A Complete Guide to AWS Cloud Practitioner Certification

Summary:

• The AWS Cloud Practitioner certification (CLF-C02) validates foundational cloud knowledge across four weighted domains. These include Cloud Concepts (24%), Security and Compliance (30%), Cloud Technology and Services (34%), and Billing, Pricing, and Support (12%).
• This guide provides a prioritized service matrix covering compute, storage, networking, and database services you must know. It also includes scenario-based decision frameworks for exam questions.
• Recent CLF-C02 updates include expanded coverage of AI/ML services, the AWS Well-Architected Framework, and governance tools that previous exam versions did not emphasize.
• A structured 4-6 week study plan combining free AWS resources, hands-on labs, and practice exams offers the most reliable path to passing on your first attempt.

Earning your first AWS certification feels like unlocking a door that thousands of cloud professionals have walked through before you. The AWS Cloud Practitioner certification stands as that entry point, validating your understanding of cloud fundamentals without requiring you to write a single line of code or architect a production system. Whether you are a project manager seeking cloud fluency, a developer pivoting toward infrastructure, or a student building credentials, this foundational credential signals to employers that you speak the language of modern cloud computing. This guide breaks down exactly what the CLF-C02 exam covers, which services demand your attention, and how to structure your preparation for success in 2026.

Understanding the CLF-C02 exam structure

The AWS Certified Cloud Practitioner exam, designated CLF-C02, replaced the original CLF-C01 version in September 2023 with significant content updates. You will face 65 questions during a 90-minute testing window. Only 50 questions are scored while 15 serve as unscored pilot questions for future exams. The passing score sits at 700 out of 1000, which translates roughly to answering 70% of scored questions correctly. AWS delivers the exam through Pearson VUE testing centers or as a proctored online exam from your home, with the current registration fee at $100 USD.

The question format includes two types you must prepare for. Multiple-choice questions present four options with a single correct answer. Multiple-response questions ask you to select two or three correct answers from five or six options. The exam explicitly tells you how many responses to select, so read each question stem carefully. No partial credit exists for multiple-response questions, meaning you must identify all correct options to earn points.

Key differences between CLF-C01 and CLF-C02

The transition from CLF-C01 to CLF-C02 brought meaningful shifts in domain weightings and content emphasis. Security and Compliance increased from 25% to 30%, reflecting AWS’s growing focus on shared responsibility and governance. Cloud Technology and Services expanded to 34% while absorbing content previously scattered across other domains. The billing domain decreased slightly to 12%, though pricing models remain heavily tested. Understanding these shifts helps you allocate study time proportionally to exam weight.

Content additions in CLF-C02 include explicit coverage of AI and machine learning services like Amazon SageMaker, Amazon Rekognition, and Amazon Comprehend at a conceptual level. The exam now tests awareness of the AWS Well-Architected Framework and its six pillars more directly than before. Governance services including AWS Organizations, Service Control Policies, and AWS Control Tower appear with greater frequency. These updates mean study materials published before late 2023 may leave gaps in your preparation.

Cloud concepts domain (24%)

This domain establishes your understanding of why organizations adopt cloud computing and how AWS delivers value. You must articulate the six advantages of cloud computing that AWS emphasizes. These include trading capital expense for variable expense, benefiting from massive economies of scale, eliminating guessing on capacity, increasing speed and agility, stopping spending money running data centers, and going global in minutes. Expect questions that present business scenarios and ask which cloud benefit applies.

The cloud computing models require clear differentiation in your mind:

• Infrastructure as a Service (IaaS): You manage the operating system upward while AWS handles virtualization, servers, storage, and networking. Amazon EC2 exemplifies this model.
• Platform as a Service (PaaS): AWS manages the runtime environment while you focus on code and data. AWS Elastic Beanstalk represents this approach.
• Software as a Service (SaaS): Complete applications delivered over the internet where you simply consume functionality. Amazon WorkSpaces fits this category.

AWS global infrastructure

AWS operates infrastructure across geographic Regions, each containing multiple Availability Zones. A Region represents a physical location in the world where AWS clusters data centers. An Availability Zone consists of one or more discrete data centers with redundant power, networking, and connectivity. As of early 2026, AWS operates 34 Regions globally with plans for additional expansion. Edge locations, numbering over 450 worldwide, serve content through Amazon CloudFront and provide DNS resolution through Amazon Route 53.

Selecting a Region involves balancing four factors. These include compliance requirements that mandate data residency, proximity to customers for latency reduction, service availability since not all services launch simultaneously in every Region, and pricing variations that exist between Regions. The exam tests your ability to recommend Region selection based on scenario constraints. Understanding that Availability Zones provide fault isolation within a Region while Regions provide geographic separation forms the foundation for high availability discussions.

