The AWS Cloud Practitioner (CLF-C02) is a foundational cloud certification that validates your understanding of AWS services, pricing, security, and architecture. It costs $100, takes 90 minutes, and requires no prior cloud experience. This study guide covers everything you need to pass using only free resources.
AWS reported over 1.4 million active Cloud Practitioner certifications as of Q1 2026. A 2025 Global Knowledge survey found that 78% of hiring managers consider Cloud Practitioner a valid entry-level credential that clears resume filters. Candidates with CCP listed on their resume receive 23% more interview callbacks for cloud support and junior cloud engineering roles compared to those without any cloud certification.
You do not need to pay for courses or training programs to pass this exam. Every resource in this guide is either free or costs less than a lunch. The $100 exam fee is the only required expense.
Key Takeaway: You can pass the AWS Cloud Practitioner exam in 4 weeks by studying 15-20 hours per week using free resources from AWS Skill Builder, YouTube, and Citadel Cloud Management's free courses.
What Is the AWS Cloud Practitioner Exam (CLF-C02)?
The CLF-C02 is Amazon Web Services' entry-level certification. It tests whether you understand what cloud computing is, how AWS services work at a high level, and how AWS handles billing, security, and compliance. You do not need to know how to configure services or write code. You need to understand concepts, use cases, and service descriptions.
Here is exactly what the exam looks like:
- Total questions: 65 (50 scored + 15 unscored pilot questions you cannot identify)
- Time limit: 90 minutes
- Passing score: 700 out of 1000 (scaled scoring, not a simple percentage)
- Question format: Multiple choice (1 correct answer from 4 options) and multiple response (2-3 correct answers from 5-6 options)
- Cost: $100 USD
- Validity: 3 years from the date you pass
- Delivery: Pearson VUE testing center or online proctored from home
- Languages: English, Japanese, Korean, Simplified Chinese, and others
The exam covers four domains with different weights:
| Domain | Weight | Approx. Questions |
|---|---|---|
| Cloud Concepts | 24% | 16 |
| Security and Compliance | 30% | 20 |
| Cloud Technology and Services | 34% | 22 |
| Billing, Pricing, and Support | 12% | 8 |
Security and Compliance (30%) and Cloud Technology and Services (34%) together account for nearly two-thirds of the exam. If you master these two domains, you are most of the way there. Billing, Pricing, and Support is only 12% but contains the easiest points on the entire exam. Do not leave those points on the table.
How Much Does the AWS Cloud Practitioner Certification Cost?
One of the most common questions about this certification is what it actually costs. Here is the full breakdown:
| Item | Cost | Required? |
|---|---|---|
| Exam registration (Pearson VUE) | $100 | Yes |
| AWS Skill Builder (Cloud Practitioner Essentials course) | $0 | No, but strongly recommended |
| FreeCodeCamp AWS CCP video (YouTube) | $0 | No |
| ExamPro AWS CCP video (YouTube) | $0 | No |
| AWS Whitepapers (Overview, Well-Architected, Shared Responsibility) | $0 | No |
| CLF-C02 Official Exam Guide PDF | $0 | No |
| AWS Official Practice Exam (Skill Builder) | $0 | No |
| Citadel Cloud Management Free Courses | $0 | No |
| Tutorials Dojo practice exams (optional, recommended) | $15 | No |
| AWS Free Tier account (hands-on labs) | $0 | No |
Total minimum cost: $100 (exam fee only). If you add the Tutorials Dojo practice exams, the total is $115. That is the ceiling. Every other resource you need is genuinely free.
Compare this to other entry-level certifications: Azure Fundamentals (AZ-900) costs $165. Google Cloud Digital Leader costs $99. CompTIA Cloud+ costs $369. At $100, the AWS Cloud Practitioner is one of the most affordable certifications in the industry, and it carries the strongest brand recognition because AWS holds the largest share of the cloud market.
What Does the 4-Week Study Plan Look Like?
