The AWS Certified Cloud Practitioner — exam code CLF-C02 — is Amazon Web Services' entry-level cloud certification, and it's the starting point for almost everyone who wants to build a career working with AWS. Whether you're a developer, a project manager, a sales engineer, or someone switching careers into tech, this cert proves you understand the fundamentals of the AWS Cloud: what it is, how it's billed, how security works, and which core services do what.
Here's the thing: this isn't a deep technical exam. You won't be writing Lambda functions or configuring VPC peering. What you will need to understand is the cloud computing model — on-demand resources, pay-as-you-go pricing, the shared responsibility model — plus a working familiarity with AWS's major service categories. Broad, not deep. That's actually what makes it accessible to non-engineers.
AWS updated the exam code from CLF-C01 to CLF-C02 in September 2023. The domains shifted — Security and Compliance now carries the most weight at 30%, and Cloud Technology and Services jumped to 34%. If you've got study materials from before 2023, toss them. The content weighting has changed enough to matter.
Who should get this cert? Almost anyone touching cloud infrastructure in a professional context. It's popular with IT professionals transitioning into cloud roles, business and technical stakeholders who work alongside AWS teams, developers who want a foundational credential before pursuing specialty certs like the aws solutions architect or Developer Associate, and students and career-changers building their first cloud credential.
You don't need to be a programmer. You don't need a computer science degree. AWS recommends six months of exposure to the platform — but that's a suggestion, not a requirement. Plenty of people who've never touched AWS pass this exam with four to six weeks of focused study.
The CLF-C02 is also the gateway to every other AWS certification. AWS has three certification tracks — Foundational, Associate, and Professional — and the Cloud Practitioner sits at the Foundational level. It's not required before pursuing Associate-level certs like the Solutions Architect or Developer, but employers often want to see it as evidence that you've got the basics down. One more thing: this cert is valid for three years, after which you'll need to recertify by passing the current CCP exam or any Associate-level or higher AWS exam.
The CLF-C02 covers four domains, and understanding what each domain actually tests — not just its name — is the difference between studying smart and studying blind.
This domain covers the why of cloud computing: the value proposition, the economic model, and the core architectural principles AWS is built on. You'll need to understand the six advantages of cloud computing: trade capital expense for variable expense, benefit from massive economies of scale, stop guessing capacity, increase speed and agility, stop spending money running data centers, and go global in minutes. You'll also need to know the three cloud deployment models — public cloud, private cloud, and hybrid cloud — and when each makes sense.
The AWS Well-Architected Framework shows up here too. Know the six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. You don't need to memorize the white paper, but you should recognize which pillar a given scenario maps to.
Cloud computing service models also live in this domain: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service). EC2 is IaaS. Elastic Beanstalk is PaaS. AWS Chime or Salesforce running on AWS would be SaaS. The exam tests these distinctions constantly.
Security is the heaviest domain at 30% — don't underweight it. The most important concept here is the Shared Responsibility Model: AWS is responsible for security of the cloud (physical infrastructure, hypervisor, managed service internals), while you're responsible for security in the cloud (your data, your EC2 OS patches, your IAM policies, your application code).
IAM — Identity and Access Management — gets significant coverage. You need to understand users, groups, roles, and policies. Know what a root account is and why you should never use it for daily tasks. Know what MFA is and why it matters. The principle of least privilege — granting only the permissions required to do the job — comes up in multiple question formats.
Compliance frameworks also appear: SOC 2, PCI DSS, HIPAA. You won't be implementing them, but you should know which AWS services help meet compliance requirements. AWS Artifact provides access to compliance reports. AWS Shield protects against DDoS. AWS WAF filters malicious web traffic. AWS Macie discovers and protects sensitive data in S3. For anyone prepping for cloud or IT security credentials, you'll notice overlap with what comptia cloud plus covers at a similar conceptual level.
This is the largest domain — more than a third of your exam — and it's where most people spend the bulk of their study time. You need to know AWS's core service categories and the major services within each.
Compute: EC2 (virtual machines — know instance types and purchasing options: On-Demand, Reserved, Spot, Dedicated), Lambda (serverless — runs code without managing servers), ECS and EKS (containers), Elastic Beanstalk (managed app deployment platform).
Storage: S3 (object storage — know storage classes: Standard, Intelligent-Tiering, Glacier), EBS (block storage attached to EC2), EFS (elastic file system, shared across EC2 instances), Glacier (archival storage). Know the difference between object, block, and file storage — the exam tests this distinction repeatedly.
Databases: RDS (managed relational databases — MySQL, PostgreSQL, Aurora, SQL Server, Oracle), DynamoDB (managed NoSQL), ElastiCache (in-memory caching), Redshift (data warehousing).
Networking: VPC (Virtual Private Cloud — your private network in AWS), Route 53 (DNS), CloudFront (CDN for content delivery), Direct Connect (dedicated physical connection from on-premises to AWS), Elastic Load Balancing (distribute traffic across instances).
You don't need deep technical knowledge of any of these services. You need to know what each one does and when you'd use it. The exam is pattern-matching on use cases. If you're coming from a Microsoft background, the azure fundamentals cert covers similar conceptual ground and can reinforce how you think about cloud service categories.
Smallest domain at 12%, but don't skip it — billing questions are often the easiest points on the exam. You need to know AWS's pricing models (pay-as-you-go, save when you reserve, pay less when you use more), and cost management tools: AWS Cost Explorer, AWS Budgets, AWS Pricing Calculator, and the Cost and Usage Report. AWS Organizations and consolidated billing appear regularly. The four AWS Support tiers (Basic, Developer, Business, Enterprise) come up in scenario questions — know which tier provides a Technical Account Manager (Enterprise) and which provides 24/7 phone support (Business and above).
