[NEW] Complete AWS Certified Cloud Practitioner CLF-C02 2026

Discover AWS global infrastructure, where regions house data centers with dedicated power, networking, and cooling and guarantee three availability zones, delivering high availability, security, and low latency to users worldwide.

Learn to choose AWS regions by prioritizing latency, data residency compliance, GDPR/CCPA constraints, and service availability, using tools like the AWS Region Latency Test, while considering cost and disaster recovery.

Defines availability zones as groups of data centers within a region, with cooling and networking, connected by fiber to enable reliability, fault tolerance, and at least three AZs per region.

Edge locations cache and deliver content with low latency, forming a global CDN with CloudFront to support content delivery, live streaming, and API acceleration.

Experience AWS Outposts, a fully managed on-premises rack that delivers consistent AWS services with low latency and compliance, enabling a hybrid cloud between on-premises and the public cloud.

Discover how AWS Wavelength brings compute power into 5G networks to deliver ultra low latency and edge processing for gaming, AR/VR, and autonomous vehicles.

Explore AWS Local Zones, mini hubs that bring core AWS services closer to users for ultra low latency, seamless VPC integration, and data residency options in select cities.

AWS elastic disaster recovery creates a warm standby in AWS by continuously replicating on-prem or cloud data, enabling minutes‑level failover with non‑disruptive drills and cost‑efficient use of storage and compute.

Discover elastic compute cloud (EC2) as a web service for launching resizable virtual machines, with sizing, AMIs, storage options, networking, security, monitoring, auto scaling, load balancing, and pricing models.

Explore general purpose EC2 instances offer balanced resources for web servers and code repositories, and compute optimized C series for compute-intensive workloads like machine learning inference.

Discover memory optimized EC2 instance types, such as the R and X families, for in-memory analytics and high memory workloads, plus storage optimized options for IO intensive workloads.

Explore EC2 accelerated computing instances that use hardware accelerators for machine learning, HPC, and graphics, with P5 for deep learning and high-performance tasks.

Explore how EC2 security groups act as a firewall between clients and EC2 instances, using stateful, allow-only rules, no deny rules, and IP whitelisting to govern inbound and outbound traffic.

Login securely to a remote ec2 instance using ssh key pairs. Embed the public key in the instance and store the private key locally for authentication.

Understand elastic IPs provide a static public IPv4 address for dynamic cloud computing in AWS, and how health checks reassign traffic to a healthy EC2 instance for high availability.

Understand AWS public IPv4 and elastic IP pricing, including $0.005 per hour per IP and idle IP charges, with a 750-hour free tier and EC2 lifecycle impact.

Explore AWS EC2 reserved instances and savings plans, comparing 1-3 year terms, standard and convertible options, discounts, payment choices, and use cases for steady workloads.

Bid on unused EC2 capacity with spot instances to access large discounts compared to on-demand pricing. Use them for flexible, fault-tolerant batch processing, data analysis, and testing, with two-minute interruptions.

Discover how EC2 capacity reservations guarantee specific capacity in an availability zone, helping you save money with fixed hourly usage and plan for disaster recovery.

Learn how elastic load balancers act as a traffic cop, distributing incoming traffic across multiple EC2 instances and other targets across availability zones to ensure high availability and fault tolerance.

Identify the three load balancer types—application load balancer at layer 7, network load balancer at layer 4, and gateway load balancer at layer 3—and summarize their use cases and features.

Explore how elastic load balancers and auto scaling groups achieve high availability and cost efficiency through dynamic and scheduled scaling, health monitoring, and balanced traffic across multiple availability zones.

Learn about EC2 instance stores, temporary ephemeral high performance block storage attached to the host, storing data only for the life of the instance.

Learn how elastic block storage (EBS) provides persistent, scalable, encrypted network storage for EC2, with point-in-time snapshots for backups and AZ-bound volumes that support cross-region migration.

EBS snapshots provide point-in-time backups for data protection and rapid recovery, using incremental backups and automated policies for cross-region copies, fast restore, and long-term archive storage.

Explore AWS Elastic File System (EFS): a fully managed, scalable, shared file storage for AWS and on-prem resources, with elastic scaling, cross-AZ durability, encryption, and standard and standard-IA storage classes.