This plan assumes you are starting from zero cloud knowledge. If you already work in IT or have used AWS informally, you can compress weeks 1 and 2 into a single week.
| Week | Topics | Primary Resources | Hours |
|---|---|---|---|
| Week 1 | Cloud Concepts, AWS Global Infrastructure, Shared Responsibility Model, IAM Basics | AWS Skill Builder Modules 1-6, Citadel Free Courses, Shared Responsibility whitepaper | 15 |
| Week 2 | Core Services: Compute (EC2, Lambda), Storage (S3, EBS), Database (RDS, DynamoDB), Networking (VPC, CloudFront, Route 53), Integration, Analytics, ML overview | AWS Skill Builder Modules 7-10, FreeCodeCamp video (relevant sections) | 20 |
| Week 3 | Billing and Pricing Models, Cost Management Tools, Support Plans, Security Deep Dive (Shield, WAF, GuardDuty, KMS), Well-Architected Framework | AWS Pricing docs, Support Plan comparison page, Well-Architected Framework whitepaper | 15 |
| Week 4 | Practice Exams, Error Analysis, Targeted Review, Exam Booking | AWS Official Practice Exam, Tutorials Dojo sampler, ExamTopics community questions | 15-20 |
Total study time: 65-70 hours over 4 weeks.
Week 1: Cloud Concepts and Security Foundations (15 hours)
Start with the fundamentals. Days 1-2 focus on what cloud computing actually is: IaaS vs. PaaS vs. SaaS, public vs. private vs. hybrid cloud, deployment models, and the six advantages of cloud computing (trade capital expense for variable expense, benefit from economies of scale, stop guessing capacity, increase speed and agility, stop spending money running data centers, go global in minutes).
Days 3-4 cover AWS Global Infrastructure. As of 2026, AWS operates 34 Regions, 108+ Availability Zones, and 600+ Edge Locations. Know why you would choose one Region over another: compliance requirements, proximity to users, service availability, and pricing. Understand the difference between a Region (geographic area with multiple data centers) and an Availability Zone (one or more discrete data centers within a Region).
Days 5-7 tackle security. This is 30% of your exam, so do not rush. Master the Shared Responsibility Model: AWS is responsible for security OF the cloud (physical infrastructure, hypervisor, networking), and you are responsible for security IN the cloud (data, applications, OS patching, network configuration, encryption). Learn IAM basics: users, groups, roles, policies, MFA, and root account best practices.
Week 1 free resources: - Citadel Cloud Management Free Courses for a structured AWS fundamentals path - AWS Skill Builder: Cloud Practitioner Essentials (6 hours, free enrollment) - AWS Shared Responsibility Model whitepaper (docs.aws.amazon.com) - FreeCodeCamp AWS Cloud Practitioner video on YouTube (13 hours total)
Week 2: Core AWS Services (20 hours)
This is the highest-weight domain at 34%. You need to know what each service does, when to use it, and how it compares to alternatives. You do not need to know how to configure them.
Compute Services:
| Service | Purpose | When to Use |
|---|---|---|
| EC2 | Virtual servers | Full OS control, long-running workloads |
| Lambda | Serverless functions | Event-driven, short tasks under 15 minutes |
| ECS/EKS | Container orchestration | Microservices, Docker/Kubernetes workloads |
| Elastic Beanstalk | PaaS for web apps | Quick deployment without managing infrastructure |
| Lightsail | Simplified virtual servers | Simple websites, development environments |
| Fargate | Serverless containers | Containers without managing EC2 instances |
Storage Services:
| Service | Purpose | When to Use |
|---|---|---|
| S3 | Object storage | Files, images, backups, data lakes |
| EBS | Block storage for EC2 | Database volumes, OS storage |
| EFS | Managed NFS file system | Shared storage across multiple EC2 instances |
| S3 Glacier | Archival storage | Compliance archives, rarely accessed data |
| Storage Gateway | Hybrid cloud storage | On-premises to AWS bridge |
Know the S3 storage classes: Standard, Standard-IA, One Zone-IA, Glacier Instant Retrieval, Glacier Flexible Retrieval, Glacier Deep Archive, and Intelligent-Tiering. The exam regularly tests your ability to choose the right storage class based on access patterns and cost requirements.
