AWS Cloud Practitioner Certification Cheat Sheet

Summary:

• Master the CLF-C02 exam structure, including its four domains, 65 questions, 90-minute format, and the 700 passing score threshold that determines certification success.
• Navigate core AWS services across compute, storage, database, and networking categories with comparison charts that clarify when to choose EC2 versus Lambda versus Fargate.
• Understand the Shared Responsibility Model, IAM fundamentals, and the six pillars of the Well-Architected Framework, including the sustainability pillar.
• Decode AWS pricing models, billing tools, and support plan tiers to answer cost-optimization questions confidently on exam day.
• Recognize new AI/ML services like Amazon Bedrock and SageMaker that now appear in the Cloud Technology domain of the current exam version.

Passing the AWS Certified Cloud Practitioner exam opens doors to cloud careers, but the sheer volume of services, pricing models, and architectural concepts can overwhelm even experienced technologists. The CLF-C02 version of this foundational certification tests your understanding across four distinct domains, each weighted differently and demanding specific knowledge depth. This AWS Cloud Practitioner cheat sheet distills hundreds of pages of documentation into actionable reference material designed for rapid review and confident exam performance. Whether you are a developer seeking cloud fundamentals or a business professional validating technical literacy, the structured approach here bridges the gap between surface-level familiarity and exam-ready competence.

The following diagram illustrates how the four exam domains interconnect with AWS global infrastructure and the services you must recognize on test day.

Exam overview and structure

Understanding the examination structure before diving into technical content establishes a strategic foundation for your preparation. The CLF-C02 exam replaced the original CLF-C01 version and introduced updated content reflecting modern AWS services and architectural patterns. Amazon Web Services designed this certification as a validation of foundational cloud knowledge suitable for technical and non-technical roles alike.

The exam measures your ability to explain the value proposition of AWS, understand basic security practices, recognize core services, and comprehend billing mechanisms. The examination consists of 65 questions delivered over 90 minutes. Only 50 questions are scored while 15 serve as unscored pilot questions for future exam development.

You will encounter two question formats. Multiple choice questions have one correct answer. Multiple response questions require two or more correct selections. The passing threshold sits at 700 out of 1000 on a scaled scoring model, meaning raw percentages do not directly translate to final scores. AWS applies statistical equating to ensure consistent difficulty across exam versions.

The four domains carry different weights, and allocating study time proportionally maximizes your score potential. Consider the following breakdown when planning your review sessions.

The Cloud Technology and Services domain commands the largest portion at 34%, making service recognition and use-case matching your highest-yield study investment. Security follows closely at 30%, emphasizing that AWS treats security knowledge as foundational rather than advanced. With this structural understanding established, the next section examines the specific services you must recognize within each technology category.

Core AWS services you must know

The Cloud Technology and Services domain tests your ability to identify appropriate AWS services for given scenarios rather than deep implementation knowledge. You need to recognize service names, understand their primary purposes, and differentiate between similar offerings. This AWS Certified Cloud Practitioner CLF-C02 guide organizes services by category to build mental models that accelerate exam-day recall. Mastering these categories transforms random service memorization into logical groupings that mirror real architectural decisions.

Compute services comparison

Compute services form the processing backbone of AWS workloads, and the exam frequently presents scenarios requiring you to select the appropriate compute model. Amazon EC2 provides virtual servers with full operating system control, suitable for applications requiring persistent state or specific runtime configurations. AWS Lambda enables serverless function execution where you pay only for compute time consumed during code execution. AWS Fargate provides a serverless compute engine for containers, eliminating the need to manage underlying EC2 instances while running workloads orchestrated by ECS or EKS.

Storage and database services

Storage services divide into object, block, and file categories, each serving distinct architectural needs. Amazon S3 provides object storage with 99.999999999% (eleven nines) durability, making it the default choice for static assets, backups, and data lakes. Amazon EBS delivers block storage volumes that attach to EC2 instances, functioning like traditional hard drives with persistent data across instance stops. Amazon EFS offers managed file storage accessible from multiple EC2 instances simultaneously using the NFS protocol.

Database services span relational and non-relational models with managed offerings that reduce operational overhead.

