The AWS Certified Cloud Practitioner (CLF-C02) is Amazon Web Services' entry-level cloud certification. It's designed for people with no prior AWS technical experience — including business stakeholders, project managers, developers in other disciplines, and anyone moving into a cloud-focused role. Passing the exam demonstrates foundational knowledge of cloud concepts, core AWS services, security, billing, and the AWS shared responsibility model.
This guide covers everything you need to know to prepare for and pass the CLF-C02 exam. The current version — CLF-C02 — replaced the original CLF-C01 in 2023, with updated content reflecting AWS's expanded service catalog and an increased emphasis on cloud security and billing fundamentals. If you're starting your preparation now, make sure all your study materials reference CLF-C02, not the older version.
The AWS Certified Cloud Practitioner is not a deep technical exam. You won't be configuring services, writing code, or troubleshooting infrastructure during the test. What you will need: a genuine understanding of what AWS services exist, what problems they solve, how AWS pricing and billing works, the basics of cloud security, and how the AWS support plans differ. Candidates with no technical background can pass with focused study. Candidates with existing cloud exposure often pass with lighter preparation — though the billing and governance domains occasionally surprise people who assumed their technical knowledge would carry them through.
Before you start studying, register on the AWS certified cloud practitioner exam page to understand the structure. AWS offers the exam through Pearson VUE or PSI testing centers, or as an online proctored exam from your home or office. The current exam fee is $100 USD. AWS Certification accounts let you take practice exams (for a fee) and access your exam history. Create your account before you start studying so you can take advantage of the official practice materials early in your preparation.
The CLF-C02 exam contains 65 questions, of which 50 are scored and 15 are unscored practice questions that AWS uses to gather data on future exam items. You won't know which questions are unscored, so treat every question equally. You have 90 minutes to complete the exam. The passing score is 700 on a 100–1000 scale — roughly 70%. Question formats include multiple choice (one correct answer), multiple response (two or more correct answers from five or six options), and ordering/matching questions.
One thing worth understanding before you plan your preparation: the CLF-C02 isn't testing whether you can work in AWS — it's testing whether you understand AWS well enough to make informed decisions about it. That's an important distinction. You don't need to have built an EC2 instance or configured an S3 bucket to pass this exam. But you do need to know what those services do, when you'd use them, and how they fit into AWS's broader architecture. The exam is designed for a broad audience including non-technical roles, and the questions reflect that design philosophy.
Before diving into each domain, note that the exam doesn't label questions by domain — you'll encounter all four domains mixed throughout the test. Understanding each domain's weight helps you allocate study time, not navigate the exam itself. Domain 3 (Cloud Technology and Services) is the largest portion of the exam at 34%, but Domain 2 (Security and Compliance) at 30% is where most candidates lose the most points. Security is heavily AWS-specific — the shared responsibility model, IAM (Identity and Access Management) basics, and the specific security services AWS offers aren't intuitive if you've only read general cloud overviews.
This domain covers the foundational reasons for using cloud computing: variable vs. fixed costs, economies of scale, going global in minutes, eliminating hardware maintenance, and the trade-off between capital expenditure and operational expenditure. You'll also need to understand the six advantages of cloud computing that AWS identifies in its official whitepaper, the difference between IaaS/PaaS/SaaS, and the three cloud deployment models (public, private, hybrid).
The AWS Well-Architected Framework appears in this domain — specifically its six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. You don't need deep knowledge of each pillar, but you should be able to identify which pillar applies to a described scenario. The cloud migration strategies (6 Rs: Rehost, Replatform, Repurchase, Refactor, Retire, Retain) are also testable here.
One common confusion in Domain 1: CapEx vs. OpEx. In cloud computing, you shift from capital expenditure (buying hardware) to operational expenditure (paying for usage). The exam presents scenarios where you need to identify this shift as a cloud benefit. Similarly, know that scalability (growing capacity to meet demand) and elasticity (growing AND shrinking automatically) are distinct terms — the exam tests whether you can tell them apart.
