AWS Certified Cloud Practitioner | CLF-C02 | Full Exam Prep

Learn how AWS regions determine where resources are created and how availability zones apply to EC2; switch regions in the top-right menu to see different regions and subnets.

Understand IAM users, groups, and roles and how least privilege is enforced through policies. Discover how root, standard, and federated identities are organized and how lambda roles access resources.

Set up an IAM user, assign permissions via groups or policies, and test sign-in to the console, while reviewing AWS managed and user managed policies and basic access behavior.

Explain how AWS Batch runs docker-based batch jobs, automatically scales, and schedules with dependencies and retries, using either Fargate or EC2, with pricing by instance hours.

Explore how AWS lambda enables serverless, event-driven code execution for data ingestion and processing, automatically scaling with demand from s3 events or kinesis streams.

Configure lifecycle rules in s3 buckets to automatically transition objects to different storage classes after a set time and to delete expired items based on age.

Enable versioning in S3 to keep immutable file versions, preserve a history of changes for recovery from accidental deletions, and manage data lifecycles for cost-aware governance.

Explore how data in S3 stays secure with encryption in transit using TLS/SSL and encryption at rest via server-side methods, including SSE-S3, SSE-KMS, dual-layer SSE-KMS, and SSE-C.

Configure server-side encryption for s3 buckets and objects, using default s3 managed keys or kms keys, and override settings during upload or on existing objects.

Create and attach EBS volumes to EC2 instances, select volume type and size, and manage delete-on-termination for root versus additional volumes across availability zones.

Explore Amazon elastic file system, a serverless shared storage across EC2 instances with NFS v4.1, auto scaling, general purpose or max IO modes, and bursting or provisioned throughput.

Discover Amazon FSx: fully managed Windows File Server and Lustre for high-performance computing, with automatic backups, multi-AZ availability, S3 integration, and pay-as-you-go pricing.

Explore creating and managing backups with AWS backup: build a backup plan using templates or JSON, set daily/weekly/monthly rules, lifecycle, region, and vault, and assign S3 resources with tag filters.

Discover Amazon storage gateway, a service enabling on premise apps to access AWS with low latency, supporting backups, archiving, disaster recovery, and data migration via file, volume, and tape gateways.

Create and configure an Amazon Redshift cluster, choose node type and settings, attach an IAM role for S3 access, load sample data, and monitor costs throughout.

Explore Amazon MemoryDB for Redis, a cloud-native, fully managed in-memory database compatible with RedisAI, delivering high performance, automatic scaling, and multi-AZ durability for caching and real-time sessions.

Explore how DynamoDB uses schema-less tables with a partition key and optional sort key to identify items, and learn to create a table with provisioned or on-demand capacity.

Explore Amazon Aurora, a fully managed relational database service compatible with MySQL and PostgreSQL. It delivers up to five times MySQL and three times PostgreSQL performance, with read replicas.

Explore how AWS Transfer Family offers a fully managed, scalable solution to securely transfer files via SFTP, FTPS, and FTP, with seamless integration to S3 and EFS.

AWS database migration service securely migrates databases to AWS and supports both homogeneous and heterogeneous migrations. It uses an EC2 replication instance with CDC and a schema conversion tool.

Explore AWS Athena, a serverless, pay-as-you-go SQL query service for analyzing files in S3. Catalog data in Glue, query semi-structured formats, and visualize with QuickSight and ODBC.

Explore Amazon Kinesis for streaming data, including Kinesis Data Streams for ingestion, Firehose for delivery, and real-time analytics with managed Apache Flink; apply to IoT, fraud detection, and customer behavior.

Set up a Kinesis data stream, insert records, and consume and process them with a Lambda function. Explore provisioning options, shard counts, pricing, and post-creation edits to optimize real-time streaming.

Amazon SQS is a managed message queuing service that decouples producers and consumers for asynchronous processing, with standard and FIFO queues offering durable, scalable messaging.

Learn how AWS CloudFormation enables infrastructure as code by using templates in JSON or YAML to define and provision stacks of resources, version controlled and reusable for repeatable deployments.

Explore VPC flow logs for troubleshooting, security analysis, and compliance. Use the reachability analyzer to assess VPC reachability, including ephemeral ports and VPC sharing with other accounts.