AWS Certified Cloud Practitioner CLF-C02: Full Course

Explore AWS identity and access management options, including IAM, Identity Center, and Amazon Cognito, to authenticate and authorize users, enable cross-account access with roles, and issue temporary credentials.

Understand the root user in your AWS account, its access scope across services, and why to use it sparingly; enable MFA and prefer IAM users for day-to-day work.

Configure IAM password policies in account settings to require 12-character passwords with uppercase and lowercase letters, numbers, and non-alphanumeric; set 42-day expiration, prevent last six reuse, and allow self-service changes.

Create an iam group named senior admins and a user in the aws management console for the development account, attach administrator access to the group, and test login as James.

Explore IAM policies in AWS, including how to apply them to groups, the difference between managed, customer managed, and inline policies, and how JSON, ARNs, and conditions shape permissions.

Create an IAM user for Holly, define a JSON policy to grant S3 access, attach it to the user, and validate permissions in the AWS console.

Learn how to access AWS accounts via the command line using the AWS CLI, manage access keys, and configure named profiles for dev and prod environments.

Create and use IAM roles to grant cross-account access with temporary credentials, using trust policies and sts assume role to enforce least privilege on a specific S3 bucket.

Explore resource-based policies for cross-account access, using bucket policies to grant specific actions on an S3 bucket, and compare with IAM policies.

Discover how to use the credentials report, Access Advisor, and Access Analyzer in AWS IAM. Audit users, enforce least privilege, and identify external access with practical in-console steps.

Discover AWS storage types, from block storage for low-latency databases and virtual machines, to file storage with EFS and FSx, and scalable object storage with metadata and erasure coding.

Learn how Amazon S3 provides default object storage for AWS apps with buckets and objects, region-based hosting, and access control via IAM policies, bucket policies, and prefixes.

Compare Amazon S3 storage classes, from standard to glacier and intelligent-tiering, and understand durability, availability, access patterns, and pricing to optimize costs.

Create an Amazon S3 bucket, apply bucket policies and block public access by default, enable encryption, and test with IAM user using the CLI to get, put, and list objects.

Explore how Amazon S3 bucket versioning prevents overwrites and deletions by creating multiple object versions with version IDs, including how delete markers hide objects and how removing them restores visibility.

Learn how Amazon S3 bucket replication automatically replicates objects from a source bucket to a destination bucket. It enables same-region and cross-region replication with versioning, replication rules, and IAM roles.

Configure cross-account S3 replication by setting up source and destination buckets, enabling versioning, creating replication rules, and applying bucket policies with an IAM role.

Learn how to host a static front end with Amazon S3 static website hosting, configure public access via bucket policies, upload index.html and assets, and use GetObject API for access.

Discover how AWS storage gateway links on-premise storage to cloud services like S3 and Glacier for hybrid storage, backups, and archiving, plus Snowball data transfer options.

Explore IP addressing fundamentals for cloud networks, including IPv4 and IPv6 formats, DHCP, IP allocation, and how gateways, firewalls, and local and wide-area networks interconnect.

Explore private IP ranges like 10.0.0.0 to 10.255.255.255, 172.16.0.0 to 172.31.255.255, and 192.168.0.0 to 192.168.255.255. Understand NAT gateways and port numbers in TCP/UDP, including well-known and ephemeral ports.

Explore IPv4 addresses and subnetting fundamentals, including how networks are formed with slash notation and how binary octets define network and host portions.

Master subnetting with cidr notation to create smaller, isolated networks within a larger cloud network, using subnet masks and bitwise operations to define network and host portions.

Learn to deploy regional AWS VPCs with subnets across availability zones, select private IP ranges, and configure default and custom VPCs with internet access, security groups, and nacls.

Design and size custom VPCs on AWS by planning IP spaces and subnets. Allocate CIDR blocks across London, Ireland, Paris, and a spare region with public and private subnets.

Learn to build a complete custom VPC in the AWS management console for the Richard Roast web app, spanning three availability zones in London with IPv6 and DNS enabled.

Add and configure subnets within the VPC across four availability zones using non overlapping IPv4 /20 blocks and a /56 IPv6 block, and compare default versus custom DHCP option sets.

