AWS Certified Cloud Practitioner CLF-C02 + Practice Exams.

Explore basic cloud concepts as they apply to AWS, examine cloud cost economics and design principles, and review exam-focused topics while getting familiar with the AWS free tier and console.

Cloud computing delivers on-demand computing resources over the internet with pay-per-use pricing, enabling you to access servers and storage when you need them, without managing physical infrastructure.

Learn how cloud computing shifts from upfront capital to variable expenses, unlocks economies of scale, eliminates capacity guessing, speeds development, reduces data center maintenance, and enables global reach with AWS.

Identify and differentiate the three cloud deployment models—IaaS, PaaS, and SaaS—and how they vary in control and management; apply them to choosing the right model for your needs.

Explore cloud deployment models—cloud-based, on-premises, and hybrid—showing how virtualization, cloud services, and on-prem infrastructure meet legacy needs and enable AWS-driven data processing and migration.

Learn how the AWS well-architected framework guides cloud architects to design secure, high-performance, resilient, and efficient infrastructures across six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.

The AWS cloud adoption framework guides cross-functional migration to AWS through six perspectives: business, governance, people, platform, security, and operations, to align IT strategy with business outcomes.

Explore high availability in cloud environments, using replication and redundancy to eliminate single points of failure and maximize system availability.

Explore how scalability and elasticity in the cloud enable automatic, on-demand resource provisioning. Learn vertical and horizontal scaling, static scaling pitfalls, and AWS-style elasticity.

Understand failure tolerance and disaster recovery to achieve high availability through redundancy, data replication, and multiple power sources, plus replication to a different data center and traffic rerouting.

Cloud computing enables agility and cost-effective startup deployment for online stores. Use data-based services, AI, machine learning, cognitive services, and real-time location insights to adapt quickly and differentiate in markets.

Learn how economies of scale lower costs by producing at massive scale, and how AWS leverages thousands of server racks to offer lower-cost computing power worldwide, benefiting end customers.

Compare CapEx and OpEx, with cloud adoption shifting spend to pay-as-you-go OpEx and away from upfront CapEx.

Understand the consumption based billing model for operating expenses, paying only for what you use, with no upfront costs and no ongoing commitment, aligning with cloud agility.

Compare bring your own license (BYOL) and license inclusive models on AWS, highlighting bundled licenses, cost implications, and license management for Windows Server and SQL Server on EC2 or RDS.

Explore Amazon Web Services, the widely adopted cloud offering over 200 end-to-end services—from compute, storage, and databases to analytics, machine learning, and artificial intelligence—that helps organizations reduce costs and innovate.

Explore the AWS global infrastructure, including regions, availability zones, edge locations, and data centers, and learn how many AZs per region and how the network is organized.

Explore how AWS regions and availability zones form isolated, fault-tolerant locations with at least three zones per region, enabling high-availability deployment of EC2 instances across geographic areas.

Explore how local zones extend AWS regions to deliver low-latency compute, storage, and databases near urban centers, enabling real-time use cases and data residency compliance.

Understand how AWS edge locations and points of presence reduce latency by serving content from the nearest location, using CloudFront across more than 450 PoPs worldwide.

Plan for errors by distributing compute across multiple availability zones and ensuring S3 storage redundancy, plus multi-AZ databases for continuous service.

Explore AWS core services across compute, storage, databases, analytics, and more, and compare managed, fully managed, and serverless offerings with automatic scaling.

Discover how the AWS free tier lets you test services at no cost, with 12 months, always free, and short trials, using EC2, S3, DynamoDB, Lambda, and SQS.

Create an AWS account by visiting aws.amazon.com and verifying email and phone. Enter personal and payment details, select a free tier and a plan, then access the management console.

Explore the AWS console and its widgets, view health, Trusted Advisor, and costs cards, access AWS Cost Management, manage regions, and launch services like EC2 via the service console.