• Amazon RDS: Managed relational databases supporting MySQL, PostgreSQL, MariaDB, Oracle, and SQL Server with automated backups and Multi-AZ deployment options.
• Amazon Aurora: AWS-designed relational database compatible with MySQL and PostgreSQL, offering up to five times throughput improvement over standard MySQL.
• Amazon DynamoDB: Fully managed NoSQL database delivering single-digit millisecond latency at any scale with automatic scaling.
• Amazon Redshift: Data warehouse service optimized for analytical queries across petabyte-scale datasets.

The following visualization demonstrates how storage classes in S3 balance cost against retrieval time. This is a common exam topic.

Networking and content delivery

Networking services establish the connectivity fabric that enables all other AWS services to communicate securely. Amazon VPC creates isolated virtual networks where you define IP ranges, subnets, route tables, and gateways. Understanding VPC fundamentals helps you answer questions about network isolation and security boundaries. Amazon CloudFront provides content delivery network capabilities, caching content at edge locations globally to reduce latency for end users.

Key networking concepts tested on the exam include:

1. Security groups: Stateful firewalls operating at the instance level, allowing traffic based on rules and automatically permitting return traffic.
2. Network ACLs: Stateless firewalls operating at the subnet level, requiring explicit rules for both inbound and outbound traffic.
3. Internet Gateway: Enables communication between VPC resources and the public internet.
4. NAT Gateway: Allows private subnet resources to access the internet while preventing inbound connections.
5. AWS Direct Connect: Dedicated network connection from on-premises data centers to AWS, bypassing the public internet.

With core services mapped across compute, storage, database, and networking categories, the next section addresses the security and compliance knowledge that comprises 30% of your exam score.

Security, compliance, and governance best practices

The Security and Compliance domain carries the second-highest weight at 30%, reflecting AWS’s emphasis on security as a foundational competency rather than an advanced specialization. This section covers the Shared Responsibility Model that defines security boundaries, IAM fundamentals for access control, compliance programs that enable regulated workloads, and the Well-Architected Framework that guides architectural decisions. Mastering these concepts prepares you for scenario-based questions that test practical security judgment.

Shared Responsibility Model explained

The Shared Responsibility Model divides security obligations between AWS and customers based on the service type consumed. AWS maintains responsibility for security of the cloud, encompassing physical data centers, hardware, networking infrastructure, and the hypervisor layer. Customers bear responsibility for security in the cloud, including operating system patches, application code, data encryption, and access management.

This division shifts based on whether you use infrastructure services like EC2, container services like ECS, or abstracted services like Lambda. For infrastructure services, customers manage the operating system, network configuration, and firewall rules. Container services shift some responsibility to AWS while customers still manage code and data. Abstracted services like S3 and DynamoDB place most infrastructure responsibility on AWS while customers focus on data classification and access policies. The exam tests your ability to correctly assign responsibility for specific security tasks.

IAM fundamentals and security services

AWS Identity and Access Management controls authentication and authorization across all AWS services. IAM users represent individual identities with long-term credentials, while IAM roles provide temporary credentials for applications and services. IAM policies define permissions using JSON documents that specify allowed or denied actions on specific resources. The principle of least privilege guides IAM configuration, granting only the minimum permissions necessary for each identity.

Additional security services you should recognize include:

• AWS Organizations: Centrally manages multiple AWS accounts with consolidated billing and service control policies.
• AWS CloudTrail: Records API calls across your AWS infrastructure for auditing and compliance.
• Amazon GuardDuty: Threat detection service that continuously monitors for malicious activity.
• AWS Shield: Managed DDoS protection service with Standard tier included automatically and Advanced tier for enhanced protection.
• AWS WAF: Web application firewall that filters malicious web traffic based on customizable rules.

Well-Architected Framework pillars

The AWS Well-Architected Framework provides architectural best practices across six pillars that guide cloud workload design. The sustainability pillar was added as the sixth pillar in 2021, and CLF-C02 exam content reflects this addition. Understanding each pillar helps you answer questions about architectural trade-offs and best practices.

AWS compliance programs enable customers to meet regulatory requirements without building compliance infrastructure from scratch. Programs like SOC 1, SOC 2, HIPAA, PCI DSS, and FedRAMP provide audit reports and certifications that customers can inherit for their own compliance needs. The AWS Compliance Programs page lists all certifications and attestations available. With security foundations established, the next section addresses the billing and pricing knowledge that completes your exam preparation.

