All certifications / Cloud Practitioner / Lessons
Cloud Practitioner CLF-C02 lessons
Study Cloud Practitioner for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Cloud Practitioner study planA week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Domain 1: Cloud Concepts
- Benefits of the AWS Cloud: pay-as-you-go pricing, economies of scale, agility, elasticity and global reach
- The six advantages of cloud computing, including trading fixed expense for variable expense and no longer guessing capacity
- High availability, fault tolerance, scalability and elasticity: what each term means and how AWS delivers it
- AWS Well-Architected Framework: the six pillars and what each one is responsible for
- Cloud design principles: loose coupling, designing for failure, automation and operations as code
- The AWS Well-Architected Tool and running a Well-Architected review
- AWS Cloud Adoption Framework (AWS CAF): the six perspectives and the business benefits of adoption
- Migration strategies (the 7 Rs): rehost, replatform, refactor, repurchase, retire, retain and relocate
- Migration tools: AWS Application Migration Service, AWS DMS with the Schema Conversion Tool, and AWS DataSync
- Cloud economics: fixed vs variable costs, total cost of ownership and the costs that move to AWS
- Licensing strategies (bring your own license vs license included) and rightsizing to cut waste
Domain 2: Security and Compliance
- The AWS shared responsibility model: security of the cloud vs security in the cloud
- How responsibilities shift across Amazon EC2, Amazon RDS, AWS Lambda and Amazon S3
- Compliance and governance: AWS Artifact, AWS Audit Manager, AWS Config and where to find compliance information
- Encryption at rest and in transit: AWS KMS, AWS CloudHSM and AWS Certificate Manager
- Protecting the root user: MFA, no access keys, and the tasks that require root credentials
- IAM users, groups, roles and policies, and the principle of least privilege
- Workforce single sign-on with AWS IAM Identity Center and customer sign-in with Amazon Cognito
- Storing credentials safely: AWS Secrets Manager and AWS Systems Manager Parameter Store
- Network protection: security groups vs network ACLs, AWS WAF, AWS Shield Standard and Advanced, AWS Firewall Manager
- Threat detection and posture: Amazon GuardDuty, Amazon Inspector, Amazon Macie, Amazon Detective and AWS Security Hub
- Logging and monitoring for security: AWS CloudTrail, Amazon CloudWatch and AWS Trusted Advisor security checks
- Where to get security help: AWS security documentation, AWS Knowledge Center, AWS Marketplace security products and AWS Partners
Domain 3: Cloud Technology and Services
- Ways to use AWS: AWS Management Console, AWS CLI, SDKs, APIs and infrastructure as code with AWS CloudFormation
- Deployment models (cloud, hybrid and on-premises) and one-time vs repeatable provisioning
- AWS global infrastructure: Regions, Availability Zones, edge locations, Local Zones, Wavelength Zones and AWS Outposts
- Choosing a Region: compliance and data residency, latency to users, service availability and price
- Amazon EC2 instance families, AMIs, Elastic Load Balancing and Amazon EC2 Auto Scaling
- Containers and serverless compute: Amazon ECS, Amazon EKS, AWS Fargate, AWS Lambda and AWS Elastic Beanstalk
- Databases: Amazon RDS and Aurora, Amazon DynamoDB, Amazon ElastiCache, Amazon Redshift and other purpose-built databases
- Networking: Amazon VPC, subnets, internet and NAT gateways, Route 53, CloudFront, Site-to-Site VPN and Direct Connect
- Storage: Amazon S3 and its storage classes, Amazon EBS, instance store, Amazon EFS, Amazon FSx, AWS Storage Gateway and AWS Backup
- AI and machine learning services: Amazon SageMaker AI, Amazon Bedrock, Amazon Q, and task-specific AI services such as Rekognition, Textract, Comprehend, Transcribe, Polly and Lex
- Analytics services: Amazon Athena, AWS Glue, Amazon Kinesis, Amazon EMR and Amazon OpenSearch Service
- Application integration, monitoring and other services: Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon CloudWatch, AWS Systems Manager and AWS IoT Core
Domain 4: Billing, Pricing, and Support
- EC2 purchase options: On-Demand, Reserved Instances, Savings Plans, Spot Instances, Dedicated Hosts and Dedicated Instances
- Data transfer and storage pricing: inbound vs outbound traffic, cross-Region traffic and S3 storage class costs
- AWS Free Tier offers and how to avoid unexpected charges
- Estimating and tracking cost: AWS Pricing Calculator, AWS Cost Explorer and AWS Budgets
- Detailed billing data: the Billing and Cost Management console, Cost and Usage Reports and data exports, and cost allocation tags
- AWS Organizations: consolidated billing, combined volume discounts and shared Reserved Instance and Savings Plans discounts
- Cost optimization tools: AWS Trusted Advisor, AWS Compute Optimizer and rightsizing recommendations
- AWS Support plans and what each includes, including Technical Account Managers and AWS Health
- Help and partner resources: AWS re:Post, Knowledge Center, AWS Marketplace, AWS Partner Network, AWS Professional Services and the AWS Trust & Safety team