Define cloud computing and its benefits, compare cloud models (IaaS, PaaS, SaaS) with deployment options (public, private, hybrid), and summarize the six AWS Well-Architected pillars for scalable, reliable cloud architectures.

Discover cloud security concepts and frameworks in the AWS cloud, including data security, compliance programs, and scalable measures that protect customer privacy.

Explore the shared responsibility model, where AWS secures the cloud infrastructure and customers handle security in the cloud. Identify duties like data protection, encryption, access management, and patching.

Enforce defense in depth with least privilege and strong authentication, denying by default and granting to roles; enable visibility, automate security tasks, and protect data in transit and at rest.

Highlight the AWS Well-Architected framework security pillar, detailing six areas: security, identity and access management, discovery, infrastructure protection, data protection, and incident response to build secure, resilient cloud infrastructure.

Learn to distinguish authentication from authorization, manage AWS credentials, and apply least privilege to grant only necessary access, safeguarding resources and enforcing secure identity and access management.

Apply the principle of least privilege by granting users only the access needed to perform their jobs, using AWS IAM to define precise policies and prevent unnecessary permissions.

Explore AWS compliance programs across regions, privacy sections, and key standards like HIPAA, PCI DSS, and GDPR, and learn how AWS helps meet data security and privacy obligations.

Master AWS identity and access management to control who can access AWS services using users, groups, roles, and policies, with JSON policies guiding permissions.

Explore how users, groups, roles, and policies in AWS IAM organize identities, assign permissions, and securely delegate access using identity-based and resource-based policies.

Understand the basic structure of IAM policies in JSON, including effect, action, resource, and condition, with examples using an ARN, wildcards, and specific actions.

Create an IAM user and add it to an administrators group, attach an administrator access policy, and log in without using the root account.

Learn how multi-factor authentication strengthens AWS access by requiring a username, password, and an MFA code from an authenticator app or hardware key for an IAM user.

Set custom IAM password policies in AWS to enforce a minimum length of 12, require uppercase, lowercase, numbers, and non-alphanumeric characters, enable expiration, and prevent reuse.

Create a custom identity-based AWS policy that grants run and describe EC2 actions while denying restart, terminate, or reboot, demonstrated by attaching the policy to the dev group for Liam.

The IAM policy simulator lets you test and validate policies for users, groups, and roles, simulating API actions to verify permissions across services like EC2 and IAM.

Explore the security and compliance services essential for the cloud practitioner, with an overview of IAM and related services within the well-architected framework, plus hands-on examples for exam readiness.

Organize AWS accounts with AWS Organizations to centrally manage accounts and group them into organizational units. Consolidate billing and enforce governance with SCP and IAM across member accounts.

Explore how to set up and manage aws organizations, create organizational units, invite and add accounts, and apply service control policies to restrict services like ec2 while allowing s3.

Explore federated identity with IAM Identity Center to enable single sign-on across aws accounts and saml applications using a centralized identity source such as active directory.

IAM Identity Center demonstrates selecting an identity source, managing users and groups, configuring permission sets, and enabling single sign-on to AWS accounts and cloud apps.

Discover how AWS Directory Service extends Active Directory to the cloud, enabling single sign-on, user management, domain-joined EC2 instances, and high availability with two domain controllers.

Enable registration and login for web and mobile apps with Amazon Cognito. Manage user identities securely, support social and enterprise federation, and use user pools and identity pools for authentication.

Leverage AWS config to continuously monitor and assess resource configurations, detect non-compliant changes in near real time, and evaluate EC2, on premises servers, and more using managed and custom rules.

Demonstrates starting with AWS Config, setting the recording strategy and S3 delivery, then creating and applying Config Rules to enforce EC2 instance type compliance (t2.micro) via tags and automatic remediation.

Explore how aws cloudtrail provides api auditing and detective controls, logging who, when, where, and what changed, with secure s3 storage and insights for unusual activity.

Learn how Amazon GuardDuty provides intelligent threat detection by continuously monitoring your AWS accounts, EC2, EKS clusters, and S3 for malicious activity, generating remediation steps and enabling actions via Lambda.

Learn how Amazon Inspector automates vulnerability management at scale. It continuously scans EC2 instances, container images, ECR, and Lambda functions for vulnerabilities and unwanted network exposure.

Discover how Amazon Macie uses machine learning and pattern matching to automatically identify and protect sensitive data like personally identifiable information and financial data in S3, with dashboards and inventory.

Automate security checks and centralize alerts with AWS Security Hub, delivering a comprehensive view of your security posture across AWS accounts, services, and partner integrations.

Securely encrypt and centrally audit secrets such as database credentials and API keys with AWS Secrets Manager, protecting access to applications and resources while supporting rotation and programmatic retrieval.

Learn to create and manage encryption keys with AWS KMS, integrate with AWS services, enable CloudTrail logging, and choose between proprietary, managed, and customer-managed keys.

Create and manage a user-owned AWS KMS key to encrypt S3 objects and control who can read data. Explore region options and replication to other regions for secure data management.

Provision and manage SSL/TLS certificates with AWS Certificate Manager across CloudFront and load balancers, enabling public and private certificates for secure, encrypted traffic.

Explore how AWS cloud HSM provides a single-tenant hardware security module with FIPS 142 level 3 to generate, store, and manage cryptographic keys, offering higher security than KMS when needed.

Learn how Amazon Detective automatically collects AWS logs, analyzes them with machine learning and graph visualizations, and investigates security findings to reveal root causes, integrating with GuardDuty and Security Hub.

Explore AWS Artifact, the two-section portal for agreements and reports that lets you review, accept, and manage AWS compliance documents and third-party audit reports under the shared responsibility model.

Discover how AWS Shield protects applications from DDoS attacks with standard and advanced levels, and how it integrates with AWS WAF and Firewall Manager.

Protect your web applications from common exploits with AWS WAF, using web ACLs, managed and custom rules, OWASP top ten guidance, integrated with CloudFront, Application Load Balancer, and API gateway.

Learn how AWS Trusted Advisor inspects your environment and delivers real-time, best-practice recommendations across cost optimization, performance, security, fault tolerance, and service limits to reduce costs and improve security.

Monitor AWS resources and applications with CloudWatch by collecting metrics, logs, and events; create dashboards and alarms to stop EC2 instances on high CPU and send notifications.

Learn to use AWS Systems Manager as a suite for operations, application management, change management, and node management across AWS, multi-cloud, and hybrid environments, with fleet, session, and patch managers.

Security groups act as stateful, instance-level firewalls for EC2, allowing inbound and outbound traffic, while network ACLs are stateless, subnet-level controls with permit and deny rules in a VPC.

Explore the AWS marketplace, a curated digital catalog to find, buy, deploy, and manage third-party software, data, and services with flexible pricing and deployment options, including AMI and SaaS solutions.

Conclude the security and compliance domain by summarizing AWS services for discovery, threat detection, data protection, identity and access management, and infrastructure protection.

Explore compute as a service, contrasting physical servers with on-demand resources, and learn AWS compute options such as EC2, containers, and serverless for scalable workloads.

Experience secure, scalable compute with Amazon EC2, launching diverse EC2 instances and managing them via AWS Management Console, AWS CLI, or AWS SDK; explore on-demand, spot, reserved, and savings plans.

Discover how AMI provides ready-to-launch AWS images to create EC2 instances, enabling reusable configurations with AWS-provided or custom operating systems such as Linux, Ubuntu, and Windows.

Compare Amazon EC2 instance types and their CPU, memory, storage, and networking capacities to match workloads from web servers to databases and machine learning.

Launch an Amazon EC2 Linux instance by selecting region, choosing a free-tier AMI (Amazon Linux 2023), configuring instance type, key pair, security group, storage, and advanced options before launching.

Learn how to connect to a Linux EC2 instance using a browser-based EC2 connection and PuTTY on Windows, and verify the kernel version, architecture, and storage with df.

Launch a Windows ec2 instance with the 2022 Windows AMI, create a key pair for remote desktop access, and open port 3389 in the security group to connect.

Discover how AWS Batch manages job lifecycles and provisions GPU, CPU, and memory resources to efficiently run hundreds of thousands of batch jobs on AWS using EC2 and Fargate options.

Deploy and scale web apps with AWS Elastic Beanstalk, an orchestration service that provisions infrastructure, coordinates EC2, S3, CloudWatch, autoscaling, and elastic load balancers, and automates deployments from code uploads.

Discover how Amazon Lightsail lets you deploy WordPress quickly with preconfigured templates, low-cost plans, and integrated compute, storage, and networking. Compare Lightsail with EC2 to choose simple versus enterprise.

Understand container compute in AWS, compare containers to virtual machines, and see how Docker enables portable workloads. Learn AWS container services such as ECS and EKS, plus orchestration tools.

Explore Amazon Elastic Container Service (ECS) architecture to run containers in clusters with task definitions and services, enabling high availability, automatic scaling, and serverless or EC2 launch types.

Explore Kubernetes as a portable platform for managing containerized workloads and see how Amazon Elastic Kubernetes Service provides a managed Kubernetes experience on AWS.

Explore how serverless services enable event-driven architectures on AWS, using S3, Lambda, DynamoDB, SQS, and SNS to process files, trigger actions, and scale automatically.

aws lambda is a compute service that runs code without provisioning servers, loads code as a zip file or container image, and scales automatically in response to events.

Harness AWS Fargate, a serverless compute engine for containers, to run ECS workloads without managing EC2 instances, while scaling, isolating workloads, and securing by design.

Learn to choose the right AWS compute service for real-world use cases: automate inventory loading with AWS Lambda and S3, migrate to EC2, and use container services for microservices.

Explore Amazon VPC, an isolated network in the AWS cloud where you create subnets, routing tables, security groups, network ACLs, and an internet gateway to host resources securely.

Explore AWS connectivity options to connect on-premises infrastructure to AWS, including site-to-site VPNs, Direct Connect, VPC peering, and transit gateway, enabling private, encrypted, and scalable interconnects across regions.

Create a VPC from scratch for a public web app, with a public subnet for EC2 and a private subnet for EC2 and RDS, plus internet gateway and NAT gateway.

Create a VPC with a public and a private subnet, using CIDR blocks and availability zones. View route table to confirm routing and that internet access requires an internet gateway.

Configure routing tables for a VPC by creating one for each subnet and associating the public and private subnets with their respective routing tables.

Configure an internet gateway in a vpc to enable public subnet instances to access the internet, using nat and a 0.0.0.0/0 route after creating, attaching, and updating the routing table.

Configure a NAT gateway to allow private subnets to access the internet for updates, while masking internal networks and not replacing layered security.

Explore Amazon VPC security by configuring network ACLs and security groups, managing inbound and outbound rules, and understanding stateless versus stateful traffic.

Discover how Amazon CloudFront, a content delivery network, caches content at edge locations to reduce latency and integrates with S3, origin groups, and security features like AWS Shield and WAF.

Route traffic through the AWS global network with a global accelerator to improve performance and consistency for global apps, using static IP addresses and endpoints like load balancers and EC2.

Explore the domain name system with Amazon Route 53, including hosted zones, DNS records, routing policies like failover, latency-based and geolocation routing, and health checks.

Explore Amazon Route 53 by registering or transferring domains, creating hosted zones and records, configuring health checks and traffic flow, and using resolvers to route DNS queries.

Explore how an api gateway acts as the front door for applications, managing, securing, and scaling rest, http, and websocket apis, with lambda and ec2 back ends.

Automatically scale EC2 instances to optimize performance and reduce costs by monitoring load and adjusting capacity behind a load balancer. Set minimum, maximum, and desired capacity across availability zones.

