AWS Certified Cloud Practitioner CLF-C02

Explore how to access AWS in multiple ways, manage service pricing, and control costs, including free-tier options, while locating help and deepening your AWS knowledge.

Learn how to create an AWS account, the role of credit card data, the free usage tier, and choosing the free support plan for exploration and cloud practitioner exam prep.

Log in to the AWS management console to browse and access services, open service pages, and perform tasks like starting remote servers, managing file storage and machine learning tasks.

Understand how the AWS management console, CLI, and SDKs access AWS services via the AWS API, with CLI and SDKs enabling automation and infrastructure as code.

Explore AWS free tier, offering 12 months of usage within limits and quotas, 750 hours of EC2 t2 or t3 micro instances, and Lambda free up to 1 million requests.

Learn to monitor AWS costs with the billing dashboard, view current and forecasted bills and charges by service, and use Cost Explorer and budgets to set alerts and control spending.

Discover how AWS support, the personal health dashboard, and the service health dashboard help you resolve issues and access official AWS documentation.

Explore how AWS service quotas control limits across services, including elastic IPs with a five-per-account cap, and use the service quotas tool to view and request increases when needed.

Access AWS via the management console, CLI, or SDKs and send commands to the AWS API. Explore pricing, free tier, billing dashboard, cost explorer, budgets with alarms, and available support.

Explore the AWS security model and IAM to securely manage users, permissions, and access methods, including the management console and CLI, for safe cloud practice.

The shared responsibility model defines security as a joint effort between AWS and you; AWS secures infrastructure and managed services, while you secure your applications, workloads, and access.

Protect your AWS account with a strong password and regular changes, and enable multi-factor authentication. Use IAM users for team access instead of sharing root credentials.

Explore how aws iam manages identities and access, covering users, user groups, and roles, and how policies grant permissions for services to temporarily access other services.

Create AWS users, groups, and roles in IAM; assign permissions via built-in or custom policies, and enable programmatic and/or console access.

Learn how roles differ from users and how AWS services auto-create roles; understand the basics of roles, users, and permissions, without needing to write permission statements.

Discover how policies from users and groups combine to grant permissions, how explicit denies override allows, and when AWS evaluates permissions at the moment a command is issued.

Master the aws shared responsibility model and secure your account with mfa. Define identities with groups and roles, attach policies to control permissions, and remember that denies override allows.

Explore the key compute services in AWS, focusing on EC2 as a flexible, configurable remote server, and compare ECS, EKS, and Lambda for containerized and serverless workloads.

Learn how EC2 lets you rent virtual slices of powerful hardware in AWS data centers, with isolated, dedicated resources and full configurability of hardware, operating system, and software.

Inspect the instance from the instances dashboard to view status and CPU utilization, then connect via EC2 Instance Connect or SSH with a key pair to manage it.

Launch an Amazon Linux EC2 t2 micro, enable http traffic, and use user data to install and run a web server hosting a basic site via public IP or DNS.

Discover EC2 pricing models, including on-demand pay-by-hour with full flexibility, discounted spot instances subject to interruption, and Savings Plans or Reserved Instances that require upfront commitment for long-term discounts.

Explore compute services such as ECS/EKS and Lambda, with a focus on EC2's customizable, isolated instances, AMI selection, security groups, and remote access to run commands, stop, or hibernate.

Build on EC2 fundamentals across environments and accounts, and master virtual private clouds (VPCs), including the differences between private and public subnets and managing network requests in the cloud.

Explore how virtual private cloud enables secure communication between AWS instances, like EC2 and databases, by controlling internet access with security groups and isolated networks.

Configure a virtual cloud network with AWS VPCs to group EC2 instances into subnets and control connectivity, including public vs private subnets and NAT gateway access.

Create and configure a vpc in a regional aws account, selecting subnets across zones and a default vpc per region to enable internal reach and internet access.

Launch EC2 instances within VPCs by choosing public or private subnets and optionally assigning a public IP. Understand how security groups, route tables, and CIDR blocks govern traffic between instances.

Shows how CIDR notation defines internal IP ranges in a VPC for EC2, with slash values like /16, and explains 32-bit IP addresses and private vs public addresses.

Explore how public and elastic IP addresses work with EC2 in a public subnet, including stability, limits, and costs, and learn why domain names offer a better alternative.

Explore network access control lists, or NACLs, and how they govern inbound and outbound requests at the subnet level within a VPC, contrasting them with security groups in AWS.

Compare security groups and NACLs as AWS firewall tools: stateful, instance-level access control versus stateless, subnet-level control, plus private versus public subnets shaping connectivity.

Learn how to connect multiple VPCs using VPC peering and Transit Gateways, enabling connectivity between VPCs and subnets across AWS networking.

Master how vpcs, subnets, and route tables control traffic and define public versus private subnets with internet gateways. Explore ip addressing, nat gateways, security groups, and network ACLs.

Explore how EC2, VPCs, and custom networks organize multiple instances, then learn dynamic scaling and load balancing using AWS features and Elastic Load Balancers to automatically scale EC2 instances.

Discover how cloud computing enables dynamic capacity management to handle traffic spikes by adding or removing EC2 instances, improving scalability, elasticity, and high availability while avoiding idle resources.

Automatically scale EC2 instances with EC2 Auto Scaling to maintain capacity and avoid over provisioning, while using Application Load Balancer and Network Load Balancer to distribute traffic evenly.