Database Services:
| Service | Purpose | When to Use |
|---|---|---|
| RDS | Managed relational databases | MySQL, PostgreSQL, SQL Server workloads |
| Aurora | AWS-optimized MySQL/PostgreSQL | High-performance relational workloads |
| DynamoDB | Managed NoSQL | High-scale, low-latency key-value storage |
| ElastiCache | In-memory caching | Session stores, caching layers (Redis/Memcached) |
| Redshift | Data warehouse | Analytics, large-scale queries |
Networking Services:
| Service | Purpose | When to Use |
|---|---|---|
| VPC | Virtual private network | Isolating and securing resources |
| CloudFront | CDN | Serving static content globally |
| Route 53 | DNS | Domain management, traffic routing |
| API Gateway | Managed APIs | REST/WebSocket frontends for Lambda |
| Direct Connect | Dedicated connection to AWS | High-bandwidth, consistent-latency needs |
| Elastic Load Balancing | Traffic distribution | High availability for applications |
Also cover application integration (SQS, SNS, EventBridge), monitoring (CloudWatch, CloudTrail, AWS Config), analytics (Kinesis, Athena), machine learning (SageMaker, Rekognition, Comprehend), and management tools (CloudFormation, Systems Manager, Trusted Advisor). You do not need deep knowledge of ML or analytics services. Know what they do and when one is a better fit than another.
Week 3: Billing, Pricing, Support, and Security Deep Dive (15 hours)
Pricing Models:
| Model | How It Works | Savings |
|---|---|---|
| On-Demand | Pay per hour or second | None (baseline) |
| Reserved Instances | 1-year or 3-year commitment | Up to 72% |
| Savings Plans | Flexible commitment | Similar to Reserved |
| Spot Instances | Bid on unused capacity (can be interrupted) | Up to 90% |
Know the AWS Free Tier: 750 hours of EC2 t2.micro per month, 5 GB S3 storage, 25 GB DynamoDB, 1 million Lambda requests per month for 12 months, plus always-free services.
Cost Management Tools: AWS Cost Explorer, AWS Budgets, Cost and Usage Reports, AWS Pricing Calculator, and consolidated billing through AWS Organizations.
Support Plans:
| Plan | Monthly Cost | Key Features |
|---|---|---|
| Basic | Free | Documentation, forums, health dashboard |
| Developer | $29 | Business-hours email support, 1 primary contact |
| Business | $100 minimum | 24/7 phone/chat, full Trusted Advisor, unlimited contacts |
| Enterprise On-Ramp | $5,500 | Technical Account Manager pool, 30-min response for critical |
| Enterprise | $15,000 | Designated TAM, 15-min response for critical |
Security Deep Dive: IAM policies (JSON-based, principle of least privilege), AWS Shield (DDoS protection), WAF (web application firewall), GuardDuty (threat detection), Inspector (vulnerability scanning), Macie (sensitive data discovery), KMS (encryption key management), and CloudHSM (hardware security modules). Know that AWS Artifact provides compliance documentation for HIPAA, PCI-DSS, SOC, and other frameworks.
Review the AWS Well-Architected Framework's six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. Expect 3-5 questions directly referencing these pillars.
Week 4: Practice Exams and Test Strategy (15-20 hours)
Your goal is to score 85% or higher on practice exams before booking the real exam. The passing score is approximately 70% (700/1000 scaled), so 85% on practice tests gives you a margin for exam-day stress and the 15 unscored pilot questions.
Day 1-2: Take one full 65-question practice exam under timed conditions. Score yourself. For every wrong answer, write down what the question asked, why the correct answer is correct, and why each wrong answer is wrong.
Day 3-4: Review domains where you scored below 80%. Rewatch the relevant AWS Skill Builder modules. Create flashcards for services you confused.
Day 5-6: Take two more full practice exams on different days. Repeat the error analysis. If you consistently score 85%+, you are ready.
Day 7: Final review of error analysis notes. Book the exam at aws.training. Choose online proctored (webcam, microphone, stable internet, clear desk, government ID) or a Pearson VUE testing center.
What Free Resources Should You Use?