Security and compliance domain (30%)

The largest exam domain centers on the AWS shared responsibility model, which divides security obligations between AWS and the customer. AWS maintains responsibility for security “of” the cloud, encompassing physical infrastructure, hypervisor, managed services’ underlying platforms, and global network security. Customers bear responsibility for security “in” the cloud, including data encryption, identity management, network configuration, and operating system patching on EC2 instances.

The responsibility boundary shifts based on service type. With Amazon EC2, you manage the guest operating system, application software, and security group configurations. With Amazon RDS, AWS handles OS patching and database engine updates while you manage database users and data. With AWS Lambda, AWS manages nearly everything except your function code and IAM permissions. Recognizing where responsibilities fall for different service categories appears frequently on the exam.

Identity and access management fundamentals

AWS Identity and Access Management (IAM) controls authentication and authorization across your AWS environment. The service operates globally, meaning IAM users and roles exist across all Regions without replication requirements. Core IAM components include users representing individual identities, groups that aggregate users for permission assignment, roles that provide temporary credentials to trusted entities, and policies that define permissions through JSON documents.

IAM best practices the exam emphasizes include:

1. Enable multi-factor authentication (MFA) on the root account and privileged users
2. Follow the principle of least privilege when assigning permissions
3. Use IAM roles for applications running on EC2 rather than embedding access keys
4. Rotate credentials regularly and remove unused users and permissions
5. Use AWS Organizations service control policies for account-level guardrails

Compliance and governance services

AWS provides compliance programs and certifications that customers inherit when using AWS services. The AWS Artifact portal provides on-demand access to AWS compliance reports including SOC reports, PCI DSS attestations, and ISO certifications. AWS Config continuously monitors resource configurations against rules you define, enabling compliance auditing and change tracking. AWS CloudTrail logs API calls across your account, providing an audit trail for security analysis and compliance verification.

Governance at scale requires AWS Organizations, which consolidates multiple AWS accounts under centralized management. Service Control Policies (SCPs) within Organizations establish permission guardrails that apply across member accounts regardless of IAM permissions. AWS Control Tower extends this capability by providing pre-configured governance rules called guardrails, automating account provisioning through Account Factory, and establishing a landing zone architecture. These services appear in CLF-C02 with greater emphasis than the previous exam version.

Cloud technology and services domain (34%)

This domain carries the heaviest weight and requires familiarity with AWS services across compute, storage, networking, and database categories. You do not need deep implementation knowledge, but you must recognize service purposes, appropriate use cases, and basic operational characteristics. The following service matrix organizes services by exam priority, helping you focus study time on high-frequency topics.

Compute service decision framework

Exam questions frequently present scenarios requiring you to recommend the appropriate compute service. Understanding the decision criteria helps you navigate these questions efficiently. Amazon EC2 suits workloads requiring persistent servers, specific operating systems, or applications that cannot be containerized or decomposed into functions. AWS Lambda fits event-driven workloads with variable traffic, short execution times under 15 minutes, and scenarios where you want to eliminate server management entirely.

Container services occupy the middle ground. Amazon Elastic Container Service (ECS) provides container orchestration with tight AWS integration. Amazon Elastic Kubernetes Service (EKS) offers managed Kubernetes for teams with existing Kubernetes expertise. AWS Fargate removes the need to manage underlying EC2 instances for either ECS or EKS, providing serverless container execution. The exam tests your ability to match workload characteristics to the appropriate compute model rather than deep implementation details.

Storage classes and data management

Amazon S3 offers multiple storage classes optimized for different access patterns and cost requirements. S3 Standard provides high durability and availability for frequently accessed data. S3 Intelligent-Tiering automatically moves objects between access tiers based on usage patterns, making it ideal when access frequency is unpredictable. S3 Standard-IA and S3 One Zone-IA reduce costs for infrequently accessed data with retrieval fees. S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive provide progressively lower storage costs with longer retrieval times for archival data.

Amazon EBS provides block storage volumes that attach to EC2 instances, persisting independently from instance lifecycle. EBS volume types include General Purpose SSD (gp3) for balanced workloads, Provisioned IOPS SSD (io2) for high-performance databases, and Throughput Optimized HDD (st1) for big data workloads. Amazon Elastic File System (EFS) provides shared file storage accessible from multiple EC2 instances simultaneously, supporting NFS protocol. Distinguishing between object storage (S3), block storage (EBS), and file storage (EFS) represents a fundamental exam concept.

AI/ML and analytics services overview

CLF-C02 expanded coverage of artificial intelligence and machine learning services at a conceptual level. Amazon SageMaker provides a fully managed platform for building, training, and deploying machine learning models. Amazon Rekognition offers pre-trained computer vision capabilities for image and video analysis. Amazon Comprehend performs natural language processing tasks including sentiment analysis and entity extraction. Amazon Lex powers conversational interfaces using the same technology behind Alexa. You need to recognize these services’ purposes without understanding implementation details.

