The AWS Certified Cloud Practitioner exam (CLF-C02) validates foundational knowledge of AWS Cloud concepts, services, and terminology. These five concepts show up across domains — learn them before diving into service trivia.
1. Cloud Concepts and Value Proposition#
Cloud concepts account for 24% of CLF-C02 — get this domain solid before memorizing service names.
Tip
Think of AWS like a utility: you use shared infrastructure and pay for what you consume — CapEx shifts to OpEx.
Benefits of Cloud Computing#
- Trade upfront expense for variable expense — Pay only for what you consume
- Benefit from massive economies of scale — Lower costs due to aggregated usage
- Stop guessing capacity — Scale up or down based on actual demand
- Increase speed and agility — Deploy resources in minutes, not months
- Stop spending money on data centers — Focus on your business, not infrastructure
- Go global in minutes — Deploy worldwide with a few clicks
Cloud Computing Models#
| Model | Description | Example |
|---|---|---|
| IaaS | Infrastructure as a Service — virtual machines, storage, networking | Amazon EC2, Amazon EBS |
| PaaS | Platform as a Service — managed platforms for applications | AWS Elastic Beanstalk |
| SaaS | Software as a Service — fully managed applications | Amazon WorkSpaces |
Cloud Deployment Models#
| Model | Description | Use Case |
|---|---|---|
| Public Cloud | Entirely on AWS, accessed over the internet | Startups, web applications |
| Private Cloud | On-premises using cloud technologies | Regulated industries |
| Hybrid Cloud | Combination of public and private | Data residency requirements |
Note
AWS offers 200+ services across Regions worldwide. It launched the public cloud market in 2006 — exam questions still reference that history in business-value scenarios.
Test Your Understanding#
A company wants to avoid guessing infrastructure capacity. Which cloud benefit addresses this?
2. AWS Global Infrastructure#
Understanding how AWS is organized geographically is crucial for designing resilient applications:
Geographic Components#
| Component | Description | Key Facts |
|---|---|---|
| Regions | Geographic areas with multiple data centers | 30+ Regions worldwide, choose based on latency, compliance, and cost |
| Availability Zones (AZs) | Isolated data centers within a Region | Each Region has 3+ AZs, connected via low-latency links |
| Edge Locations | Points of presence for content delivery | 400+ Edge Locations for CloudFront and Route 53 |
| Local Zones | AWS infrastructure closer to end users | For latency-sensitive applications |
Tip
When choosing a Region, consider: data residency requirements, proximity to users (latency), service availability, and pricing (costs vary by Region).
High Availability Design#
Region: us-east-1 (N. Virginia)
├── Availability Zone: us-east-1a
│ └── Your Application Instance
├── Availability Zone: us-east-1b
│ └── Your Application Instance (replica)
└── Availability Zone: us-east-1c
└── Your Application Instance (replica)
- Single AZ — No protection against data center failures
- Multi-AZ — Survives single data center failures
- Multi-Region — Survives entire Region failures (disaster recovery)
Note
Availability Zones are physically separated by meaningful distance (many kilometers), but close enough for low-latency synchronous replication.
What is the minimum number of Availability Zones in an AWS Region?
3. Core AWS Services#
The exam covers a wide range of services — here are the essential ones organized by category:
Compute Services#
| Service | Description | Use Case |
|---|---|---|
| Amazon EC2 | Virtual servers in the cloud | Web servers, application hosting |
| AWS Lambda | Serverless compute, runs code in response to events | Event-driven processing, APIs |
| Amazon ECS/EKS | Container orchestration (Docker/Kubernetes) | Microservices architectures |
| AWS Elastic Beanstalk | PaaS for deploying applications | Simplified app deployment |
Tip
Lambda is serverless — you don't manage any servers! You pay only for compute time consumed, making it ideal for variable or unpredictable workloads.
Storage Services#
| Service | Type | Best For |
|---|---|---|
| Amazon S3 | Object storage | Files, backups, static websites, data lakes |
| Amazon EBS | Block storage | EC2 instance storage, databases |
| Amazon EFS | File storage | Shared file systems across EC2 instances |
| Amazon S3 Glacier | Archive storage | Long-term backup, compliance archives |
S3 Storage Classes#
| Class | Access Pattern | Durability |
|---|---|---|
| S3 Standard | Frequent access | 99.999999999% (11 9's) |
| S3 Intelligent-Tiering | Variable access | Automatic cost optimization |
| S3 Standard-IA | Infrequent access | Lower cost, retrieval fee |
| S3 Glacier | Archive (minutes to hours retrieval) | Lowest cost for archives |
Database Services#
| Service | Type | Use Case |
|---|---|---|
| Amazon RDS | Managed relational DB | MySQL, PostgreSQL, SQL Server, Oracle |
| Amazon DynamoDB | Managed NoSQL | Key-value, high-performance, serverless |
| Amazon Redshift | Data warehouse | Analytics, business intelligence |
| Amazon ElastiCache | In-memory caching | Session storage, real-time analytics |
Networking Services#
- Amazon VPC — Your own isolated network in AWS
- Elastic Load Balancing (ELB) — Distribute traffic across instances
- Amazon Route 53 — DNS service with health checking
- Amazon CloudFront — Content delivery network (CDN)
- AWS Direct Connect — Dedicated network connection to AWS
Which storage service is best for storing objects like images and videos with high durability?