Here is the complete list of study materials, all free unless noted:
Video Courses (Free)
| Resource | Length | Notes |
|---|---|---|
| AWS Cloud Practitioner Essentials (Skill Builder) | 6 hours | Official AWS course. Start here. |
| FreeCodeCamp AWS CCP Course (YouTube) | 13 hours | Covers every domain in detail. |
| ExamPro AWS CCP Course (YouTube) | 14 hours | Andrew Brown's well-structured walkthrough. |
Reading Materials (Free)
| Resource | Format |
|---|---|
| AWS Whitepapers: Overview of Amazon Web Services | |
| AWS Well-Architected Framework | PDF/Web |
| AWS Shared Responsibility Model | Web page |
| AWS Pricing pages (EC2, S3, Lambda, RDS) | Web |
| CLF-C02 Official Exam Guide | PDF (aws.amazon.com/certification) |
Practice Questions
| Resource | Questions | Cost |
|---|---|---|
| AWS Official Practice Exam (Skill Builder) | 20 | Free |
| Tutorials Dojo Free Sampler | 10-15 | Free |
| Tutorials Dojo Full Set | 390 | $15 |
| ExamTopics CLF-C02 community questions | 400+ | Free |
| Digital Cloud Training Free Sampler | 10-15 | Free |
Hands-On Labs (Free)
| Resource | Notes |
|---|---|
| AWS Free Tier Account | 12 months of free-tier services at aws.amazon.com |
| AWS Skill Builder Labs | Some free labs tagged "Cloud Practitioner" |
| Citadel Cloud Management Free Courses | Structured paths aligned with CCP exam objectives |
How Should You Approach Exam Day?
Time Management
You have 90 minutes for 65 questions, roughly 83 seconds per question. Most people finish in 50-60 minutes. Do not rush, but do not agonize over any single question for more than 90 seconds.
The Two-Pass Method
First pass: Answer every question you are confident about. Flag questions you are unsure about. Spend no more than 60 seconds per question during this pass.
Second pass: Return to flagged questions. Eliminate obviously wrong answers first. Look for qualifying words in the question stem: "most cost-effective," "highest availability," "least operational overhead." These narrow the field. If stuck between two answers, go with your first instinct. Research on exam psychology consistently shows that initial answers are correct more often than changed answers.
Elimination Strategy
Most CLF-C02 questions have one obviously wrong answer, one subtly wrong answer, and two plausible options. Eliminate the obvious wrong answer first, then distinguish between the remaining plausible answers by focusing on the specific qualifier in the question.
Read every word. AWS exam questions are precisely written. The difference between "which service provides..." and "which service should you use to..." can change the correct answer. Read the full question and all answer options before selecting.
What Comes After Cloud Practitioner?
Cloud Practitioner is the starting line, not the finish. Here is the certification path that maximizes your career value, which we cover in detail in our AWS certification roadmap for 2026:
- AWS Cloud Practitioner (CLF-C02) -- you are here
- AWS Solutions Architect Associate (SAA-C03) -- the most in-demand AWS certification. Pair this with 2-3 portfolio projects and you are competitive for cloud engineering roles.
- AWS Developer Associate or SysOps Administrator Associate -- choose based on whether you lean toward building applications or managing infrastructure.
- Specialty or Professional certifications -- Security Specialty, Machine Learning Specialty, or Solutions Architect Professional for senior roles.
Cloud Practitioner alone is sufficient for cloud support roles, help desk positions at AWS partner companies, and entry-level IT positions at companies running on AWS. For cloud engineering positions, pair CCP with SAA-C03 and hands-on project experience.
50 AWS Services You Must Know for CLF-C02
Bookmark this reference table for your final review. Every service listed here can appear on the exam.
