AWS Cloud Practitioner (CLF-C02): Complete Study Guide 2026
March 2026 · 7 min read
Why AWS Cloud Practitioner is the Best Entry-Level Cloud Cert
AWS holds approximately 31% of the global cloud market — more than the next two competitors combined — making AWS certifications among the most valuable credentials in tech. The AWS Certified Cloud Practitioner (CLF-C02, updated 2023) is the ideal starting point for anyone entering the cloud industry, regardless of technical background. Exam format: 65 questions (multiple choice and multiple response), 90 minutes, passing score 700/1000. The exam is available at Pearson VUE test centers and as an online proctored exam. The four exam domains and their weightings: Cloud Concepts (24%), Security and Compliance (30%), Cloud Technology and Services (34%), Billing, Pricing, and Support (12%). Security & Compliance is the highest-weighted domain and is also where most test-takers lose points — prioritize it in your preparation. The certification is valid for 3 years and is a prerequisite (or strong foundation) for AWS Solutions Architect Associate, Developer Associate, and SysOps Administrator certifications. Employers ranging from startups to Fortune 500 companies recognize the CLF-C02 as proof of cloud literacy. Many companies now list cloud fundamentals as a preferred skill even in non-engineering roles like project management, sales engineering, and finance.
Domain 1 & 2: Cloud Concepts and Security
Cloud Concepts (24%): You must know the "6 advantages of cloud computing" as defined by AWS: trade capital expense for variable expense, benefit from massive economies of scale, stop guessing capacity, increase speed and agility, stop spending money on running and maintaining data centers, and go global in minutes. The three cloud deployment models: Public cloud (AWS-managed infrastructure), Private cloud (on-premises, customer-managed), and Hybrid cloud (combination of both). The three cloud service models: IaaS (Infrastructure as a Service — EC2), PaaS (Platform as a Service — Elastic Beanstalk), SaaS (Software as a Service — Salesforce). Security and Compliance (30%): The AWS Shared Responsibility Model is the most tested concept in this domain. AWS is responsible for security "of" the cloud (physical data centers, hardware, networking infrastructure). Customers are responsible for security "in" the cloud (data encryption, access management, OS patching on EC2 instances). IAM (Identity and Access Management): Users (individual people), Groups (collections of users), Roles (permissions for services and applications), Policies (JSON documents defining permissions). Key principle: grant least privilege — give only the permissions needed for the task. Root account should never be used for daily operations; always enable MFA on root.
Domain 3: Core AWS Services You Must Know
Compute: EC2 (Elastic Compute Cloud) — virtual servers in the cloud; choose instance type based on compute/memory/storage needs. Lambda — serverless compute; runs code in response to events without managing servers; charged per execution (first 1M requests/month free). ECS/EKS — container orchestration (Docker/Kubernetes). Storage: S3 (Simple Storage Service) — object storage for files, images, backups; 11 nines (99.999999999%) of durability; pay for storage used. EBS (Elastic Block Store) — persistent block storage attached to EC2 instances, like a hard drive. EFS (Elastic File System) — shared file storage accessible by multiple EC2 instances. S3 Glacier — low-cost archive storage for infrequently accessed data. Database: RDS (Relational Database Service) — managed databases (MySQL, PostgreSQL, Oracle, SQL Server); AWS handles backups and patching. DynamoDB — fully managed NoSQL database; millisecond performance at any scale. ElastiCache — in-memory caching (Redis, Memcached) for high-performance applications. Networking: VPC (Virtual Private Cloud) — your private network within AWS. Route 53 — DNS service and domain registration. CloudFront — Content Delivery Network (CDN) for fast content delivery globally. Know when to use each: CloudFront for static content delivery, Route 53 for DNS routing, VPC for network isolation.
Domain 4: Billing, Pricing, and Support Plans
Pricing models are heavily tested. There are four main EC2 pricing options: On-Demand (pay by the hour/second, no commitment — use for unpredictable workloads), Reserved Instances (1 or 3-year commitment, save up to 72% vs On-Demand — use for steady-state workloads), Spot Instances (bid on unused capacity, up to 90% savings — use for fault-tolerant, flexible workloads like batch processing), and Savings Plans (flexible commitment-based discount applying across EC2, Lambda, and Fargate). AWS Free Tier has three types: Always Free (Lambda 1M requests/month, DynamoDB 25GB storage), 12 Months Free (EC2 t2.micro or t3.micro 750 hours/month, S3 5GB), and Trials (short-term free access to specific services). The AWS Pricing Calculator and Total Cost of Ownership (TCO) Calculator help estimate costs and compare on-premises vs cloud costs. Support plans: Basic (free — documentation and forums only), Developer ($29/month — business hours email support), Business ($100/month minimum — 24/7 phone/chat, 1-hour response for production issues), Enterprise On-Ramp ($5,500/month — Technical Account Manager access), Enterprise ($15,000/month — dedicated TAM, 15-minute response for critical issues). For the exam, know which support plan is appropriate for different scenarios.
Best Study Resources for CLF-C02 (2026)
Free resources: AWS Skill Builder (official AWS learning platform) — the free "AWS Cloud Practitioner Essentials" course is the single most authoritative prep resource and covers all exam domains. Also includes free practice question sets. FreeCodeCamp's YouTube channel has a comprehensive 14-hour AWS Cloud Practitioner course that many candidates use as their primary resource. Paid resources: Stephane Maarek's AWS Certified Cloud Practitioner course on Udemy is the best-selling paid option (frequently discounted to $15–20). It includes 500+ practice questions. AWS Certified Cloud Practitioner Practice Exams by Neal Davis (Digital Cloud Training) on Udemy are considered the most accurate to the real exam format. Practice exams: Tutorial Dojo by Jon Bonso is widely regarded as the most realistic practice exam simulator. Aim for consistently scoring 80%+ on Tutorial Dojo before attempting the real exam. For service-specific memorization (especially the 40+ AWS services you need to distinguish), use AI tools like QuizForge to generate practice questions from AWS documentation pages. Pasting the EC2, S3, or RDS service pages and generating multiple-choice questions is an efficient way to test your recall of key differences between services.
30-Day Study Plan
Week 1: Cloud Fundamentals Day 1–2: Cloud concepts, 6 advantages, deployment models, service models. Day 3–4: IAM (users, groups, roles, policies, MFA). Day 5–7: EC2 (instance types, pricing models), S3 (storage classes, lifecycle policies). Daily: 1–2 hours using AWS Skill Builder + 20 practice questions. Week 2: Core Services Deep Dive Day 8–10: RDS, DynamoDB, Lambda, ECS. Day 11–12: VPC, Route 53, CloudFront, ELB. Day 13–14: CloudWatch (monitoring), CloudTrail (audit logging), Config (compliance). Shared Responsibility Model review. Week 3: Security, Billing, and Remaining Services Day 15–17: Security services — Shield (DDoS), WAF, GuardDuty, Inspector, KMS, Secrets Manager. Day 18–20: Billing — Free Tier, pricing models, Cost Explorer, Budgets, Support plans. Day 21: Review all services covered so far. Week 4: Full Practice Exams Day 22–28: Take one full Tutorial Dojo practice exam per day (65 questions, timed). Review every incorrect answer. Aim for 80%+ before exam day. Day 29: Light review of weakest areas only. Day 30: Rest — no new studying. You're ready.
Paste AWS documentation or your notes and QuizForge generates practice questions covering services, pricing, and architecture decisions.