AWS CCP Certification: Complete Study Guide for CLF-C02

AWS CCP certification guide covering eligibility, exam format, study plan, and top tips. Everything you need to pass the CLF-C02 on your first attempt.

AWS CCP Certification: What It Is and Why It Matters

The AWS CCP certification—AWS Certified Cloud Practitioner—is Amazon Web Services' entry-level cloud credential. It's designed for anyone who needs a foundational understanding of AWS services, cloud architecture, security, and pricing—without necessarily being a hands-on technical practitioner.

That makes the CCP unusually broad in its appeal. Developers use it as a foundation before moving toward Solutions Architect or Developer associate credentials. Business analysts, project managers, and sales engineers use it to better understand the AWS ecosystem they work within. People transitioning into cloud roles use it to validate that they've done the foundational legwork.

The exam itself covers four domains: Cloud Concepts, Security and Compliance, Cloud Technology and Services, and Billing and Pricing. If you're coming from a non-technical background, the breadth of services you need to recognize can feel overwhelming. If you're technical, the lack of deep implementation questions can feel artificially easy—until you encounter the scenario questions where you need to pick the right service for a specific situation.

CLF-C02: The Current Exam Version

AWS updated the Cloud Practitioner exam to CLF-C02 in September 2023. The update expanded coverage of newer AWS services, increased emphasis on cloud migration concepts, and refined how billing and support topics are tested. If you're using older study materials that reference CLF-C01, you can still use them for foundational concepts, but supplement with CLF-C02-specific practice questions—some service coverage has shifted.

Key changes in CLF-C02 compared to CLF-C01:

  • Greater emphasis on the AWS Well-Architected Framework and its six pillars
  • More questions covering cloud migration strategies (the 6 R's: rehost, replatform, repurchase, refactor, retire, retain)
  • Expanded coverage of AWS managed services vs. self-managed alternatives
  • Updated service names and some service consolidations that happened between 2020 and 2023

The core format is unchanged: 65 questions (50 scored, 15 unscored pilot), 90 minutes, passing score of 700/1000, $100 exam fee.

Who the CCP Is (and Isn't) For

The CCP is ideal for you if:

  • You're new to cloud computing and want a structured path to foundational knowledge
  • You work in a non-technical role but frequently interact with AWS infrastructure or cloud-based projects
  • You're planning to pursue associate-level AWS certifications and want a solid foundation first
  • You're in a hiring process where AWS cloud familiarity is a listed preference

The CCP may not be the right starting point if you're already working as a developer, DevOps engineer, or systems administrator with hands-on AWS experience. In that case, starting directly with the Solutions Architect Associate or Developer Associate is often more efficient—those exams start with concepts the CCP covers but go much deeper.

There are no formal prerequisites for the CCP. AWS recommends six months of cloud exposure, but the exam is designed to be accessible to people without hands-on experience who've done thorough studying.

The Four Domains in Detail

Understanding each domain's content and relative weight helps you allocate study time appropriately. Here's what you actually need to know in each:

Cloud Concepts (24%)

This domain tests conceptual understanding of cloud computing—not AWS specifically. Benefits of the cloud (agility, scalability, elasticity, pay-as-you-go pricing), deployment models (public, private, hybrid), and service models (IaaS, PaaS, SaaS) are core topics. You also need to know the AWS global infrastructure: regions (geographic areas), Availability Zones (isolated data centers within a region), and edge locations (CDN endpoints for CloudFront). The shared responsibility model—what AWS manages vs. what you manage—is foundational and appears across multiple domains.

Security and Compliance (30%)

The heaviest domain. Deep familiarity with these topics is essential:

  • IAM (Identity and Access Management): Users, groups, roles, and policies. The principle of least privilege. Multi-factor authentication. When you'd use a role vs. an IAM user.
  • Security services: AWS Shield (DDoS protection), AWS WAF (web application firewall), Amazon GuardDuty (threat detection), Amazon Inspector (vulnerability assessment), Amazon Macie (sensitive data discovery in S3), AWS KMS (key management), AWS Secrets Manager.
  • Compliance and data governance: AWS Artifact (compliance reports), shared responsibility model applications, and how AWS meets various compliance frameworks (SOC, PCI DSS, HIPAA, FedRAMP).

Cloud Technology and Services (34%)

The largest domain. You don't need to know how to configure these services—you need to know what they do and when to use them:

Compute: EC2 (virtual servers, instance types), Lambda (serverless), Elastic Beanstalk (PaaS for apps), ECS/EKS (containers), Lightsail (simplified VPS).

Storage: S3 (object storage, storage classes), EBS (block storage attached to EC2), EFS (elastic file system), AWS Backup, S3 Glacier (archival).

Databases: RDS (managed relational DB), DynamoDB (NoSQL), ElastiCache (in-memory caching), Redshift (data warehousing), Aurora (MySQL/PostgreSQL compatible, serverless option).

Networking: VPC (virtual private network), Route 53 (DNS), CloudFront (CDN), Direct Connect (dedicated network connection), VPN Gateway.

Management and monitoring: CloudWatch (monitoring and alerts), CloudTrail (API call logging), AWS Config (configuration compliance), Trusted Advisor (best practice recommendations), AWS Organizations (multi-account management).

Billing, Pricing, and Support (12%)

Smaller but often an easy domain for most candidates. Know the pricing models: on-demand (pay per hour/second), reserved instances (1- or 3-year commitment for discount), spot instances (unused capacity at deep discount, can be interrupted), and savings plans (flexible commitment-based discount). AWS Free Tier, the AWS pricing calculator, Cost Explorer, and AWS Budgets are all testable. The four support plans—Basic, Developer, Business, and Enterprise—and their differences (response times, access to TAMs, etc.) frequently appear.

Study Plan: 4 Weeks to CCP Certification

This plan assumes 1–2 hours of study per day. Adjust timeline based on your schedule and starting knowledge level.

Week 1 — Foundations: Cover cloud concepts, the AWS global infrastructure, and the shared responsibility model thoroughly. Watch a structured video course (Stephane Maarek's on Udemy is widely recommended) or use AWS's free digital training on Skill Builder. Take a baseline practice test at the end of the week to identify starting accuracy across all four domains.

Week 2 — Security and Services: Deep dive into the Security and Compliance domain—IAM, security services, and compliance frameworks. Begin covering the major service categories in Cloud Technology and Services (compute, storage, databases). Take domain-specific practice questions daily.

Week 3 — Complete Services + Billing: Finish covering networking and management services. Study the billing and support domain—it's smaller but full of easily learnable, high-frequency questions. Take two full practice exams under timed conditions and review every wrong answer.

Week 4 — Consolidation: Focus on your weakest domains from practice tests. Take at least two more full practice exams. Review AWS service distinctions you're still confusing (S3 vs EBS vs EFS is a common one). In the final 2–3 days, no new topics—just review and light practice to stay sharp without burning out.

You're ready to schedule when you're consistently scoring 80%+ on full practice exams. Given the 70% passing threshold, this gives you meaningful buffer for exam-day pressure and the unscored pilot questions.

Practice Is the Fastest Path to Passing

The AWS CCP covers more services and concepts than most candidates initially expect. You can read about EC2, Lambda, and S3 all day—but until you've answered questions that ask you to choose between them in a specific scenario, you won't know if you can actually apply that knowledge under exam conditions.

Start with a diagnostic practice test to establish your baseline, then build your study plan around your weakest domains. Candidates who practice with real exam-style questions consistently outperform those who study passively. Get in the reps now, and you'll walk into the CLF-C02 ready to pass on your first attempt.

About the Author

James R. HargroveJD, LLM

Attorney & Bar Exam Preparation Specialist

Yale Law School

James R. Hargrove is a practicing attorney and legal educator with a Juris Doctor from Yale Law School and an LLM in Constitutional Law. With over a decade of experience coaching bar exam candidates across multiple jurisdictions, he specializes in MBE strategy, state-specific essay preparation, and multistate performance test techniques.