Free, complete prep for CLF-C02 — built from real notes used to pass the exam. Interactive AWS architecture, 30+ Q&A, timed practice tests, hands-on labs, real customer use cases, and a full-syllabus PDF cheat sheet.
Click any topic to expand. Each panel covers what it is, when AWS expects you to use it, and the exam-relevant details. Read top-to-bottom for a clean walk-through of the entire CLF-C02 syllabus.
Cloud computing is on-demand delivery of compute, storage, databases, and other IT resources over the internet with pay-as-you-go pricing. AWS lets you stop guessing capacity and pay only for what you use.
| Model | What it means | Use when |
|---|---|---|
| Cloud (Public) | 100% in AWS / Azure / GCP | Born-in-the-cloud apps, fast scaling |
| Hybrid | Cloud + on-prem connected | Compliance / latency forces some workloads to stay on-prem |
| On-premises | Everything in your data center | Strict regulation, legacy systems |
EC2, VPC.Elastic Beanstalk, App Runner.Amazon Q, Gmail, Office 365.AWS organizes physical hardware in a 4-tier hierarchy. The exam asks about this constantly — know what each one is and how to choose.
us-east-1, ap-south-1). Each region is a cluster of data centers. Choose by latency, compliance, service availability, cost.CloudFront (CDN) and Route 53 (DNS) to cache content close to users.| Need | Solution |
|---|---|
| High availability inside an app | Multiple AZs in one region |
| Disaster recovery | Multiple Regions |
| Data residency / compliance (e.g. GDPR) | Pick a specific Region |
| Lowest latency to global users | CloudFront + Edge Locations |
AWS gives you 4 broad compute options: full virtual machines, containers, serverless functions, and managed PaaS. Pick by how much OS control you need.
| Model | Discount | Use case |
|---|---|---|
| On-Demand | 0% (baseline) | Spiky / unpredictable workloads |
| Reserved (1 / 3 yr) | up to 75% | Steady-state, predictable usage |
| Savings Plans | up to 72% | Flexible — covers EC2, Lambda, Fargate |
| Spot | up to 90% | Fault-tolerant, interruptible (batch, big-data) |
| Dedicated Host / Instance | — | Compliance / BYOL licensing |
Long-running, full OS, custom binaries → EC2 Event-driven, <15 min, no server mgmt → Lambda Containerized microservices → ECS / EKS / Fargate Just deploy my code, don't make me think → Elastic Beanstalk
Three storage shapes: object (S3), block (EBS), file (EFS / FSx). The exam loves comparing them.
| Class | Best for | Retrieval |
|---|---|---|
| Standard | Hot, frequent access | ms |
| Intelligent-Tiering | Unknown / changing access | ms (auto-tiers) |
| Standard-IA | Infrequent, multi-AZ | ms |
| One Zone-IA | Infrequent, single-AZ (cheaper) | ms |
| Glacier Instant | Archive, rare access | ms |
| Glacier Flexible | Archive | min – hours |
| Glacier Deep Archive | Long-term archive (cheapest) | ~12 hours |
Versioning → keep every version of an object Lifecycle rules → auto-move objects to colder classes / delete Replication → CRR (cross-region) or SRR (same-region) Encryption → SSE-S3, SSE-KMS, SSE-C, client-side Object Lock → WORM (write-once, read-many) for compliance Static hosting → serve a website directly from a bucket Pre-signed URLs → time-limited share without making bucket public
AWS gives you a managed DB for almost every shape — relational, NoSQL, analytics, graph, in-memory.
| Need | Service |
|---|---|
| Standard SQL workload (CRUD app) | RDS |
| SQL but need extreme performance/HA | Aurora |
| Massive-scale NoSQL key/value (IoT, gaming) | DynamoDB |
| Analytics over TB/PB of data | Redshift |
| Cache in front of any DB | ElastiCache |
| Social network / fraud detection (graph) | Neptune |
VPC is your private slice of AWS — its own CIDR block, subnets, routing, gateways. Everything else hangs off it.
10.0.0.0/16).| Security Group | Network ACL | |
|---|---|---|
| Scope | Instance / ENI | Subnet |
| State | Stateful (return traffic auto-allowed) | Stateless (must allow both directions) |
| Rules | Allow only | Allow + Deny |
| Default | Deny all in, allow all out | Allow all in & out |
30% of the exam is here. Master the Shared Responsibility Model and IAM — those alone account for ~10 questions.
| AWS handles | You handle | |
|---|---|---|
| Phrase | Security OF the cloud | Security IN the cloud |
| Examples | Hardware, hypervisor, regions/AZs, physical security, managed-service patching | IAM, data, OS patching (on EC2), network rules (SG/NACL), encryption choices, app code |
1. Never use the root user for daily work — lock it away with MFA. 2. Apply principle of least privilege — only grant what's needed. 3. Enable MFA on root + all privileged users. 4. Use IAM roles for EC2 / Lambda — never hard-code access keys. 5. Use groups, not per-user policies. 6. Rotate access keys regularly. 7. Use IAM Identity Center (formerly SSO) for human access.
Just 12% of exam questions, but it's pure memorization — easy points if you put in 30 minutes.
| Tool | What it's for |
|---|---|
| AWS Pricing Calculator | Estimate costs before you build (replaces TCO Calculator + Simple Monthly Calculator) |
| Cost Explorer | Visualize past spend, forecast future spend |
| AWS Budgets | Alerts when actual or forecasted cost exceeds threshold |
| Cost & Usage Report | Most detailed billing data, exported to S3 |
| Trusted Advisor | Real-time best-practice checks: cost, security, fault tolerance, performance, service limits |
| Cost Allocation Tags | Tag resources (Project=foo) to break down spend by team/project |
| Plan | Price | What you get |
|---|---|---|
| Basic | Free | Docs, forums, basic Trusted Advisor (7 core checks) |
| Developer | $29+/mo | Email support, business-hours, 1 contact |
| Business | $100+/mo | 24×7 phone/chat, full Trusted Advisor, AWS Health API |
| Enterprise On-Ramp | $5,500+/mo | Pool of TAMs, 30-min response on critical issues |
| Enterprise | $15,000+/mo | Dedicated TAM, Concierge billing, <15-min response, IEM |
AWS's set of best practices for cloud architectures. Originally 5 pillars, now 6. You'll see at least 3-5 questions touching this — easy points.
• Stop guessing capacity → use auto-scaling • Test at production scale → spin up clones, tear them down • Automate everything → IaC (CloudFormation, CDK) • Allow for evolution → loose coupling, microservices • Drive with data → metrics + logs everywhere • Improve through game days → simulate failure, learn
Trusted Advisor inspects your account against best practices in 5 categories: Cost, Performance, Security, Fault Tolerance, Service Limits. Basic plan gets 7 core checks; Business+ unlocks the full set.
Click any component below to learn what it does, how it fits into a typical cloud-native AWS deployment, and which exam questions it relates to. This is the same logical model AWS asks about repeatedly on CLF-C02.
30+ questions in the style AWS actually asks. Filter by difficulty, click any to reveal the answer + explanation. Read all of them — most CLF-C02 questions are reworded versions of these.
us-east-1 = N. Virginia). An AZ is one or more isolated data centers within a region. Each region has 3+ AZs connected by low-latency private fiber. To make an app highly available, deploy across multiple AZs in the same region. To survive a regional disaster, deploy across multiple regions.EC2, VPC.Elastic Beanstalk, App Runner.Amazon Q.15 multiple-choice questions in CLF-C02 style. Timed at 18 minutes (same per-question pace as the real 65-question, 90-minute exam). Pass mark: 70%.
A mix of easy, medium, and hard questions sampled across all four CLF-C02 domains: Cloud Concepts, Security & Compliance, Cloud Tech & Services, and Billing & Pricing. You'll get an explanation after each question and a full breakdown at the end.
—
Six guided labs you can run in the AWS Free Tier. Console click-paths and AWS CLI commands side-by-side. Tick off each step as you go — your progress saves locally.
Provision a t2.micro Linux server, SSH in, and serve a webpage. The single most-tested topic on the exam.
Create a bucket, upload an HTML page, and serve it publicly via the S3 static website endpoint.
The pattern AWS expects: never use the root user, create users in groups, attach least-privilege policies.
The classic 3-tier networking pattern: web tier in public subnet, DB tier in private subnet, NAT for outbound.
Serverless 101: write a Python function, expose it via Function URL, see "no servers" actually mean no servers.
Two safety nets every AWS account should have: alert me when an EC2 misbehaves, and alert me before my bill explodes.
Eight scenarios showing which AWS services real companies pick — and why. The exam asks "best service for X" — these patterns are how you'll answer.
Quick-reference cards for last-minute revision. The full PDF version (downloadable) is the same one I used the morning of the exam.
An 8-page printable PDF covering every CLF-C02 service grouped by domain — compute, storage, database, networking, security, billing, support — with one-liner definitions, decision tables, and exam tips. Embedded in this page, so it works fully offline.
The shortlist that got me through CLF-C02 — official docs, the one Udemy course, and the practice papers that mirror the real exam best.
The authoritative blueprint — domain weightings, in-scope services, sample questions. Read it twice.
aws.amazon.com →The single most-recommended CLF-C02 course. Hands-on demos, clear pacing. Often on sale for ~$15.
udemy.com →Open-source notes + 23 free practice papers (≈1,500 questions). Mirrors the real exam style — see grid below for direct links.
github.com →AWS's own learning portal. Free Cloud Practitioner Essentials course + an official $29 practice exam.
skillbuilder.aws →4-hour free YouTube cram if you've already worked with AWS. Great review the night before.
youtube.com →The whitepaper behind every "which pillar?" exam question. Skim the 6 pillar overviews — that's enough.
docs.aws.amazon.com →23 free CLF-C02 practice papers — questions, answers, and explanations. Mirrors the real exam style closely. Work through 3-4 of these in the final week and you'll spot patterns the real exam reuses.
Each link opens a markdown paper on GitHub with ~65 questions, full multiple-choice options, the correct answer, and a short explanation. Free, no sign-up. Total: ~1,500 questions across 23 papers.