The shared responsibility model is the single most important concept in this domain. AWS is responsible for security OF the cloud (hardware, infrastructure, networking); the customer is responsible for security IN the cloud (data, access, configuration). Understand where the boundary sits for different service types: for EC2, the customer manages the OS and everything above it; for managed services like RDS or Lambda, AWS takes on more of the responsibility stack.
IAM fundamentals are tested extensively: users, groups, roles, and policies. Know that root account credentials should never be used for daily operations, that MFA (multi-factor authentication) should be enabled for all privileged accounts, and that IAM policies follow a deny-by-default model (everything is denied unless explicitly allowed). AWS security services tested in this domain include AWS Shield (DDoS protection), AWS WAF (Web Application Firewall), Amazon GuardDuty (threat detection), and AWS CloudTrail (API activity logging).
Compliance is also covered in Domain 2. AWS has a range of compliance certifications (SOC 1/2/3, ISO 27001, PCI DSS, HIPAA eligibility) and AWS Artifact is the service that provides access to AWS compliance reports. Know what AWS Artifact is for — it's a common question topic in this domain that trips up candidates who haven't seen it before.
With Domains 1 and 2 covered, the remaining 46% of the exam tests your knowledge of AWS services and the billing tools AWS provides. These two domains are more about breadth of service recognition than conceptual depth — you don't need to configure services, just know what they do and when you'd use them over alternatives.
This domain tests recognition of core AWS services and what they do — not deep configuration knowledge, but the ability to identify which service solves a described problem. Key services to know: EC2 (virtual servers), S3 (object storage), RDS (managed relational databases), DynamoDB (NoSQL database), Lambda (serverless compute), VPC (virtual private cloud networking), CloudFront (content delivery), Route 53 (DNS), SNS (notification service), SQS (message queue), and CloudWatch (monitoring and logging).
You'll also need to understand the concepts of availability zones, regions, and edge locations. Know that regions are geographic areas containing multiple AZs; AZs are isolated data centers within a region; edge locations serve CloudFront content closer to users. High availability and fault tolerance in AWS typically means deploying across multiple AZs within a region.
The line between similar services is often tested. S3 vs. EBS vs. EFS — know that S3 is object storage accessed via HTTP, EBS is block storage attached to EC2, and EFS is a managed file system. EC2 vs. Lambda — EC2 is a virtual machine you manage; Lambda is serverless, event-driven, and automatically scales with no server management. RDS vs. DynamoDB — RDS is for relational (SQL) databases; DynamoDB is for NoSQL key-value and document workloads. These comparisons appear regularly in Domain 3 questions.
AWS pricing models — on-demand, reserved instances, savings plans, and spot instances — are all tested here. On-demand is the default pay-as-you-go model. Reserved instances and savings plans offer significant discounts (up to 72%) in exchange for 1- or 3-year commitment. Spot instances allow you to use spare AWS capacity at up to 90% discount but can be interrupted. The AWS Free Tier (always-free, 12-month free, and short-term trial offers) is also testable. Know the four AWS support plans: Basic, Developer, Business, and Enterprise, and what each includes.
Cost management tools are frequently tested: AWS Cost Explorer helps analyze and visualize costs; AWS Budgets lets you set spending alerts; the AWS Pricing Calculator estimates costs before you deploy resources; and Cost and Usage Reports provide granular billing data. Know which tool to use for each purpose — "which tool provides the most detailed billing data?" and "which tool can alert you when spending exceeds a threshold?" are representative question types in this domain.
Most candidates need 20–40 hours of study to pass the CLF-C02. That range is wide because it depends heavily on your background. Someone with years of general IT experience who's used AWS in passing might need 15–20 hours. Someone with no cloud exposure needs 35–50 hours of genuine study, not just reading. Here's a structured approach that works for most candidates.
AWS offers a free digital course called "AWS Cloud Practitioner Essentials" on AWS Skill Builder (skillbuilder.aws). It's approximately 6–8 hours of content and covers all four exam domains. This should be your first study resource — it uses AWS's own language and examples, which is the same language the exam uses. Watch every module even if a topic seems obvious. The exam often tests specific AWS terminology, and knowing the official phrasing saves you points on questions where two answers are close.
