Athena, Redshift Spectrum, Glue and EMR enforce it.
Study notes and 3 free questions on Permissions with Lake FormationRedshift users, roles and data sharing
Redshift security covers authentication (IAM, identity providers), authorization (GRANTs, role-based access control, row-level security, column grants, dynamic data masking), encryption, network isolation and audit logging.
Study notes and 2 free questions on Redshift users, roles and data sharingEncryption and masking
Encrypt data at rest and in transit across S3, Redshift, Glue, Kinesis, DynamoDB and EMR. Know KMS key types, SSE-S3 vs SSE-KMS, S3 Bucket Keys, key policies, cross-account keys and TLS enforcement.
Study notes and 2 free questions on Encryption and maskingAudit logs, PII and data governance
Governance questions ask how to prove who accessed data, find sensitive data, and enforce rules across accounts. Know CloudTrail data events, CloudTrail Lake, Macie, AWS Config, Organizations SCPs, data sharing and catalog governance.
Study notes and 1 free question on Audit logs, PII and data governance
A 6-week study plan
This plan assumes about an hour on weekdays and a longer, hands-on session at the weekend. If you build data pipelines on AWS already, four weeks may be enough.
| Week | Focus | Do this |
|---|---|---|
| 1 | Baseline and ingestion | Take the free practice exam in timed mode. Then Kinesis Data Streams (shards, keys, fan-out, retention), Firehose, MSK, DMS, AppFlow, DataSync, and event triggers and schedules. |
| 2 | Transformation and orchestration | Glue (DynamicFrames, bookmarks, worker types, Flex), EMR and EMR Serverless, Lambda for data, file formats, Step Functions, MWAA and Glue workflows. |
| 3 | Data stores | Choosing stores, Redshift design (distribution and sort keys, COPY, Spectrum, materialized views), DynamoDB modeling, Iceberg, Glue Data Catalog and crawlers, partitioning, lifecycle. |
| 4 | Operations | Athena (partitions, CTAS, SerDes, Iceberg), DataBrew, Quick Sight, CloudWatch for pipelines, troubleshooting Spark, Redshift and Kinesis, Glue Data Quality. |
| 5 | Security and governance | IAM for Glue, Redshift and EMR, VPC endpoints, secrets, Lake Formation (LF-tags, data filters, cross-account), Redshift masking and data sharing, KMS, CloudTrail, Macie. |
| 6 | Exam practice | Full timed practice exams. Review every wrong answer and rebuild the weakest pieces by hand. |
How to use practice questions well
- Link symptoms to causes. Keep a list like “one busy Redshift node → distribution skew” and “Lambda iterator age rising → consumer can’t keep up”.
- Read the wrong options. They are usually real features that solve a neighboring problem.
- Don’t memorize questions. The real exam won’t reuse them.
- Aim for 80% or more across a few full timed practice exams before you book.
Get hands-on
In a personal account with a budget alert set: land CSV files in S3, crawl them, convert them to partitioned Parquet with a Glue job, query both with Athena and compare data scanned; send records to a Kinesis stream and deliver them with Firehose; load a table into Redshift Serverless with COPY. Delete everything afterward.
Frequently asked questions
Do I need to know Spark or Python?
You need to read and reason about them, not write them from memory. Expect questions about Spark concepts (partitions, skew, shuffles), SQL (window functions, joins, CTAS) and pipeline code practices, but not long code listings.
How does this compare with the Solutions Architect exam?
It goes much deeper on analytics services (Glue, Redshift, Kinesis, Athena, Lake Formation) and less deep on general architecture. Some people take SAA first for the broader AWS foundation, but it isn’t required.
Is there an analytics specialty exam instead?
AWS retired the Data Analytics – Specialty exam; Data Engineer – Associate covers much of the same ground.
Are the practice questions the real exam questions?
No. Every question on this site is original, written from the public exam guide and checked against AWS documentation. Using real exam questions breaks the AWS Certification Program Agreement.
Test yourself
The free DEA-C01 practice exam has 65 questions with an explanation for every option. No sign-up needed.
Want to be sure you're ready? The 5 full-length practice sets add 325 new questions, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets