AWS Certified Cloud Practitioner | CLF-C02 | Full Exam Prep

Explain cloud computing as internet-delivered storage, databases, and computing power with on-demand, anywhere access, shared resources, scalability, and pay-as-you-go pricing, public, private, hybrid, and multi-cloud models and IaaS, PaaS, SaaS.

Discover the AWS cloud, Amazon Web Services, a platform offering compute, storage, databases, and more with a click, plus regions, availability zones, and edge locations for low latency.

Explore AWS regions and availability zones, learn how global regions reduce latency, support regulatory compliance, and provide isolated, fault-tolerant redundancy with independent data centers.

Explore how AWS edge locations cache content at global data centers closer to users, reducing latency and improving load times with services like CloudFront, Lambda@Edge, and AWS Global Accelerator.

Learn how AWS regions determine where resources are created and how availability zones apply to EC2; switch regions in the top-right menu to see different regions and subnets.

Explore the AWS shared responsibility model, outlining AWS security of the cloud and your security in the cloud, including IAM, encryption, backups, and workload protection.

Explore the cloud's benefits, including cost efficiency, scalability, availability, security, and disaster recovery. See how pay-as-you-go pricing, rapid deployment, global redundancy, and collaboration drive agility and resilience.

Explore AWS Identity and Access Management (IAM) to control access with users, groups, roles, and services. Understand how policies, defined as JSON documents, specify what actions are allowed.

Understand IAM users, groups, and roles and how least privilege is enforced through policies. Discover how root, standard, and federated identities are organized and how lambda roles access resources.

Explain how policies define permissions with JSON documents, specifying allowed actions, denied actions, and conditions. Compare identity-based and resource-based policies, including managed, inline, and trust policies.

Set up an IAM user, assign permissions via groups or policies, and test sign-in to the console, while reviewing AWS managed and user managed policies and basic access behavior.

Grant and manage user permissions by attaching s3 policies, switching between full and read access, and defining policies via visual editors or json for aws resources.

Create and manage IAM groups to assign permissions to users, such as an S3 specialists group with S3 full access, and create a Lambda execution role.

Explore how Amazon EC2 provides secure, resizable compute capacity by launching and managing instances, including general purpose, compute optimized, memory optimized, accelerated computing, storage optimized, hpc types, with auto scaling.

Launch and configure an EC2 instance in the chosen region, select Ubuntu free-tier options, configure a micro instance with a key pair, connect, and manage stopping, terminating, and volumes.

Learn about EC2 instance store, a non-persistent local storage with high IOPs and low latency for temporary data like caching; back up to durable storage such as EBS or S3.

Explain how AWS Batch runs docker-based batch jobs, automatically scales, and schedules with dependencies and retries, using either Fargate or EC2, with pricing by instance hours.

Explore how AWS lambda enables serverless, event-driven code execution for data ingestion and processing, automatically scaling with demand from s3 events or kinesis streams.

Create and deploy a Python AWS Lambda function that triggers on S3 object creation to move files from a source bucket to a destination bucket, with permissions and monitoring steps.

Explore Docker containers as standardized, isolated units that package applications and dependencies, enabling consistent, portable deployment, scalability, and streamlined ci cd pipelines across environments.

Explore Amazon ECS, a fully managed container orchestration service in AWS, that deploys Docker images, scales automatically, and uses task definitions, clusters, and services for high availability and security.

Explore Amazon Elastic Kubernetes Service and how Kubernetes automates deployment, management, and scaling of containerized workloads. Examine the control plane, worker nodes, and options like Fargate and Karpenter.

Explore availability as the measure of how often software is up and usable, including uptime, downtime, planned and unplanned interruptions, and five nines levels from 99% to 99.999%.

Explore scalability as the system's ability to handle more work during peak demand, and compare vertical scaling, scaling up, with horizontal scaling, scaling out, using a load balancer.

Learn how elasticity automatically scales resources in real time to meet demand and minimize costs, with examples like AWS Lambda and EC2 autoscaling.

Discover how elastic load balancers distribute traffic across multiple targets to improve performance and reliability. Explore health checks, session persistence, and the main types: application, network, gateway, classic.

Explore how auto scaling groups manage EC2 instances, scale with demand, replace unhealthy ones, and use launch templates, AMI, instance types, capacity rules, scaling policies, and health checks.

Explore AWS S3, the primary storage solution with buckets and objects, region-based data storage and globally unique bucket naming, plus use cases, storage classes, lifecycle rules, and versioning.

Create an S3 bucket by selecting a region, choosing a globally unique name, and enabling features like versioning and tags, then upload an object.

Select and open an S3 bucket, create a documents folder, and upload files via drag-and-drop or file picker, then view metadata like region, owner, size, and type.

Learn how to manage S3 data lifecycle by using storage classes and lifecycle rules. Move data between standard, infrequent access, archive, and deep archive based on age and access patterns.

Configure lifecycle rules in s3 buckets to automatically transition objects to different storage classes after a set time and to delete expired items based on age.

Explore s3 storage classes by uploading a file and selecting standard, infrequent access, glacier, and intelligent-tiering, then automate transitions with lifecycle rules.

Create lifecycle rules to move data after the initial 30 days of frequent access into storage classes like intelligent-tiering, glacier instant retrieval, and glacier deep archive, using prefixes or tags.

Explore how intelligent-tiering automatically moves data between frequent access, infrequent access, and archive tiers (including archive instant access and deep archive access) using lifecycle rules to optimize costs.

Enable versioning in S3 to keep immutable file versions, preserve a history of changes for recovery from accidental deletions, and manage data lifecycles for cost-aware governance.

Enable bucket versioning in s3 and explore how versioning affects lifecycle rules by uploading and replacing files, viewing current and previous versions, and managing delete markers.

Explore cross-region replication in AWS S3: copy and synchronize data across regions, enabling disaster recovery, reduced latency, and higher availability while balancing cost and compliance.

Demonstrates setting up cross-region S3 replication in AWS by creating source and destination buckets with versioning, configuring a replication rule, and validating one-way replication.

Explore how data in S3 stays secure with encryption in transit using TLS/SSL and encryption at rest via server-side methods, including SSE-S3, SSE-KMS, dual-layer SSE-KMS, and SSE-C.

Configure server-side encryption for s3 buckets and objects, using default s3 managed keys or kms keys, and override settings during upload or on existing objects.

Define who can access objects in S3 buckets and what actions they can perform through a bucket policy written as a JSON document.

Discover how S3 access points offer customizable entry points to a bucket, each with its own policy and DNS name, enabling scalable, secure access for teams without changing bucket structure.

Object lambda is an S3 feature that transforms data on retrieval with a lambda function, avoiding data duplication and enabling redaction, format conversion, or augmentation at access time.

Explore S3 event notifications and how bucket events such as object create, delete, or lifecycle transitions trigger actions via Lambda, SNS/SQS, or EventBridge, with prefix and suffix filters.

Configure S3 event notifications by creating a bucket and an SNS topic, setting permissions, subscribing to the topic, and testing object creation events that trigger email alerts.

Use S3 Select and Glacier Select to filter data in CSV, JSON, or Parquet objects with SQL queries, retrieve only a subset per object, and minimize transfer and latency.

Amazon EBS provides durable, scalable block storage for EC2 instances with persistent storage, encryption, snapshots, high availability, and flexible performance options.

Learn EBS provisioning and snapshot management, including incremental block-level backups in S3, encryption at rest with KMS, and lifecycle policies for cross-region recovery and cost optimization.

Create and attach EBS volumes to EC2 instances, select volume type and size, and manage delete-on-termination for root versus additional volumes across availability zones.

Explore Amazon elastic file system, a serverless shared storage across EC2 instances with NFS v4.1, auto scaling, general purpose or max IO modes, and bursting or provisioned throughput.

Discover Amazon FSx: fully managed Windows File Server and Lustre for high-performance computing, with automatic backups, multi-AZ availability, S3 integration, and pay-as-you-go pricing.

Configure and manage backups from a centralized AWS backup console, applying policies across EC2, RDS, and EFS, with automated plans, immutable vault lock, and secure restoration.

Explore creating and managing backups with AWS backup: build a backup plan using templates or JSON, set daily/weekly/monthly rules, lifecycle, region, and vault, and assign S3 resources with tag filters.

Discover Amazon storage gateway, a service enabling on premise apps to access AWS with low latency, supporting backups, archiving, disaster recovery, and data migration via file, volume, and tape gateways.

Discover Amazon RDS, a fully managed relational database service hosting engines like MySQL and PostgreSQL, with encryption, VPC isolation, backups, and IAM access control, integrated with AWS services.

Explore Amazon ElastiCache, an in-memory caching service using Redis and Memcached to deliver submillisecond reads and writes, with built-in replication, sharding, clusters, and flexible pricing.

Explore Amazon Redshift, a fully managed petabyte-scale data warehouse optimized for analytics with columnar storage, fast performance, and scalable clusters integrated with S3, DynamoDB, Glue, and Lambda.

Create and configure an Amazon Redshift cluster, choose node type and settings, attach an IAM role for S3 access, load sample data, and monitor costs throughout.

Explore Amazon MemoryDB for Redis, a cloud-native, fully managed in-memory database compatible with RedisAI, delivering high performance, automatic scaling, and multi-AZ durability for caching and real-time sessions.

Discover how DynamoDB, a NoSQL database in AWS, delivers schema-less, distributed data storage with automatic scaling, replication across availability zones, and millisecond latency.

Explore how DynamoDB uses schema-less tables with a partition key and optional sort key to identify items, and learn to create a table with provisioned or on-demand capacity.

Explore how DynamoDB stores data in tables, where each item has scalar attributes and a primary key within a schemaless design that enables flexible attributes across items.

Explore how to create items in a DynamoDB table, specify a partition key, add flexible attributes in a schemaless design, and view items in form or JSON views.

Explore Amazon Aurora, a fully managed relational database service compatible with MySQL and PostgreSQL. It delivers up to five times MySQL and three times PostgreSQL performance, with read replicas.

Explore Amazon DocumentDB, a fully managed NoSQL document store compatible with MongoDB, supporting flexible schema and MongoDB queries. Benefit from AWS auto scaling, replication across AZs, and S3 backups.

Explore Amazon Neptune, a fully managed graph database designed for complex relationships, supporting property graph and RDF models, with scalable, high-performance queries, encryption, VPCs, and AWS ecosystem integration.

Explore Amazon Timestream, a serverless time series database optimized for real-time analytics of timestamped data from IoT devices, logs, and metrics, and visualize with Grafana.

Understand the AWS snow family devices for transferring data in limited connectivity settings, including Snowcone, Snowball Edge, and Snowmobile, with edge computing and encryption.

Explore how AWS Transfer Family offers a fully managed, scalable solution to securely transfer files via SFTP, FTPS, and FTP, with seamless integration to S3 and EFS.

AWS database migration service securely migrates databases to AWS and supports both homogeneous and heterogeneous migrations. It uses an EC2 replication instance with CDC and a schema conversion tool.

Explore how AWS Glue offers a fully managed, serverless ETL platform with drag and drop jobs, transforming and loading data from S3, Redshift, and more.

Learn how glue costs are calculated by data processing units, hourly rates billed per second with a ten minute minimum, and practical examples for etl jobs, crawlers, and interactive notebooks.

Configure a Glue crawler to detect metadata from an S3 folder, create a data catalog with databases and tables, and query the data with Athena.

Set up a simple Glue ETL job to extract data from a CSV in S3, transform with SQL, and load to Parquet in a target bucket, updating the data catalog.

Explore AWS Athena, a serverless, pay-as-you-go SQL query service for analyzing files in S3. Catalog data in Glue, query semi-structured formats, and visualize with QuickSight and ODBC.

Learn to query data with Athena by previewing a table from data catalog, set up a query result location in S3, and run SQL queries to analyze your S3-stored data.

Explore Amazon Kinesis for streaming data, including Kinesis Data Streams for ingestion, Firehose for delivery, and real-time analytics with managed Apache Flink; apply to IoT, fraud detection, and customer behavior.

Explore how producers write data records via partition keys to Kinesis Data Streams, understand shard throughput and retention, and learn consumption through AWS SDK, Kinesis Data Firehose, and AWS Lambda.

Set up a Kinesis data stream, insert records, and consume and process them with a Lambda function. Explore provisioning options, shard counts, pricing, and post-creation edits to optimize real-time streaming.

Experiment with a streaming workflow by manually inserting records, observing how partition keys route data to shards, and using shard iterators to pull and decode base64 records.

Explore Amazon SNS, a fully managed pub/sub messaging service that decouples publishers from subscribers via topics, with standard and fifo options for application-to-application and application-to-person messaging and high-throughput fan-out.

Amazon SQS is a managed message queuing service that decouples producers and consumers for asynchronous processing, with standard and FIFO queues offering durable, scalable messaging.

Explore AWS Step Functions, a visual editor that orchestrates multi-service workflows via state machines, task states, and options like parallel, map, choice, and IAM roles.

Explore Amazon EventBridge to route events from producers such as S3 and Lambda through an event bus, using rules to target services like Lambda, SNS, or SQS, enabling decoupled architectures.

discover how aws devops tools, codecommit, codebuild, codedeploy, and codepipeline, enable secure source control, automated builds, tests, and blue/green deployments through a full ci/cd pipeline.

Learn how AWS CloudFormation enables infrastructure as code by using templates in JSON or YAML to define and provision stacks of resources, version controlled and reusable for repeatable deployments.

Master AWS CloudFormation by creating stacks from templates, configuring S3 buckets and Lambda functions, using the visual builder, handling failures, and deleting stacks when needed.

Learn how Amazon VPC creates a logical, isolated virtual network with public, private, VPN-only, and isolated subnets, supported by route tables, internet gateways, NAT gateways, and VPN connections.

Explore VPC networking components, including internet gateways and egress only IPv6 gateways, plus NAT gateway and NAT instance differences in public and private subnets, as preparation for VPN topics.

Discover how virtual private networks securely connect a VPC to on premise infrastructure via VPN gateways and Direct Connect, and learn to interconnect VPCs with peering and a transit gateway.

Security groups act as virtual firewalls for instances, controlling inbound and outbound traffic; an instance may belong to multiple groups, while nacls filter subnet traffic by IP ranges and protocols.

Explore VPC flow logs for troubleshooting, security analysis, and compliance. Use the reachability analyzer to assess VPC reachability, including ephemeral ports and VPC sharing with other accounts.