Explore Amazon FSx for Windows File Server, a fully managed Windows file storage that uses SMB, integrates with Active Directory, and supports SharePoint, .NET apps, and user home directories.

Discover Amazon FSx for Lustre, a high-performance file system for HPC and machine learning workloads with low latency and high throughput for large-scale data processing with S3.

Explore how virtual machines differ from containers using hotel and food truck analogies, showing VMs overhead and isolation versus container efficiency with a shared host OS and Docker.

Docker packages code and dependencies into a container so it runs reliably anywhere, solving the works on my machine problem with lightweight, scalable, and consistent deployments.

Explore Elastic Container Service (ECS) to deploy, manage, and scale containerized apps on a cluster, choosing EC2 launch type or Fargate launch type with auto scaling.

Explore AWS Fargate, a serverless container platform that eliminates managing infrastructure, offers per task vcpu and memory billing, and isolated security with automatic scaling for elastic workloads.

Compare the EC2 launch type and AWS Fargate across infrastructure management, scalability, pricing, control, and use case fit, highlighting full infrastructure control versus fully managed, pay per task resources.

Amazon Lightsail, an all-in-one, pay-as-you-go cloud kit ideal for beginners and POCs, with easy setup and pre-packaged templates that simplify starting a project.

Explore serverless as a cloud model where providers manage infrastructure, enabling event-driven processing, automatic scaling, and pay-as-you-go pricing, so you focus on coding and delivering high availability apps.

Explore AWS Lambda, a serverless, event-driven compute service that runs small code snippets in response to events, with auto scaling and pay-per-use pricing across multiple languages.

Explore how AWS Lambda wakes on events, runs code, then sleeps, charging only for execution duration and invocations, and see an image compression workflow with S3 triggered by uploads.

Elastic Beanstalk lets you deploy web apps and APIs without managing infrastructure; AWS handles servers, scaling, and load balancing as a managed PaaS, supporting multiple languages.

Learn how Elastic Beanstalk provides a customizable, scalable PaaS that deploys code fast, integrates with CloudWatch for monitoring, and manages underlying resources while explaining cost considerations.

Compare LightSail, Elastic Beanstalk, and Lambda across use cases, management models, scaling, and cost, from DIY kits to serverless architectures for AWS beginners and apps.

Explore Amazon S3 as a scalable, durable object storage that uses buckets and objects, with keys, metadata, and versioning, and learn how region choice affects latency, compliance, and cost.

Explore how an S3 bucket stores objects with unique keys, data, and optional metadata, illustrated by examples like folder1/subfolder/image1.jpeg and home-banner.jpeg, and learn file size limitations.

Understand S3 file size limits by comparing per-object limits and upload methods: direct upload up to 5 GB, multi-part upload for 5 GB to 5 TB, and unlimited bucket capacity.

Explore the S3 standard storage class with high durability, performance, low latency, high throughput, and automatic replication across at least three availability zones for active data and frequently accessed applications.

Explore S3 standard IA, a cost-effective storage class for infrequently accessed data with rapid retrieval, per-GB retrieval fees, 11 nines durability, 99.9% availability, and three-zone replication.

Explore s3 one zone ia, a cost-saving infrequent access option stored in a single availability zone, with 11 nines durability and lower availability than s3 standard ia.

Explore S3 glacier instant retrieval as a low-cost archive storage with millisecond access, 11 nines durability, 99.9% availability, and a 90-day minimum storage for instant retrieval use cases.

S3 Glacier Flexible Retrieval provides archival storage with 11 nines durability and three options—expedited within minutes, standard 3–5 hours, and bulk 5–12 hours—enabling long-term backups, compliance archives, and historical data.

S3 Glacier Deep Archive provides the lowest-cost storage for rarely accessed data with 11 nines of durability and 12–48 hour retrieval, replicated across three availability zones for long-term archival use.

Compare AWS storage classes by durability, availability, retrieval time, and cost; S3 standard offers the highest availability with 11 nines durability while one zone IA lowers availability and costs.

Explore the AWS snow family for offline data transfer, featuring snowball (edge storage and edge compute) and snowmobile; plan, order, ship, transfer, and ingest to S3.

Learn how AWS snowball provides storage optimized and compute optimized options for large-scale data transfer and edge processing, with up to 210 TB storage, 460 GB memory, and 104 vCPUs.

