Best DevOps and Cloud Certifications 2026: 16 Exams, Prices, Validity

Every few weeks someone sends me a screenshot of a certification roadmap with twenty logos on it and asks which ones to buy. My honest answer after fourteen years of AWS, GCP, Azure and Kubernetes work is "two, maybe three", and the right two depend on what job you want next. This post is the 2026 version of that answer: the best DevOps and cloud certifications by role, with every price, duration, validity period and curriculum detail checked against the vendor pages on 10 November 2026. It covers the CNCF Kubernetes exams (CKA, CKAD, CKS), the AWS exams including the new AI ones, Azure, Google Cloud and Terraform, plus what the hiring data says about whether any of it matters.

Do DevOps certifications still matter in 2026?

They matter less than experience and more than cynics claim. The Linux Foundation's 2025 State of Tech Talent report, based on more than 500 hiring and training leaders, found that 71% of organisations consider certifications important when recruiting. The same report found 72% now prioritise upskilling existing staff over hiring (up from 48% in 2024), which is the quieter reason certifications persist: they are what training budgets buy.

Here is how I read that as someone who has sat on both sides of the interview table. A certification gets you past a filter. It rarely wins the offer. What wins is being able to talk through a broken deployment, a cost spike or a failed upgrade without bluffing. So the useful question is not "which certification is most respected" but "which exam forces me to learn the thing I will be asked about".

That favours hands-on exams. A multiple-choice exam checks that you recognise the right answer. A performance-based exam checks that you can produce it on a live system with a clock running, which is much closer to the job and much harder to cram for.

AI has sharpened this. When an agent can draft a Helm chart or a VPC module in seconds, the scarce skill is reviewing and debugging that output. I wrote about the wider shift in the DevOps Roadmap 2026; certifications that test troubleshooting age better than ones that test recall.

DevOps and cloud certifications compared: prices and validity

This table is the core of the post. Prices are exam-only list prices in US dollars before tax. Where the vendor page does not state something, I say so rather than guess.

Certification	Format and length	Price (USD)	Valid for	Notable detail	Source
CKA (Certified Kubernetes Administrator)	Hands-on, 2 hours	$445, one retake	2 years	Kubernetes v1.37; troubleshooting is 30%	Linux Foundation
CKAD (Application Developer)	Hands-on, 2 hours	$445, one retake	2 years	Environment, config and security is 25%	Linux Foundation
CKS (Security Specialist)	Hands-on, 2 hours	$445, one retake	2 years	Must pass CKA first; 67% to pass	Linux Foundation
AWS Solutions Architect Associate (SAA-C03)	65 questions, 130 min	$150	3 years	Still the most common first AWS exam	AWS
AWS CloudOps Engineer Associate (SOA-C03)	65 questions, 130 min	$150	3 years	Renamed from SysOps Administrator	AWS
AWS DevOps Engineer Professional (DOP-C02)	75 questions, 180 min	$300	3 years	Passing it also recertifies CloudOps	AWS
AWS AI Practitioner (AIF-C01)	65 questions, 90 min	$100	3 years	Foundational, not hands-on	AWS
AWS ML Engineer Associate (MLA-C01)	65 questions, 130 min	$150	3 years	English moved to MLA-C02 beta (85 questions, 170 min, $75) after 28 Sep 2026	AWS
AWS Generative AI Developer Professional (AIP-C01)	75 questions, 180 min	$300	not stated on page	Newest AWS professional exam	AWS
Azure Administrator Associate (AZ-104)	Role-based, 100 or 120 min	varies by country	1 year, free renewal	700 of 1000 to pass	Microsoft Learn
Azure DevOps Engineer Expert (AZ-400)	Role-based	varies by country	1 year, free renewal	Requires AZ-104 or the Azure Developer cert	Microsoft Learn
Azure AI Apps and Agents Developer (AI-103)	120 min	varies by country	1 year, free renewal	Replaced AI-102; built on Microsoft Foundry	Microsoft Learn
Google Professional Cloud Architect	50 to 60 questions, 2 hours	$200	2 years	$100 one-hour renewal exam	Google Cloud
Google Professional Cloud DevOps Engineer	50 to 60 questions, 2 hours	$200	2 years	SRE practice and CI/CD heavy	Google Cloud
Google Generative AI Leader	50 to 60 questions, 90 min	$99	3 years	Business level, no hands-on needed	Google Cloud
HashiCorp Terraform Associate (004)	Multiple choice, 1 hour	$70.50	2 years	Tests Terraform 1.12; no free retake	HashiCorp

Three things in that table surprise people. First, the CNCF exams are now valid for two years, not three; the Linux Foundation FAQ says certifications earned before 1 April 2024 kept three years. Second, Microsoft role-based certifications expire every year, though renewal is a free online assessment. Third, AWS quietly renamed SysOps Administrator to CloudOps Engineer Associate with the SOA-C03 exam; existing SysOps holders keep their badge until it expires.