Attach an internet gateway to a VPC and enable public subnets for internet access, as part of a minimum viable product in AWS, preparing for routing with route tables.

Create a public route table and associate public subnets to enable direct internet access via the internet gateway, while private subnets stay on the main route table with local routing.

Explore how a nat gateway in a public subnet provides internet access to private subnets via ip masquerading with elastic ip, route tables, and 1-to-many natting, contrasted with nat instances.

Create a NAT gateway in a public subnet, attach an elastic IP, and update the route table so private subnets can access the internet through the NAT gateway.

Analyze subnet-level security using network access control lists, configure paired inbound and outbound rules for ephemeral ports and port 443, and compare nacls with security groups.

Learn how AWS security groups act as stateful, instance-level firewalls with inbound allow rules, enabling self-referencing and cross-resource access to securely connect web servers to databases at scale.

Create three security groups in the retros VPC: load balancer, web app, and database. Configure inbound http from the internet to the balancer and 3306 from web app to database.

Discover aws direct connect, linking your on-prem network to the aws cloud via 1-10 gbps fiber, using private and public virtual interfaces to access vpc and services like s3.

Amazon CloudFront speeds content delivery by caching data at edge locations, serving from origins like S3 buckets, and using web and RTMP distributions for low-latency delivery.

Create a CloudFront distribution with an S3 origin, configure origin access identity, ttl, logging, and edge caching, and extend capabilities with Lambda@Edge.

Discover how Amazon API Gateway acts as the front door for applications, providing secure, scalable access to backend services like AWS Lambda, DynamoDB, and Amazon S3 with monitoring and caching.

Explore AWS networking services, including private link via VPC endpoints, Global Accelerator, Transit Gateway, App Mesh for microservices, and Cloud Map for dynamic resource discovery.

Explore Elastic Compute Cloud (EC2) and key compute services—Elastic Load Balancing, auto scaling, Lightsail, Lambda, and Elastic Container Service with Container Registry, plus AWS Batch and database options.

Explore Amazon machine images (AMI) as customizable virtual images with OS and apps. Cover virtualization types, IP addressing including elastic IPs, and secure access with key pairs for EC2 instances.

Launch an EC2 instance in a chosen region with a quick start AMI, configure storage, security groups, and a key pair, then retrieve the Windows password to connect by RDP.

Elastic block store provides persistent block storage for EC2, replicates within an availability zone for durability, supports encryption, snapshots, and volume types gp2, io1, st1, sc1, magnetic.

Explore EC2 pricing options, including on demand, reserved instances (standard and convertible), spot instances, dedicated hosts and dedicated instances, capacity reservations, and savings plans (EC2 and compute).

Learn to create, attach, and expand EBS volumes in the AWS console, manage disks with Windows disk management, and snapshot and copy volumes across availability zones and regions.

Discover elastic file system (efs) as a shared storage for multiple ec2 instances, with elastic capacity and nfs 4.1 mounting, plus on-premise connectivity via direct connect or vpn.

Explore additional storage options for EC2, including Amazon FSx for Lustre and Windows File Server, with S3 integration, on-premises connectivity, and pay-as-you-go pricing.

Explore AWS elastic load balancers, including application and network load balancers, with health checks, target groups, and cross-zone routing to keep apps resilient across subnets and availability zones.

Deploy two EC2 instances across two availability zones, create a target group with health checks, and set up an internet-facing application load balancer to distribute traffic in a round-robin fashion.

Master AWS Auto Scaling with CloudWatch to automatically adjust EC2 and other resources, using min, desired, and max capacity, health checks, and dynamic, target tracking, step, schedule, and predictive scaling.

Configure auto scaling in the AWS console by creating a load balancer, target group, and launch template to deploy two EC2 instances with a 40% CPU target-tracking policy.

Configure an auto scaling group behind an application load balancer with a launch template, target tracking policy, two EC2 instances, and session manager access, plus NAT gateway setup.

Discover Amazon Lightsail, a pre-configured virtual private server with SSD storage you can quickly launch and manage. Explore OS options, instance types, static IPs, pricing, and basic management tasks.