Explore AWS snowmobile, a 45-foot tamper-free container for exabyte-scale transfers to the cloud. Move up to 100 PB per unit at up to 1 Tbps, enabling large data center migrations.

Explore relational databases in AWS by learning how tables store data with predefined schemas, link records with primary and foreign keys, and perform CRUD operations using SQL.

Explore non-relational databases and NoSQL, learn how JSON-based key-value, document, wide-column, and graph formats enable flexible schemas, scalable storage, and high performance.

Compare IaaS and PaaS options for databases on AWS EC2, detailing full control, backups, and scaling. Consider flavors like MySQL or SQL Server and shifting heavy lifting to the provider.

Explore Amazon RDS, a fully managed relational database service that supports multiple engines, automates backups and patching, enables automatic failover with multi-AZ and read replicas, and scales compute and storage.

Contrast a fully managed RDS database with a self-managed EC2 database, detailing ease of use, automated backups, scaling, multi-AZ availability, and maintenance burden.

Explore Amazon Aurora, a high-performance, managed relational database compatible with MySQL and PostgreSQL, delivering up to five times MySQL and three times PostgreSQL performance with six data copies and failover.

Compare Amazon Aurora and Amazon RDS, highlighting performance advantages, scalability, read replicas, auto scaling, instant crash recovery, serverless considerations, and cost for relational databases on AWS.

Explore DynamoDB, a serverless NoSQL database designed for low latency, high performance, and scalable storage, supporting key value and document models, encryption, and global tables across regions.

Amazon Redshift is a fully managed cloud data warehouse for large-scale OLAP analytics on structured and semi-structured data, using columnar storage, MPP, SQL compatibility, and integrations with S3 and QuickSight.

Explore Amazon ElastiCache, a fully managed in-memory data store that delivers low-latency microsecond data access, reduces database load, and supports Redis and Memcached engines for real-time caching.

Move databases to the cloud with AWS database migration service, enabling continuous data replication with CDC, and support for homogeneous and heterogeneous migrations across relational, NoSQL, and data warehouses.

Explore Amazon QuickSight, AWS’s visualization platform for interactive dashboards and fast analytics. Connect to S3, Athena, RDS, Salesforce, and other sources, with the Spice engine and NLP insights.

Explore how aws glue simplifies etl by extracting, transforming, and loading data for analytics. See how the data catalog and glue studio enable discoverability and integration with s3 and redshift.

Explore Amazon Neptune, a fully managed graph database service designed for highly connected data and social networks, with Gremlin and SPARQL query support for fast, parallel traversals.

Explore the domain name system and how dns servers translate human readable domains into machine readable ip addresses, enabling browsers to reach web servers.

Explore AWS Route 53, a managed DNS service that handles domain registration, DNS routing, and health checks to route traffic globally with high availability and routing policies.

Explore Route 53 routing policies, including simple, weighted, latency-based, failover, and geolocation routing, with health checks and primary and backup servers.

Explore CDN and CloudFront to cache content at edge locations, delivering from origin servers. Learn content acceleration, media streaming (hls, dash), and security with WAF, Shield, SSL/TLS using S3/EC2 origins.

Understand how Route 53 and CloudFront work together to route users via health-checked DNS to a primary EU endpoint or a US fallback, delivering cached or origin content.

Explore AWS Global Accelerator, a network level acceleration service routing traffic via the AWS private network to edge locations. Leverage health checks, endpoint groups, and up to 60% faster access.

Compare AWS Global Accelerator, Route 53, and CloudFront across DNS, network, and application layers, noting Global Accelerator's static IPs, DNS failover with Route 53, and CloudFront's edge content caching.

Understand virtual private cloud (VPC) fundamentals in AWS, including isolation, public and private subnets, gateways and NAT, security groups, network ACLs, and how VPC spans a region across availability zones.

Explore VPC components, including subnets, routing tables, security groups, and network ACLs, and how internet, NAT, and virtual private gateways connect VPC resources to the internet and on prem networks.

Learn how NACLs filter traffic at the subnet level, with inbound and outbound rules, including deny rules. Compare NACLs to security groups, noting their stateless, rule-priority evaluation and subnet scope.

NACLs operate at the subnet level and are stateless, with inbound and outbound rules evaluated separately; NSGs are instance-level and stateful, with inbound and outbound rules evaluated together.