Is the CKA worth it in 2026?

For anyone who touches Kubernetes, yes, and it is the only certification I would pay for out of my own pocket. The CKA is two hours of tasks on real clusters running Kubernetes v1.37, and the Linux Foundation says the exam environment tracks each new minor release within four to eight weeks. The v1.37 curriculum weights are troubleshooting 30%, cluster architecture and installation 25%, services and networking 20%, workloads and scheduling 15%, and storage 10%. You need 66% to pass.

The exam changed meaningfully on 18 February 2025. It now expects you to install components with Helm and Kustomize, route traffic with the Gateway API, and install and configure operators and CRDs. That is a better match for what a cluster operator does in 2026, and it means study material from 2023 will leave gaps.

The cost is real: $445 for two years works out to roughly $222 a year of validity, the most expensive item in this post. You do get one free retake and two killer.sh simulator sessions with the purchase. If you want the full preparation plan, I wrote it up as a step-by-step CKA exam study guide for 2026.

CKA vs CKAD vs CKS: which Kubernetes exam first?

Pick by job, not by prestige.

• CKA if you operate clusters: upgrades, etcd backups, RBAC, networking, node problems. It is the default for DevOps and platform engineers.
• CKAD if you ship applications to clusters someone else runs. Its domains are application design and build (20%), deployment (20%), observability and maintenance (15%), environment, configuration and security (25%), and services and networking (20%). There is a lot of overlap with CKA, so passing one makes the other a short step.
• CKS after CKA, never before; the Linux Foundation requires you to have passed the CKA. It covers supply chain security, runtime detection with tools like Falco, Pod Security Standards and audit logs. A new rule worth knowing: earning or renewing CKS on or after 18 June 2026 also extends your CKA to match, according to the LF FAQ.

Collect all five Kubernetes exams (KCNA, KCSA, CKA, CKAD, CKS) and CNCF names you a Kubestronaut. The Golden Kubestronaut tier requires every active CNCF certification, and the CNCF said on 27 October 2026 that more than 570 people hold it. It is a fine personal goal. I have never seen a job description ask for it.

Which cloud certification should I get first: AWS, Azure or GCP?

Get the one for the cloud you work in or want to work in. If you have no preference, the job market leans AWS, which I compared with real numbers in AWS vs Azure vs GCP 2026.

AWS. The Solutions Architect Associate at $150 is still the best first cloud exam for most people because it forces you to understand VPCs, IAM and storage trade-offs. For operations roles, the CloudOps Engineer Associate is the closer fit. The DevOps Engineer Professional at $300 is worth it once you have a year or two of real AWS work, not before. AWS also lists the Advanced Networking Specialty as retiring on 31 December 2026, so do not start it now.

Azure. Microsoft does not publish one global price; the fee depends on the country where you sit the exam. The structure is what matters: AZ-400 gives the DevOps Engineer Expert title only if you also hold AZ-104 or the Azure Developer certification, and all role-based certifications expire annually but renew for free online. Microsoft also lets you open Microsoft Learn in a split screen during role-based exams, per its exam experience page, which rewards knowing where things are documented.

Google Cloud. The Professional Cloud DevOps Engineer is the most SRE-flavoured cloud exam of the three, with error budgets and observability prominent. At $200 it is reasonable value if you run GKE. The Professional Cloud Architect now has a one-hour $100 renewal exam whose case study is about generative AI, which tells you where Google thinks architects spend their time.

Are AI certifications worth it for DevOps engineers?

Mostly no, with one exception. The foundational AI exams (AWS AI Practitioner at $100, Google Generative AI Leader at $99) are aimed at a broad audience. Google's page says its exam is for anyone "with or without hands-on technical experience". They are fine for a manager or a career changer. For an infrastructure engineer they signal little.

The exception is the newer builder-level exams if your job is actually serving models or agents. AWS now has the Generative AI Developer Professional (AIP-C01, $300, 180 minutes), and the ML Engineer Associate is being revised as MLA-C02 (in beta; English MLA-C01 ended on 28 September 2026), which adds Bedrock, RAG architectures and agentic AI. Microsoft retired AI-102 and replaced it with AI-103, the Azure AI Apps and Agents Developer Associate built on Microsoft Foundry.