Four to six weeks is the typical prep window for most candidates — though people with existing IT backgrounds often need less, and complete beginners sometimes need more. Here's what actually works.
AWS Skill Builder is AWS's own learning platform, and the Cloud Practitioner Essentials course there is free. It's about six hours of content covering all four domains, with knowledge check questions built in. Not glamorous, but it comes directly from AWS — so the terminology matches the exam exactly. Start here. Don't pay for anything until you've exhausted the free resources.
Skill Builder also has official practice question sets for the CCP — worth doing once you've covered the material. These questions are closer to the real exam format than most third-party content, because AWS wrote them. There's also AWS Cloud Quest: Cloud Practitioner, a game-based learning experience that walks you through hands-on tasks in a simulated AWS environment. It's free with a Skill Builder account and surprisingly effective for retaining service knowledge.
The Stephane Maarek AWS Certified Cloud Practitioner course on Udemy is the most popular paid option, consistently updated for CLF-C02. At around 14 hours of video content plus practice exams, it covers everything on the exam. Wait for a Udemy sale — they run constantly, usually bringing prices down to $15–$20. Don't pay full price.
The practice exams from Neal Davis (Digital Cloud Training) on Udemy are genuinely close to real exam difficulty. Do multiple full practice tests before your actual exam date. Scoring above 75% consistently means you're ready. Sitting at 65%? Keep studying. Don't schedule the real exam until your practice scores are solid — rescheduling costs money.
You learn the material faster by practicing under test conditions than by re-reading notes. Take at least three full 65-question practice exams before your real test. Review every wrong answer — not just ones where you didn't know the content, but also where you knew the concept and missed the nuance in the question phrasing. The CCP is full of questions that are almost right in two answer choices. Practice trains you to catch those distinctions.
If you're already working toward a more technical credential — like aws certification at the Associate level — the hands-on labs you do for those will cover and exceed the CLF-C02 requirements automatically.
Show up to the testing center 15 minutes early. Bring two forms of ID — most centers require a government-issued photo ID plus a secondary ID. You can't bring notes, phones, or personal items into the testing area. If you're testing online at home, do a system compatibility check at least 24 hours before your scheduled time. The exam has 65 questions and 90 minutes — that's over 80 seconds per question on average. Don't rush. Flag questions you're uncertain about and return to them at the end.
Given the domain weights: spend the most time on Cloud Technology and Services (34%), followed by Security and Compliance (30%). Cloud Concepts (24%) and Billing (12%) matter but tend to be more straightforward once you've seen the key frameworks. Domains 3 and 2 combined account for 64% of your score — that's where the exam is won or lost.
Once you earn the CCP, you'll need to decide: which cert comes next? Understanding how the CCP compares to the Associate and Professional level exams helps you plan your certification path without wasting time or money on the wrong exam.
The Solutions Architect Associate (SAA-C03) is the most popular AWS certification overall — and it's a significant step up from the CCP. Where the CCP tests awareness of AWS services, the SAA-C03 tests your ability to design systems using them. You need to understand how services interact, how to architect for high availability and fault tolerance, and how to optimize costs in real architectural scenarios.
Most AWS job postings that require a certification want the Solutions Architect or higher. The aws solutions architect material on our site covers the architectural concepts you'll need at that level. Prep time difference: the CCP takes 4–6 weeks for most people. The SAA-C03 takes 2–4 months, requires hands-on experience with core services, and covers a much wider range of scenarios and edge cases.
The Developer Associate (DVA-C02) is aimed at software developers who build and maintain applications on AWS. It goes deep on Lambda, API Gateway, DynamoDB, CodeDeploy, CodePipeline, SQS, and SNS. If your job involves writing code that runs on AWS, the Developer Associate is the natural path after the CCP. It's harder than the CCP but more focused — candidates with real development experience often find it more intuitive than the Solutions Architect because it maps to things they already do day-to-day.
Not everyone comes to AWS from a pure cloud background. If you're building foundational IT skills alongside cloud skills, certifications like comptia a plus (hardware and OS fundamentals) and comptia cloud plus (vendor-neutral cloud concepts) provide complementary coverage. CompTIA certifications are vendor-neutral; AWS certs are obviously AWS-specific. For most people targeting an AWS career, the CCP alone is sufficient as the foundational cert — you don't need both. But if you're in a multi-cloud environment, stacking a CompTIA Cloud+ with your AWS CCP signals a wider range of knowledge to employers who run workloads across multiple providers.
Best for: cloud generalists, architects, DevOps engineers
Best for: software developers building on AWS
Best for: infrastructure and operations roles
The AWS Certified Cloud Practitioner is one of the most straightforward certifications you can earn — and one of the most valuable for signaling that you've made the shift from curious to credentialed. Four weeks of consistent study, a handful of practice tests, and you've got a credential that opens doors across every industry sector that runs anything in the cloud. Which, at this point, is basically all of them.
Start with the free AWS Skill Builder course. Take practice tests early and often — don't wait until you feel "ready." Use the wrong answers to guide your next study session. Book your exam when you're hitting 75%+ on full-length practice tests, not before. The CLF-C02 is a fair, well-structured exam. Study the right material, and it's very passable.
Good luck — and once you've got the CCP in hand, come back and take a look at what's next.