Create an application load balancer inside the EC2 Auto Scaling workflow and attach it to the VPC and subnets. Set a target group with health checks and CPU-based scaling policies.

Explore how AWS enables elasticity, scalability, and high availability through auto scaling and load balancing. See how application and network load balancers distribute traffic across target groups and instances.

Explore file storage options in AWS, focusing on EBS and EFS, compare their differences, and learn how EC2 instances connect to store uploaded files and key configuration options.

Explore how file storage underpins cloud workloads by storing application data, user uploads, reports, and archives, and learn how AWS offers distinct file storage services for every need.

Differentiate AWS file storage by block storage with EBS for EC2, object storage with S3, and network file systems with EFS and FSx Lustre.

Attach elastic block store volumes to EC2 instances, format and mount them, and scale volumes dynamically while managing snapshots, multi-attach access, regional pricing, and the AWS free tier.

Learn how EC2 instance storage differs from EBS: the AMI defines base OS storage, which may reside on EBS or non-ebs instance store; EBS backed AMIs are the default nowadays.

Explore how EFS provides a scalable pre-formatted file system that you don't manage like a hard drive, with automatic scaling and access from EC2, Lambda, and other services.

Learn to create and attach EFS or FSx file systems to EC2 workloads, configure VPCs and subnets, encryption, security groups, and access policies with automatic scaling.

Explore AWS file storage options, including EBS, EFS, FSx Luster, and S3, and how they attach to EC2, provide scalability, snapshots, and multi-access.

Explore object storage with S3, understanding buckets, storage settings, and how to store files. Learn about advanced features like file archival and hosting static websites.

Create and configure an S3 bucket with a unique name and region, and prevent public access by default. Upload files via the console and manage encryption and sharing options.

Explore how S3 storage classes optimize costs by matching access patterns, from frequent access with instant retrieval to infrequent access and glacier archive options, including intelligent tiering.

Explore AWS S3 advanced features, including versioning, lifecycle management, analytics and inventory, object lock, replication, encryption, and static website hosting for scalable, compliant storage.

Compare S3, EBS, and EFS to show which storage option fits different workloads, from EC2-attached hard drives to scalable file systems and independent object storage.

Explore AWS database options beyond file storage, comparing self-managed and managed services and SQL versus NoSQL, with RDS, Aurora, and DynamoDB to store and fetch data.

Discover how AWS supports SQL and NoSQL databases, offering self-hosted on EC2 or managed services like RDS and DynamoDB. Balance control, responsibility, and workload requirements.

Explore how RDS provides managed sql databases with multiple engines and versions. Configure instance class, VPC, subnet, security groups, backups, encryption, replication, and monitoring for high availability and performance.

Spin up managed relational databases using the RDS console, CLI, or SDKs, selecting region, engine type, version, multi-az options, and templates like free tier.

Explore Amazon Aurora, a fully MySQL and PostgreSQL compatible relational database engine built for AWS, offering high availability, replication, and scalable performance, with a serverless pay-per-use option.

Explore how to place databases in a private subnet within a VPC, enabling web servers in a public subnet to query RDS or Aurora without exposing databases to the internet.

Explore AWS ElastiCache, a fully managed in-memory caching database for rapid data retrieval with Redis or Memcached. Configure cluster mode, VPC networking, backups, encryption, and monitoring.

Explore how DynamoDB provides a fully managed no-sql key-value database built on tables, with on-demand or provisioned read/write capacity, encryption, and API-driven data access.

Explore DynamoDB in action by creating a table, selecting a partition key (and optional sort key), and comparing provisioned versus on-demand capacity, including NoSQL data flexibility.

Explore DynamoDB advanced features like streams for real-time data changes, global tables for multi-region replication and high availability, and DAX for in-memory acceleration to reduce latency.

Explore AWS's database landscape beyond RDS and DynamoDB, including MemoryDB, DocumentDB, Keyspaces, Neptune, Timestream, and QLDB, and understand when to use each.

Explore centralized backup management with AWS Backup, create backup plans or templates, set frequency and retention, assign RDS and DynamoDB resources, and restore backups as needed.

Explore AWS database services from self-hosted EC2 options to managed offerings like RDS, Aurora, DynamoDB, ElastiCache, and Neptune, and how partition keys and read/write capacity fit workloads.

Explore how AWS services enable global delivery of applications, with custom domains, caching and content delivery via CloudFront, and various networking features for scalable workloads on EC2.

Understand domain name systems (DNS) and how they translate domain names to IP addresses, register domains with registrars, and use AWS Route 53 to manage domains and traffic forwarding rules.

Discover how Route 53 and CloudFront deliver content globally with edge locations and distributions, using caching policies, logging, SSL, and edge code.

Learn to use CloudFront to deliver a static S3 website by creating a distribution, configuring caching policies, and leveraging edge locations for global, low-latency access via Route 53.

Explore AWS edge locations, local zones, outposts, and wavelength to achieve ultra-low latency, extend VPCs, and design hybrid architectures near customers.

Speed up network traffic with AWS Global Accelerator and S3 Transfer Acceleration to boost delivery to customers and workloads across regions. These services provide two unique IP addresses and faster file transfers, but add cost, so apply them only when you need an extra performance boost.

Learn how to use AWS Certificate Manager to request and manage SSL certificates, enable SSL termination with CloudFront or load balancers, and secure HTTPS between users and content.

Learn how networking services speed content delivery and domain routing with Route 53 and CloudFront, leveraging edge locations, while Local Zones, Outposts, and Wavelength zones bring services closer to users.