Exam Room · Advanced Generative AI Developer

A Domain-by-Domain Checklist for the Generative AI Developer Exam

· 44 min read

Generative AI Development · part of The Exam Room

The whole GenAI track, sorted into the five scored domains. Each domain leads with the cheat sheet that anchors it, then the decisions to work through, the pop quizzes to drill, and the labs to build with your own hands. The domains overlap in real systems, so a few posts could sit under two headings; they are filed under the one they teach best.

How to use this

Read each domain heading and its scope line first, then run down the list. The order within each domain is deliberate: every list starts at the deciding-level idea and works toward its refinements, so the post above you is always the one the post below leans on. Top to bottom is the intended path. A line you can explain out loud, tick. A line that makes you hesitate is the next hour of revision. The pop quizzes are the fastest way to close a gap; the labs are the slowest and the ones that actually stick.

The five scored domains and their weight:

Domain Weight
1. Foundation Model Integration, Data Management, and Compliance 31%
2. Implementation and Integration 26%
3. AI Safety, Security, and Governance 20%
4. Operational Efficiency and Optimization 12%
5. Testing, Validation, and Troubleshooting 11%

Before the first lab, do the one-time, once-per-account setup: run preflight.sh (it ships in every lab zip) to confirm your account is ready, then deploy the lab reaper once. The reaper is a standing backstop that auto-deletes any lab you forget to tear down after 24 hours, so a forgotten stack becomes a deleted stack instead of a running bill.

All in, the track is about 80 h 39 min of reading and roughly 11 h 30 min of hands-on lab work (lab times are active time; long-running jobs run on their own clock).

Weight is where the marks are, not where the difficulty is. Domain 1 is a third of the score on its own; give it a third of the time.

Domain 1: Foundation Model Integration, Data Management, and Compliance (31%)

About 32 h of reading and 5 h 30 min of hands-on lab time.

Picking the right foundation model, feeding it the right data, and grounding it in your own documents. The biggest domain by a wide margin, and the one where retrieval lives.

Anchor cheat sheets: Model Selection and Inference · RAG and Vector Stores · Model Customisation · 50 min

Background from the Service Manual: S3

Design the solution

About 1 h 13 min of reading.

About 5 h 35 min of reading.

About 2 h 05 min of reading.

About 11 h 44 min of reading.

About 3 h 12 min of reading.

About 36 min of reading.

About 4 h 35 min of reading.

The guide scores this material in Domain 1, under Task 1.6. It is listed again in Domain 2 beside the agent and delivery work it is built on, so a reader working either way round reaches it.

About 44 min of reading.

Build it

About 1 h 26 min of reading and 5 h 30 min of hands-on lab time.

Ready when you can pick a model and inference option for a stated workload, design a retrieval pipeline end to end (embedding model, distance metric, vector store, chunking, top-K, metadata), and say when fine-tuning beats retrieval and when it does not.

About 19 h 01 min of reading and 3 h of hands-on lab time.

Turning a model into an application: prompts, tools, agents, memory, and how responses reach the caller.

Anchor cheat sheets: Prompt Engineering · Agents and Orchestration · 21 min

Prompts and sampling

About 2 h 53 min of reading.

The guide scores prompt engineering in Domain 1 (Task 1.6); it is repeated here because in practice it sits beside the agent and delivery work below.

About 5 h 31 min of reading.

About 1 h 30 min of reading.

About 4 h 37 min of reading.

About 2 h 52 min of reading.

Five posts are listed elsewhere, under the domain they teach best, and each one still carries work this domain leans on. They are not extra reading; they are the ones to re-read if this domain feels thin when you revise it on its own.

Drill the pop quizzes

About 34 min of reading.

Build it

About 43 min of reading and 3 h of hands-on lab time.

Ready when you can wire a tool an agent can call safely, choose between an agent, Step Functions, and a Flow for a given job, and pick where conversation state lives.

About 12 h 43 min of reading and 30 min of hands-on lab time.

Keeping the app safe to run: guardrails, injection and exfiltration defence, identity and encryption, responsible-AI evidence, and the audit trail.

Anchor cheat sheet: Security and Responsible AI · 20 min

Scope the workload first

About 35 min of reading.

  • Place a generative-AI use in the Generative AI Security Scoping Matrix, from a consumer app at Scope 1 through to a model trained from scratch at Scope 5.
  • Say which controls the scope makes yours to implement and which you can only ask a provider to assure, and know that an application built on Bedrock is Scope 3 however managed the service is.
  • Name what fine-tuning adds when it moves a use to Scope 4: training-data provenance, the dataset as a governed artefact, and a custom model that can memorise what it was trained on.

  • Deciding Which GenAI Security Controls Are Yours to Own · 35 min

    Guardrails and moderation

About 1 h 47 min of reading.

About 3 h 58 min of reading.

About 1 h 50 min of reading.

About 3 h 35 min of reading.

About 27 min of reading.

Build it

About 11 min of reading and 30 min of hands-on lab time.

Ready when you can name where access control belongs (retrieval and tools, not the prompt), attach a versioned guardrail, encrypt every data surface with KMS, and say which service produces bias or audit evidence.

About 13 h 46 min of reading.

Running it affordably and reliably: cost levers, caching, throughput, latency, resilience, and observability.

Anchor cheat sheet: Evaluation, Cost, and Operations · 17 min

Cost and caching

About 5 h 08 min of reading.

About 4 h 39 min of reading.

About 3 h 32 min of reading.

About 10 min of reading.

Ready when you can reach for the right cost lever for a given spend shape (caching, batching, routing, provisioned throughput), keep latency down without hurting quality, and say what to watch in CloudWatch and an agent trace.

About 10 h 53 min of reading and 2 h 30 min of hands-on lab time.

Proving it works and finding out why it does not: evaluation, judging, hallucination measurement, A/B testing, and reproducibility.

Anchor cheat sheets: Evaluation Metrics · Evaluation, Cost, and Operations (the evaluation half) · 36 min

Evaluate and troubleshoot

About 8 h 54 min of reading.

About 29 min of reading.

Build it

About 54 min of reading and 2 h 30 min of hands-on lab time.

Ready when you can build a golden set, score retrieval and generation separately, tell faithfulness from correctness, and trace a wrong answer back to the stage that caused it.

Two things pull all five domains into one picture. Read the first, do the second.

  • Taking a GenAI Feature From Proof of Concept to Production maps the gap between a demo and a shipped feature across evaluation, safety, security, reliability, cost, observability, governance, and operations. It is the whole checklist in prose. · 38 min
  • Lab 10: The Capstone builds one feature end to end and exercises every domain at once. If you can finish it without notes, you are ready. · 7 min read + ~1 h 30 min hands-on

Good luck. 🍀

These posts are LLM-aided. Backbone, original writing, and structure by Craig. Research and editing by Craig + LLM. Proof-reading by Craig.