Enable outbound-only internet access for resources in a private subnet by routing traffic through a NAT gateway in a public subnet, with inbound access blocked and internet gateway handling connectivity.

Explore VPC flow logs that capture IP traffic to and from network interfaces across a VPC, enabling near real-time monitoring, troubleshooting, and analysis with CloudWatch or S3 storage.

Learn how VPC peering creates a private bridge between VPCs for direct, secure communication over private IP addresses, enables shared resources, and yields modular, globally resilient architectures across regions.

Establish a private, high-speed AWS Direct Connect link from on-premises to AWS to bypass the public internet, enable low-latency, data-intensive hybrid workloads, and securely connect multiple VPCs across regions.

Implement defense in depth by layering physical, identity and access, perimeter, network, compute, application, and data to prevent a single point of failure and protect data confidentiality and integrity.

Explore how encryption protects data at rest, in transit, and in use, using symmetric and asymmetric keys, AES and RSA, with AWS services like S3, TLS, and KMS.

Manage and secure encryption keys with AWS KMS, creating, rotating, disabling, and deleting keys across services like S3, RDS, EBS, Lambda, and DynamoDB, under IAM policies.

Explore cloud HSM, a dedicated hardware security module for storing and operating on cryptographic keys in your own virtual private cloud, with full key control and FIPS level 3 validation.

Strengthen your AWS web apps with a web application firewall (WAF). Use custom rules to block bots, malicious traffic, SQL injections, and XSS, while enabling real-time, layer seven protection.

Examine how a DDoS attack uses botnets to flood a target with fake traffic, overwhelm bandwidth, and disrupt legitimate users. See how AWS shield defends against these threats.

Explore AWS Shield, a managed DDoS protection service for applications on AWS, with Shield Standard and Shield Advanced offering automatic 24/7 mitigation, real-time diagnostics, and protection from scaling charges.

Compare AWS Shield Standard and AWS Shield Advanced, detailing pricing, automatic protection, 24/7 DDoS experts, cost protection, and real-time diagnostics across CloudFront, Application Load Balancer, Global Accelerator, and Route 53.

Compare AWS Shield and AWS WAF: Shield protects at layer 3/4 against DDoS, while WAF protects at layer 7 against application attacks such as SQL injection and XSS.

Discover how AWS Secrets Manager securely stores and rotates database credentials and API keys, uses KMS for encryption, enforces access with IAM, and integrates with Lambda, RDS, and CloudTrail.

Explore AWS Inspector, an automated security assessment service that scans EC2 instances and ECR images for vulnerabilities and misconfigurations, provides actionable reports, continuous monitoring, and risk-based remediation.

Explore how AWS Security Hub centralizes findings from GuardDuty, Inspector, and Macie, benchmarks posture against CIS and PCI DSS, and enables automated responses with Lambda and EventBridge.

Explore Amazon Detective, a graph-based security investigator tracing root causes and timelines. It integrates CloudTrail, VPC flow logs, GuardDuty, and Security Hub to deliver pre-built dashboards.

Learn five key AWS security services—Amazon Macie, AWS Inspector, Amazon GuardDuty, AWS Security Hub, and incident investigations—to discover, protect, detect, centralize, and investigate security events across accounts.

Use AWS Artifact, a free self-service portal providing on-demand audit reports and agreements (SOC, ISO, HIPAA, BAA, NDAs) for legal and audit teams to verify AWS compliance with global standards.

Explore messaging and queuing in AWS to build scalable, real-time, decoupled systems using SNS and Kinesis, enabling asynchronous processing, real-time data insights, and reliable, flexible integration.

Explore how Amazon Simple Notification Service enables pub-sub messaging with topics, fan-out delivery to email, SMS, mobile push, HTTP endpoints, or AWS Lambda, plus filtering, dead-letter queues, and encryption.

Learn how Amazon SQS decouples and scales apps by storing messages for downstream processing, using standard and FIFO queues with visibility timeouts and dead-letter queues.

Amazon Kinesis enables real-time data streaming, processing, and analytics using Kinesis Data Streams, Kinesis Firehose, and Kinesis Analytics to collect, load, and analyze streaming data for dashboards and data warehouses.

Explore Amazon EventBridge, a serverless event bus that routes events from AWS services, apps, and SaaS partners to targets via rules and scheduling. Apply real-time processing and integration for workflows.