Two whitepapers are essential reading for the CLF-C02: the "AWS Overview of Amazon Web Services" whitepaper and the "AWS Well-Architected Framework" overview. Both are free on the AWS website. They're dense but readable — plan for 2–3 hours to work through both carefully. The overview gives you context for the breadth of AWS services. The Well-Architected Framework whitepaper explains the six pillars in the language the exam uses. Neither needs to be memorized — you're building conceptual familiarity, not reciting definitions.
Practice exams are the single most effective study tool for the CLF-C02. AWS's official practice exam (available through AWS Certification for a fee) uses real exam-style questions. Third-party resources also have large question banks. The strategy that works: take a full practice exam early in your preparation to identify weak areas, study those areas specifically, then take another full practice exam a few days before the real exam to confirm you're ready.
Aim for consistent scores of 75–80% on practice exams before scheduling your real exam. If you're scoring 70%, you're right at the passing threshold — one bad day can tip you below passing. The buffer matters. After taking practice exams, read the explanations for every question you missed — including questions where you got lucky with a correct guess. The explanations reinforce the underlying concept so the same question type doesn't trip you again.
Understanding these mistakes before you start studying saves you from repeating patterns that consistently lead to first-attempt failures. Most CLF-C02 failures aren't random — they follow predictable preparation gaps.
Passively reading without engaging with practice questions is the most common mistake. Many candidates read through study guides and feel confident — then get to the exam and discover that recognition (reading an answer and knowing it's right) is different from recall (choosing between four similar options under time pressure). Practice exams build the active pattern-recognition you need for the actual test. Reading builds the vocabulary; practice exams build the judgment.
Spending too much time on rare or obscure services is another common trap. The CLF-C02 tests core, high-frequency services in depth — EC2, S3, IAM, Lambda, VPC, RDS, CloudWatch. It doesn't go deep on niche services or edge-case configurations. If you find yourself reading extensively about AWS Snowcone or AWS Outposts at the expense of time reviewing IAM policies and the shared responsibility model, you're optimizing the wrong things.
Don't neglect the billing and support domain just because it's only 12% of the exam. Those 8 questions are some of the most learnable on the exam — the four support plan tiers, the pricing models, and the billing tools (AWS Cost Explorer, AWS Budgets, Cost and Usage Reports) are factual and specific. A candidate who masters this domain effectively starts with a cushion that covers mistakes elsewhere.
One more mistake: studying with the CLF-C01 materials instead of CLF-C02. The C02 version has meaningfully different domain weights and updated content. Study materials from 2022 or earlier were written for the old exam. Check publication dates on any third-party content you use. If a book or course doesn't explicitly reference CLF-C02, assume the content may be partially outdated and cross-reference against the current AWS exam guide.
The AWS Certified Cloud Practitioner certification page on this site has additional practice questions. Use the cloud practitioner exam resources to benchmark your readiness. CCP certification demonstrates genuine foundational AWS knowledge when backed by thorough preparation — not just a badge to check a box.
AWS provides free and paid official study resources for the CLF-C02:
AWS Skill Builder also has a subscription tier with additional practice content. For most CLF-C02 candidates, the free tier plus the $20 official practice exam is sufficient — you don't need a full subscription.
For the online proctored exam (testing from home):
For multiple-response questions (select 2 or more correct answers), read the question carefully — it will tell you exactly how many answers to select. Selecting too many or too few automatically scores zero for that question. Treat these as separate binary decisions for each option.
If a question mentions a specific AWS service you've never heard of, use process of elimination: identify which options are clearly wrong based on what you do know, then choose from the remaining options based on context. AWS doesn't test obscure services on CLF-C02 without context clues.
Once you've passed the CLF-C02, you have an AWS Certified Cloud Practitioner certification valid for 3 years. To maintain it, you either retake the CLF-C02 every 3 years or earn any higher-level AWS certification, which automatically renews your Cloud Practitioner.
Common next certifications after CLF-C02:
The CCP is a foundation certification, not a role-qualifying credential on its own. Employers recognize it as evidence of baseline AWS literacy, but most cloud roles require at least the Associate tier. Treat CCP as Step 1 in your AWS certification path rather than a destination. Your CCP study investment pays off most when you follow it with an Associate exam within 6–12 months while the foundational knowledge is still fresh.