| Category | Service | One-Line Description |
|---|---|---|
| Compute | EC2 | Virtual servers |
| Compute | Lambda | Serverless functions |
| Compute | ECS | Container orchestration (Docker) |
| Compute | EKS | Managed Kubernetes |
| Compute | Fargate | Serverless containers |
| Compute | Elastic Beanstalk | PaaS for web apps |
| Compute | Lightsail | Simple virtual servers |
| Storage | S3 | Object storage |
| Storage | EBS | Block storage for EC2 |
| Storage | EFS | Shared file storage |
| Storage | S3 Glacier | Archival storage |
| Storage | Storage Gateway | Hybrid storage bridge |
| Database | RDS | Managed relational DB |
| Database | Aurora | High-performance MySQL/PostgreSQL |
| Database | DynamoDB | Managed NoSQL |
| Database | ElastiCache | In-memory cache |
| Database | Redshift | Data warehouse |
| Database | DocumentDB | MongoDB-compatible |
| Networking | VPC | Virtual private network |
| Networking | CloudFront | CDN |
| Networking | Route 53 | DNS |
| Networking | API Gateway | Managed APIs |
| Networking | Direct Connect | Dedicated network link |
| Networking | ELB | Load balancing |
| Security | IAM | Identity and access management |
| Security | KMS | Encryption key management |
| Security | Shield | DDoS protection |
| Security | WAF | Web application firewall |
| Security | GuardDuty | Threat detection |
| Security | Inspector | Vulnerability scanning |
| Security | Macie | Sensitive data discovery |
| Security | ACM | SSL/TLS certificates |
| Security | Security Hub | Centralized security view |
| Security | Artifact | Compliance documents |
| Management | CloudWatch | Monitoring and logging |
| Management | CloudTrail | API audit logging |
| Management | Config | Resource configuration tracking |
| Management | Systems Manager | Operations management |
| Management | Trusted Advisor | Best practice recommendations |
| Management | CloudFormation | Infrastructure as code |
| Management | Organizations | Multi-account management |
| Integration | SQS | Message queue |
| Integration | SNS | Notification service (pub/sub) |
| Integration | EventBridge | Event bus |
| Integration | Step Functions | Workflow orchestration |
| Analytics | Kinesis | Real-time data streaming |
| Analytics | Athena | Query S3 with SQL |
| ML | SageMaker | Machine learning platform |
| ML | Rekognition | Image and video analysis |
| ML | Comprehend | Natural language processing |
For architecture blueprints that show how these services connect in real production systems, browse Citadel's reference designs.
Frequently Asked Questions
How hard is the AWS Cloud Practitioner exam?
The CLF-C02 is the entry-level AWS certification. With 3-4 weeks of dedicated study at 15-20 hours per week, most candidates pass on their first attempt. The estimated first-attempt pass rate is between 70-75%. The questions test conceptual understanding, not hands-on implementation or coding ability. If you can explain what each major AWS service does and identify the correct use case from a list of options, you will pass.
Can I pass using only free study materials?
Yes. The AWS Skill Builder official course, the FreeCodeCamp YouTube video, and the free practice question sets are sufficient for most people. The only paid resource worth considering is the Tutorials Dojo practice exam set at $15, which offers higher question quality and more detailed explanations than free alternatives. Everything else you need is available at zero cost.
Should I get Cloud Practitioner first or skip to Solutions Architect Associate?
If you have zero cloud experience, start with Cloud Practitioner. It builds the conceptual foundation that Solutions Architect Associate depends on, and the billing and pricing domain receives more coverage in CCP preparation than in SAA preparation. If you have 6+ months of hands-on AWS experience or a strong IT infrastructure background, you can skip directly to SAA-C03. Read our AWS certification roadmap for the full path.
Can I take the exam from home?
Yes. AWS partners with Pearson VUE for online proctored exams. Requirements include a webcam, microphone, stable internet connection (minimum 1 Mbps), government-issued photo ID, a clear desk with no papers or second monitors visible, and a quiet environment. The proctor monitors you via webcam throughout the 90-minute exam.
What happens if I fail?
You can retake the exam after a 14-day waiting period. The full $100 fee applies again. Your score report shows performance by domain, so you know exactly which areas need more study. Most people who fail on the first attempt pass on the second with targeted review of their weakest domains.
Sources
- AWS. "CLF-C02 Exam Guide." AWS Training and Certification, 2024.
- AWS. "AWS Cloud Practitioner Essentials Course." AWS Skill Builder, 2026.
- Global Knowledge. "2025 IT Skills and Salary Report." Global Knowledge, 2025.
- AWS. "AWS Certification Global Trends." AWS Re:Invent 2025 Presentation.
- Synergy Research Group. "Cloud Infrastructure Market Share Q1 2026." March 2026.
- Tutorials Dojo. "CLF-C02 Practice Exam Statistics." TutorialsDojo.com, 2025.
- AWS. "AWS Global Infrastructure." infrastructure.aws, accessed May 2026.
Ready to start your AWS certification journey? Citadel Cloud Management's free courses give you structured learning paths that align directly with the CLF-C02 exam objectives. No credit card required, no paywall. Start with the AWS fundamentals track and work through the material alongside this 4-week study plan. Your first cloud certification is 30 days away.