Pricing, billing, and support plans explained

The Billing, Pricing, and Support domain carries 12% of the exam weight but contains highly testable content around pricing models and cost management tools. AWS offers multiple pricing mechanisms designed for different usage patterns, and selecting the appropriate model significantly impacts total cost of ownership. This section clarifies the distinctions between pricing options and introduces the billing tools that help organizations track and optimize cloud spending.

Pricing models compared

AWS pricing models balance flexibility against commitment, with deeper discounts available for longer-term commitments. On-Demand pricing charges by the second or hour with no upfront commitment, providing maximum flexibility for unpredictable workloads. Reserved Instances offer up to 72% discount compared to On-Demand in exchange for one-year or three-year commitments to specific instance types. Savings Plans provide similar discounts with greater flexibility, applying to any instance family within a region rather than specific instance types.

Spot Instances offer the deepest discounts at up to 90% off On-Demand prices but can be interrupted with two-minute notice when AWS needs the capacity. This model suits fault-tolerant workloads like batch processing, data analysis, and containerized applications that can handle interruption. The exam tests your ability to match pricing models to workload characteristics.

Billing tools and cost management

AWS provides multiple tools for monitoring, analyzing, and optimizing cloud costs. AWS Cost Explorer visualizes spending patterns over time and provides forecasting based on historical usage. AWS Budgets enables setting custom cost and usage thresholds with alerts when spending approaches or exceeds defined limits. The AWS Pricing Calculator helps estimate costs for new workloads before deployment.

The AWS Free Tier provides limited free usage across many services for 12 months after account creation, plus always-free offerings that never expire. Understanding Free Tier limits helps answer questions about cost-effective experimentation and learning. AWS Cost and Usage Reports provide the most detailed billing data, exportable to S3 for analysis with tools like Amazon Athena or Amazon QuickSight.

Support plans breakdown

AWS offers four support plan tiers with escalating response times, access to expertise, and pricing. The exam frequently tests the differences between these plans and the scenarios where each applies.

Understanding pricing and support completes the four exam domains, but the CLF-C02 version also includes new AI/ML services that warrant specific attention in the final section.

AI/ML services on the current exam

The CLF-C02 exam expanded coverage of artificial intelligence and machine learning services, reflecting AWS’s strategic investment in these capabilities. You do not need deep ML expertise, but you must recognize service names and their high-level purposes. These services appear in the Cloud Technology and Services domain and may surface in scenario questions about adding intelligence to applications.

Key AI/ML services to recognize include:

• Amazon SageMaker: Fully managed service for building, training, and deploying machine learning models at scale.
• Amazon Bedrock: Managed service providing access to foundation models from AI companies through a unified API.
• Amazon Rekognition: Image and video analysis service for facial recognition, object detection, and content moderation.
• Amazon Comprehend: Natural language processing service that extracts insights and relationships from text.
• Amazon Polly: Text-to-speech service that converts text into lifelike speech in multiple languages.
• Amazon Transcribe: Automatic speech recognition service that converts audio to text.
• Amazon Translate: A neural machine translation service that delivers fast, high-quality, and affordable language translation.
• Amazon Lex: Conversational interface service that powers chatbots and voice assistants.

The AWS Machine Learning page provides current documentation on all AI/ML services and their capabilities. With AI/ML services covered, you now have comprehensive knowledge across all four exam domains and the specialized topics that differentiate CLF-C02 from its predecessor.

Conclusion

This AWS Cloud Practitioner cheat sheet covered the essential knowledge required to pass the CLF-C02 certification exam with confidence. The four domains demand different preparation strategies. Cloud Technology and Services requires broad service recognition across compute, storage, database, and networking categories. Security and Compliance tests your understanding of the Shared Responsibility Model and IAM fundamentals. Pricing and billing questions reward familiarity with On-Demand, Reserved, Savings Plans, and Spot pricing models alongside the support plan tiers that determine response times and available expertise.

The certification landscape continues evolving as AWS introduces new services and updates existing ones. The addition of AI/ML services like Amazon Bedrock and the sustainability pillar in the Well-Architected Framework reflects AWS’s expanding scope and environmental commitments. Candidates who understand these additions alongside foundational concepts position themselves for exam success and practical cloud competency.

Your next step involves active practice with sample questions that test scenario-based reasoning rather than pure memorization. Use this cheat sheet as a reference during practice sessions, returning to specific sections when questions reveal knowledge gaps. The 700 passing score threshold is achievable with structured preparation, and this foundational certification opens pathways to associate and professional-level AWS certifications that deepen your cloud expertise.