My view: the AI platform work I see in 2026 is mostly Kubernetes, GPUs, networking, identity and cost control with a model in the middle. A CKA plus hands-on time running something like vLLM teaches more of that than any AI badge. I run PandaStack, my company, a Firecracker microVM cloud for AI agents, and almost none of the hard problems there are model problems.

How much do certifications cost per year of validity?

Validity periods differ so much that list price alone misleads: a $150 exam that lasts three years can cost less per year than a $200 exam that lasts two. So I divide the fee by the validity period. Here is the small script I use; the numbers come from the table above.

#!/usr/bin/env bash
# cert-cost.sh: USD exam fee divided by years of validity (fees checked 10 Nov 2026).
# Taxes, FX surcharges, bundles and discounts are excluded. Requires bash and awk only.
cat <<'CSV' | awk -F, '{ printf "%-30s $%7.2f  %d yr  $%6.2f/yr\n", $1, $2, $3, $2/$3 }'
CKA (Kubernetes v1.37),445,2
CKS (needs CKA),445,2
GCP Professional DevOps,200,2
AWS DevOps Engineer Pro,300,3
AWS Solutions Architect Assoc,150,3
Terraform Associate (004),70.50,2
AWS AI Practitioner,100,3
Google Gen AI Leader,99,3
CSV

Running it with bash cert-cost.sh prints:

CKA (Kubernetes v1.37)         $ 445.00  2 yr  $222.50/yr
CKS (needs CKA)                $ 445.00  2 yr  $222.50/yr
GCP Professional DevOps        $ 200.00  2 yr  $100.00/yr
AWS DevOps Engineer Pro        $ 300.00  3 yr  $100.00/yr
AWS Solutions Architect Assoc  $ 150.00  3 yr  $ 50.00/yr
Terraform Associate (004)      $  70.50  2 yr  $ 35.25/yr
AWS AI Practitioner            $ 100.00  3 yr  $ 33.33/yr
Google Gen AI Leader           $  99.00  3 yr  $ 33.00/yr

The CNCF exams are the most expensive per year by a wide margin. They are also the only ones in the list where you type commands into a real cluster for two hours, which is why I still rank the CKA first. Note that the Terraform Associate does not include a free retake, so a failed attempt doubles its cost.

What hiring managers actually look for

When I review CVs for infrastructure roles, the certification line takes about two seconds. What I spend time on is evidence that someone has run something: a repository with Terraform and a CI pipeline, a homelab cluster they upgraded, a postmortem they wrote. In interviews I ask people to walk me through a failure, and the answers separate people who have operated systems from people who have read about them. My list of what gets asked is in the DevOps interview questions for 2026 post.

So treat certifications as structured syllabuses. The CKA curriculum is a decent checklist of what a cluster operator should know. The AWS associate exams force you to learn the boring parts of IAM and networking. Use them for that, and pair each one with a small project you can show.

FAQ

What is the best DevOps certification in 2026?

For most DevOps and platform engineers it is the CKA. It is hands-on, vendor neutral, costs $445 with one retake, and tests Kubernetes v1.37 with troubleshooting as its largest domain at 30%. Pair it with an associate-level exam for the cloud you use.

How long are DevOps certifications valid?

CNCF exams (CKA, CKAD, CKS) and Terraform Associate are valid for two years. AWS certifications are valid for three years. Microsoft role-based certifications expire every year but renew for free with an online assessment, and Google Professional certifications add two years on each renewal.

Is the AWS Solutions Architect Associate still worth it?

Yes, as a first cloud certification. The SAA-C03 exam costs $150, runs 130 minutes for 65 questions, and stays valid for three years, which makes it about $50 per year of validity. It is multiple choice, so back it up with real AWS work.

Should I get an AI certification as a DevOps engineer?

Only a builder-level one, and only if your job involves serving models or agents. The foundational exams from AWS and Google are aimed at non-specialists. Kubernetes, networking and cost skills transfer more directly to AI infrastructure work.

This quarter, if I were choosing for myself or someone on my team, I would book the CKA for eight weeks out, study from the v1.37 curriculum rather than old courses, and add the associate exam for whichever cloud the team actually runs on. I would skip the AI foundational badges, spend that money on a month of GPU time, and deploy something real with it.

---

Related: DevOps Roadmap 2026: Skills, Certifications and What AI Changed, AWS vs Azure vs GCP 2026: Which Cloud to Learn First, by the Numbers and Is Kubernetes Still Worth It in 2026? v1.37, 82% in Production, Real Costs.