Analytics services frequently appear in exam scenarios involving data processing pipelines. Amazon Athena enables SQL queries directly against S3 data without loading into a database. Amazon Redshift provides petabyte-scale data warehousing for complex analytical queries. AWS Glue offers serverless ETL (extract, transform, load) capabilities for data preparation. Amazon QuickSight delivers business intelligence dashboards and visualizations. Understanding when to recommend each service based on data volume, query complexity, and user requirements helps you navigate scenario questions.

Billing, pricing, and support domain (12%)

Despite carrying the lowest weight, this domain contains highly testable content around AWS pricing models and cost management tools. The three fundamental pricing models for compute resources include On-Demand pricing with no commitment and per-second or per-hour billing, Reserved Instances offering up to 72% discount for one or three-year commitments, and Spot Instances providing up to 90% discount for interruptible workloads. Savings Plans offer flexible commitment-based discounts across EC2, Lambda, and Fargate usage.

AWS pricing follows several consistent principles across services:

• Pay for what you use: No upfront costs or termination fees for most services
• Pay less when you reserve: Commitment-based discounts reward predictable usage
• Pay less per unit with volume: Tiered pricing reduces per-unit costs at scale
• Data transfer costs: Inbound data is typically free while outbound incurs charges

Cost management and support plans

AWS provides several tools for monitoring and optimizing costs. AWS Cost Explorer visualizes spending patterns over time with filtering and forecasting capabilities. AWS Budgets enables setting custom cost and usage thresholds with alerts when approaching limits. AWS Cost and Usage Reports provide the most detailed billing data for analysis in external tools. AWS Trusted Advisor offers recommendations across cost optimization, performance, security, fault tolerance, and service limits. Full access requires Business or Enterprise support plans.

Support plan tiers determine response times and available features. The Basic plan, included free with all accounts, provides customer service for billing questions and access to documentation. Developer support adds technical support during business hours with 12-24 hour response times. Business support provides 24/7 phone access, one-hour response for production system down, and full Trusted Advisor checks. Enterprise support adds a Technical Account Manager, 15-minute response for business-critical systems, and proactive guidance. Exam questions test your ability to recommend appropriate support tiers based on business requirements.

Exam preparation strategy and resources

A structured preparation approach over four to six weeks provides sufficient time for most candidates without prior AWS experience. Begin with the official AWS Cloud Practitioner Essentials course on AWS Skill Builder, which covers all exam domains in approximately six hours of video content. Supplement this foundation with hands-on exploration using the AWS Free Tier, which provides 12 months of limited free usage for services including EC2, S3, and RDS.

Practice exams reveal knowledge gaps and build familiarity with question formats. AWS offers official practice questions through Skill Builder, and the 20-question official practice exam costs $20 USD. Third-party practice exams from providers like Tutorials Dojo and Whizlabs offer larger question banks for additional drilling. Aim to consistently score above 80% on practice exams before scheduling your actual test. Review incorrect answers thoroughly, understanding not just the correct response but why other options fail.

Test day execution tactics

Effective time management during the exam prevents rushing through difficult questions at the end. Read each question completely before examining answer options, as AWS often includes qualifying phrases that change the correct response. Eliminate obviously incorrect answers first, improving your odds when guessing between remaining options. Use the flag feature liberally for questions requiring additional thought, returning to them after completing more straightforward items.

For scenario-based questions, identify the key constraint or requirement before evaluating options. Questions asking for the “most cost-effective” solution differ from those asking for “highest availability” even when describing similar architectures. Pay attention to qualifiers like “minimum operational overhead” or “fastest implementation” that guide you toward specific service choices. When two answers seem equally valid, the one requiring less customer management typically aligns with AWS’s managed services philosophy.

Conclusion

The AWS Cloud Practitioner certification validates foundational cloud knowledge that serves as a springboard for deeper AWS expertise. Mastering the four exam domains requires understanding cloud concepts and their business value, recognizing security responsibilities under the shared model, identifying appropriate services for common scenarios, and navigating AWS pricing and support structures. The CLF-C02 exam’s expanded coverage of AI/ML services, governance tools, and the Well-Architected Framework reflects AWS’s evolving service portfolio and organizational best practices.

Your preparation investment extends beyond passing a single exam. The mental models you develop around cloud computing, service selection, and cost optimization transfer directly to real-world cloud projects and conversations with technical teams. As cloud adoption continues accelerating across industries, this foundational certification positions you to pursue specialized paths in solutions architecture, security, or operations. Schedule your exam with a specific date in mind, commit to your study plan, and approach test day with confidence built through deliberate preparation.