4. Security and Compliance#
Security, Compliance, and Support is a large CLF-C02 domain (~30%). Shared responsibility and IAM basics show up constantly.
The Shared Responsibility Model#
This is critical for the exam! Understanding who is responsible for what:
| AWS Responsibility ("Security OF the Cloud") | Customer Responsibility ("Security IN the Cloud") |
|---|---|
| Physical data center security | Customer data and encryption |
| Hardware and infrastructure | Identity and access management (IAM) |
| Network infrastructure | Operating system configuration (for EC2) |
| Virtualization layer | Network and firewall configuration |
| Managed service platforms | Application security |
Warning
The line shifts based on service type: With EC2 (IaaS), you manage the OS. With Lambda (serverless), AWS manages everything except your code and data.
AWS Identity and Access Management (IAM)#
IAM is the foundation of AWS security:
- Users — Individual identities for people
- Groups — Collections of users with shared permissions
- Roles — Temporary credentials for services and applications
- Policies — JSON documents defining permissions
Tip
IAM Best Practices:
- Never use the root account for daily tasks
- Enable MFA on all accounts, especially root
- Follow the principle of least privilege
- Use roles for applications, not access keys
Key Security Services#
| Service | Purpose |
|---|---|
| AWS IAM | Identity and access management |
| AWS Organizations | Centrally manage multiple AWS accounts |
| AWS Shield | DDoS protection (Standard is free!) |
| AWS WAF | Web application firewall |
| Amazon Inspector | Automated vulnerability assessments |
| AWS KMS | Encryption key management |
| Amazon GuardDuty | Intelligent threat detection |
| AWS CloudTrail | API call logging and auditing |
Compliance Programs#
AWS maintains certifications and attestations including:
- SOC 1, 2, 3 — Service Organization Controls
- PCI DSS — Payment Card Industry
- HIPAA — Healthcare (requires BAA)
- GDPR — European data protection
- FedRAMP — US Government
According to the Shared Responsibility Model, who is responsible for patching the guest OS on EC2 instances?
5. Billing, Pricing, and Support#
Understanding AWS pricing (12% of the exam) helps you optimize costs and choose the right support:
AWS Free Tier#
AWS offers three types of free offerings:
| Type | Description | Examples |
|---|---|---|
| Always Free | Never expires, within limits | Lambda (1M requests/month), DynamoDB (25GB) |
| 12 Months Free | Free for 12 months after signup | EC2 (750 hours/month), S3 (5GB) |
| Trials | Short-term free trials | Amazon SageMaker, Amazon Redshift |
EC2 Pricing Models#
| Model | Description | Savings | Best For |
|---|---|---|---|
| On-Demand | Pay by the hour/second, no commitment | Baseline | Variable, unpredictable workloads |
| Savings Plans | Commit to $/hour for 1-3 years | Up to 72% | Flexible, steady usage |
| Reserved Instances | Commit to specific instance type | Up to 72% | Predictable, steady workloads |
| Spot Instances | Bid on unused capacity | Up to 90% | Fault-tolerant, flexible workloads |
| Dedicated Hosts | Physical server dedicated to you | Varies | Licensing, compliance requirements |
Tip
Spot Instances offer the deepest discounts (up to 90%!) but can be interrupted with 2 minutes notice. Great for batch processing, CI/CD, and stateless applications.
Cost Management Tools#
| Tool | Purpose |
|---|---|
| AWS Cost Explorer | Visualize and analyze costs over time |
| AWS Budgets | Set custom budgets and alerts |
| AWS Pricing Calculator | Estimate costs before deployment |
| AWS Cost and Usage Report | Detailed cost and usage data |
| AWS Trusted Advisor | Recommendations for cost, security, performance |
AWS Support Plans#
| Plan | Price | Key Features |
|---|---|---|
| Basic | Free | Documentation, forums, AWS Trusted Advisor (core checks) |
| Developer | $29/month | Business hours email support, 12-hour response |
| Business | $100/month+ | 24/7 phone, chat, email; 1-hour response for production down |
| Enterprise On-Ramp | $5,500/month | TAM pool, 30-minute response for business-critical |
| Enterprise | $15,000/month | Dedicated TAM, 15-minute response, infrastructure event management |
Note
AWS Trusted Advisor provides real-time recommendations across five categories: cost optimization, performance, security, fault tolerance, and service limits.
A company has steady EC2 usage and can commit to 3 years. Which option offers the best savings?
Know your range before test day#
You've checked the core CLF-C02 concepts. Sit a short diagnostic, then practice free or move to a timed sitting when the range is useful.
- Timed diagnostic with domain-level breakdown
- Clear signal on what to drill next
- Practice free; timed sittings and readiness range on Pro
Take the free Cloud Practitioner assessment →
Next step: Start practicing free on the CLF-C02 hub, or sit a short diagnostic first.