Elastic load balancing distributes incoming application traffic across multiple EC2 instances, supports autoscaling for high availability, and offers ALB, NLB, gateway load balancer, and CLB options managed by AWS.

Learn how AWS CloudFormation enables infrastructure as code by provisioning resources through templates (JSON or YAML) and managing them as stacks and stack sets across accounts and regions.

Explore AWS health dashboard, a centralized view of availability and operations with personalized alerts and guidance on events for your account, showing event logs and service status across regions.

Discover relational vs non relational databases and examine AWS database services such as RDS, Aurora, DynamoDB, Redshift, DocumentDB, and ElastiCache to prepare for the cloud practitioner exam.

Launch a MySQL database in Amazon RDS using the free tier, then configure engine, connectivity, storage, backups, and maintenance while reviewing security and deletion protection.

Connect to an AWS RDS MySQL database from MySQL Workbench using the endpoint, test the connection with the key, and review configuration details such as instance type, storage, and backups.

Discover Amazon S3, a scalable, durable object storage service for cloud data, powering websites, backups, archiving, and data lakes with lifecycle policies and Glacier storage.

Learn to create and configure an Amazon S3 bucket, including naming, region choices, ownership, ACLs, block public access, versioning, encryption with S3 and KMS, and object locking.

Upload and organize objects in an S3 bucket using prefixes, simulate folders, set storage class and encryption, apply metadata and tags, and manage object lifecycle with pre-signed URLs.

Explore hybrid cloud storage with AWS Storage Gateway, linking on-premises data to the cloud via file, volume, and tape interfaces, such as S3 File Gateway and Tape Gateway.

Explore Amazon EBS as high-performance block storage for EC2, covering volumes for operating systems and databases, single-instance attachment, multi-attach in the same availability zone, and SSD and HDD types.

Learn to create, configure, attach, detach, modify, and delete Amazon Elastic Block Store volumes in the EC2 console, including volume types, capacity, availability zones, snapshots, encryption, and expansion.

Amazon EFS is a fully managed, elastic, serverless file storage service for Linux-based EC2 instances. It scales automatically, enables sharing across Linux EC2 instances via NFS, and secures data.

Learn about Amazon FSx: Windows file server with SMB, NTFS, Active Directory integration, ACLs, shadow copies, quotas, and Multi-AZ; and Lustre for HPC with S3 integration and POSIX interface.

Explore how AWS Backup centralizes and automates data protection for EC2, S3, FSX, and RDS, with backup plans, daily and monthly schedules, retention, and on-demand backups.

Move data at the edge or transfer large volumes to AWS using the Snow Family. Snowcone, Snowball, and Snowmobile provide tailored, secure, physical transport to AWS data services and S3.

Learn to build event-driven applications with Amazon EventBridge by routing real-time events through event buses, rules, and destinations.

Discover how to decouple application components with Amazon SNS and Amazon SQS, using topics with standard and FIFO to deliver notifications across SMS, email, and push.

Configure an Amazon Simple Notification Service topic of the standard type with an email subscription and use it with S3 event notifications and CloudWatch alarms to send alerts.

Learn how Amazon SQS enables decoupled microservices to send, store, and retrieve messages using standard and FIFO queues, preventing message loss and coordinating processing.

Install and configure the AWS CLI to manage services like S3 and EC2 from the command line, including access key handling, region settings, and output formats.

Explore continuous integration and delivery (CI/CD) and how AWS tools automate code building, testing, and deployment. Learn services like CodeStar, CodeCommit, CodeBuild, CodeDeploy, CodePipeline, Cloud9, CloudShell, CodeArtifact, and X-Ray.

Explore Amazon Comprehend, a fully managed NLP service that uses machine learning to extract key phrases, entities, sentiment, PII, and topics from text and semi-structured documents.

Analyze text with Amazon Comprehend using built-in analytics or custom models, identifying entities, dates, amounts, and locations, and explore topic modeling and analysis jobs via console or API.