Summarizes Amazon ECS, ECR, and EKS, explains containers versus virtual machines, and introduces Fargate and EC2 launch types, with use cases for microservices, batch processing, and machine learning.

Explore AWS Lambda, a serverless, event-driven compute service that runs code on demand, scales automatically, and supports microservices with pay-per-use pricing.

Explore Amazon Elastic Beanstalk, which deploys and manages cloud apps with automatic capacity provisioning, load balancing, scaling, and health monitoring, and lets you choose web or worker environments.

Explore additional compute services for the AWS certified exam: batch computing with job dependencies, the enterprise service repository, VMware Cloud on AWS, and outposts for hybrid cloud.

Explore AWS database services, including Amazon RDS and Amazon Aurora, learn relational database concepts, keys, tables, and how AWS manages backups, scalability, and security with multi-AZ and read replicas.

Create an ideas database in the AWS console, selecting region and VPC, enabling multi-AZ with a standby and read replicas for performance; configure storage, backups, and security.

Explore Amazon Aurora, DynamoDB, Redshift, and ElastiCache, and learn how on‑premises vm hosting, hybrid disaster recovery, global tables, and scalable caching boost performance and cost efficiency.

Explore the AWS database migration service DNS, enabling one-time and ongoing replication between on-prem and cloud, including heterogeneous migrations with the schema conversion tool (SCT) and target table creation.

Explore Amazon Neptune, a fast graph database for property graph and RDF with Gremlin and SPARQL, alongside Amazon QLDB for immutable, verifiable ledgers and Amazon Timestream for scalable time series.

Explore how AWS Route 53 DNS uses hosted zones, health checks, and diverse routing policies to direct traffic to ELB, S3, and EC2 behind your domain name.

Explore Amazon simple notification service (SNS) as a durable, highly available pub/sub platform that decouples components via topics, publishers, and subscribers, enabling push-based messaging and email alerts.

Explore how Amazon MQ provides a managed Apache ActiveMQ broker for secure, durable, highly available messaging with industry-standard APIs, while Amazon SQS offers scalable, fully managed queues to decouple microservices.

Explore how AWS Step Functions coordinate multiple AWS services into state machine workflows, with visual orchestration and built-in retry and error handling, alongside Amazon Simple Workflow Service SWF.

Explore Amazon Athena, a serverless interactive query service for analyzing data in Amazon S3 with standard SQL, no infrastructure to manage, pay-per-query, fast results, and Glue data catalog integration.

Discover Amazon Kinesis for real-time data ingestion, processing, and analytics with Kinesis Data Streams, Kinesis Data Firehose, Kinesis Data Analytics, and Kinesis Video Streams, enabling geospatial insights and live dashboards.

Explore the Amazon elastic search service, a managed platform that enables scalable search with zero downtime. Integrates with Cabana and logs stash, enabling data ingestion, analysis, and real-time visualization.

Explore AWS Glue and its data catalog for ETL and metadata management, linking S3 data to Athena, Redshift, and EMR, while QuickSight provides cloud-powered BI and embeddable dashboards.

Explore Amazon Rekognition, a machine learning service that adds image and video analysis to apps, enabling object, text, scene, activity, and facial detection with bounding boxes and timestamps.

Explore Amazon Polly, a text-to-speech service turning text into lifelike speech with standard and neural voices; input text, choose a voice, and deliver speech via API, as shown with Duolingo.

Explore Amazon Translate, a neural machine translation service that enables fast, real-time localization of websites and apps and supports large-volume text translation via APIs.

Explore Amazon Transcribe, a deep learning ASR service that converts speech to text for transcriptions, captions, and metadata, with customizable language models and profanity filtering, and redacts sensitive information.

Learn how Amazon Comprehend performs language detection, sentiment analysis, tokenization, and topic grouping, with a focus on Comprehend Medical for extracting health information and HIPAA-compliant integration.

Amazon SageMaker is a managed service enabling building, training, and deploying machine learning models; ingest data, label it, define algorithms, train and retune to improve accuracy, and deploy at scale.