Explore Amazon Kinesis data streams, Firehose, and Analytics to ingest, process, and deliver streaming data in real time to destinations like S3, Redshift, and Lambda.

Learn how Amazon Athena runs serverless SQL queries on S3 data, supports CSV, TSV, JSON, Parquet, and ORC formats, and how AWS Glue serves as a data catalog for Athena.

Amazon Kendra uses machine learning to provide a human-like search experience across diverse data sources, indexing structured and unstructured documents and handling fact-based, descriptive, and keyword questions.

Explore how Amazon Lex uses automatic speech recognition and natural language understanding to power text and voice interfaces, including hotel reservation bots in English and Spanish with a visual builder.

Learn Amazon Polly, a service that converts text to realistic speech in a specific language. Compare standard TTS and neural TTS for natural voices, and explore formats and SSML controls.

Learn to use Amazon Rekognition to analyze images and videos with deep learning, identifying objects, people, text, activities, faces, and emotions, with live video via Kinesis and Lambda.

SageMaker is a fully managed cloud service to build, train, and deploy machine learning models, with frameworks like TensorFlow and MXNet and scalable hardware.

Explore Amazon Textract, an AWS machine learning service that extracts text and table data from documents (PDF, JPEG, PNG, TIFF), enabling receipts and invoices with real-time processing and API integration.

Amazon Transcribe is an automatic speech recognition service that turns audio into text. It offers language customization, privacy filters, speaker identification, and custom vocabularies, with pay-per-use pricing billed per second.

Explore Amazon Translate, a machine learning text translation service using encoder and attention to produce semantic meaning and accurate translations, with auto language detection and real-time and batch options.

Amazon Forecast is a fully managed machine learning service that forecasts future demand from time series data and related variables, with explanations of drivers like weather and promotions.

Amazon Fraud Detector is a fully managed fraud detection service that analyzes historical data you upload to identify online fraud, with online, transaction, and account acquisition models, automatically in milliseconds.

Learn how cost allocation tags label resources with key-value pairs to organize and track AWS costs, aligning tagging with financial reporting dimensions for accurate cost management.

Explore AWS generated cost allocation tags, including the created by tag, and enable it in the billing console to track resource creation across EC2 and CloudFormation.

Activate user defined cost allocation tags in the billing console and use Tag Editor to create and apply tags that add business context, track costs, and align with resource usage.

Configure AWS cost and usage reports to store detailed cost data in a dedicated S3 bucket, include resource IDs, with hourly granularity and optional integrations to Athena, Redshift, or QuickSight.

Create custom AWS budgets in the billing dashboard, set cost budgets with alerts via email or SMS, and tailor budgets with fixed, planned, or automatic adjustments.

Explore AWS cost explorer to view and analyze AWS usage and costs with graphs, reports, and 12-month data, forecast future costs, and get reserved instance recommendations.

Use the AWS pricing calculator to estimate EC2 costs by region, tenancy, OS, workload type, and storage, then learn how on-demand pricing and Lambda scheduling can reduce monthly bills.

Unified billing in AWS organizations consolidates multiple accounts into a single monthly invoice with itemized charges, cost reports, and shared discounts across linked accounts based on aggregated usage.

Explore pay-as-you-go pricing on AWS, driven by compute, storage, and outbound data transfer, with per-hour EC2 costs and per-gigabyte storage—plus S3 standard versus glacier trade-offs.

Compare AWS support plans from basic to enterprise, highlighting features like 24/7 care, email support, trusted advisor, response times, and costs to help choose the right plan.

The AWS support center acts as the primary help desk for AWS users, helping with sales, compliance, technical issues, and billing, and guiding you through support cases to reduce costs.

Explore the AWS Knowledge Center’s official articles and videos for best practices, guidance, and troubleshooting tips across AWS services, including EC2 and RDS, with community Q&A for expert help.

Explore Amazon Web Services and the AWS Certified Cloud Practitioner exam, and learn about available courses, plus how to connect on LinkedIn or visit the instructor's website.