17 free courses — no signup wall
Architect-led enterprise cloud, security & AI
320+ downloadable toolkits — instant delivery
Skip to content

AWS Cloud Practitioner Study Guide 2026: Pass CLF-C02 on Your First Try (Free)

By Kenny Ogunlowo ·

The AWS Cloud Practitioner (CLF-C02) is the single most popular cloud certification in the world. AWS reported that over 1.4 million people hold active Cloud Practitioner certifications as of Q1 2026. The exam costs $100, takes 90 minutes, and can be taken from home via Pearson VUE's online proctoring system.

More importantly, it works. A 2025 Global Knowledge survey found that 78% of hiring managers consider Cloud Practitioner a valid entry-level credential that clears resume filters. Candidates with CCP on their resume receive 23% more interview callbacks for cloud support and junior cloud engineering roles compared to candidates without any cloud certification.

You do not need to spend money on courses to pass this exam. Everything you need is available for free. This guide gives you the complete exam breakdown, a week-by-week study plan, every free resource worth using, and a practice question strategy that maximizes your first-attempt pass rate.

Exam Breakdown: CLF-C02 Structure

Understanding the exam structure is the first step to passing efficiently. Do not skip this section — the domain weights tell you exactly where to focus your study time.

DomainWeightQuestions (approx.)
Domain 1: Cloud Concepts24%16 questions
Domain 2: Security and Compliance30%20 questions
Domain 3: Cloud Technology and Services34%22 questions
Domain 4: Billing, Pricing, and Support12%8 questions

Total questions: 65 (50 scored + 15 unscored pilot questions — you do not know which are which)

Time: 90 minutes

Passing score: 700 out of 1000 (scaled scoring — not a simple percentage)

Question format: Multiple choice (1 correct answer out of 4) and multiple response (2-3 correct answers out of 5-6)

Cost: $100 USD

Validity: 3 years

Language: English, Japanese, Korean, Simplified Chinese, and several others

What the Domain Weights Mean for Your Study Plan

Domain 3 (Cloud Technology and Services) is worth 34% of your score — more than any other domain. It covers the actual AWS services: compute, storage, database, networking, analytics, machine learning, developer tools, and management. This is where you will spend the most study time.

Domain 2 (Security and Compliance) is 30% — nearly a third of the exam. AWS takes security seriously, and they want every certified person to understand the shared responsibility model, IAM, encryption, and compliance programs.

Domain 4 (Billing, Pricing, and Support) is only 12% but these are the easiest points on the exam. AWS pricing models, support plans, and cost management tools have definitive correct answers. Do not leave these points on the table.

The 4-Week Study Plan (15-20 Hours Per Week)

This plan assumes you are starting from zero cloud knowledge. If you have IT experience, you can compress weeks 1-2 into a single week.

Week 1: Cloud Concepts + Security Foundations (15 hours)

Day 1-2: What Is Cloud Computing?

  • Study: AWS Cloud Practitioner Essentials (free on AWS Skill Builder — the official course, 6 hours total). Complete Modules 1-3.

  • Key concepts to master: IaaS vs. PaaS vs. SaaS, public vs. private vs. hybrid cloud, cloud deployment models, benefits of cloud computing (trade capital expense for variable expense, economies of scale, stop guessing capacity, increase speed and agility, go global in minutes).

  • Test yourself: can you explain each of the 6 advantages of cloud computing without looking them up?

Day 3-4: AWS Global Infrastructure

  • Study: AWS Skill Builder Module 4 + AWS Global Infrastructure page (infrastructure.aws)

  • Key concepts: Regions (34 as of 2026), Availability Zones (108+), Edge Locations (600+), Local Zones, Wavelength Zones. Why you choose one Region over another (compliance, proximity, service availability, pricing).

  • Test yourself: What is the difference between a Region and an Availability Zone? Why would you deploy in multiple AZs?

Day 5-7: Security and the Shared Responsibility Model

  • Study: AWS Skill Builder Modules 5-6 + the AWS Shared Responsibility Model whitepaper (free PDF)

  • Key concepts: Customer responsibility ("security IN the cloud" — data, applications, OS patching, network config, encryption) vs. AWS responsibility ("security OF the cloud" — physical infrastructure, hypervisor, network infrastructure, regions/AZs). IAM basics: users, groups, roles, policies. MFA. Root account best practices. AWS Organizations and SCPs.

  • This is 30% of your exam. Do not rush.

Free resources for Week 1:

  • Citadel Cloud Management Free Courses — structured AWS fundamentals path

  • AWS Skill Builder — Cloud Practitioner Essentials (free enrollment)

  • AWS Shared Responsibility Model whitepaper (docs.aws.amazon.com)

  • FreeCodeCamp AWS Cloud Practitioner video on YouTube (13 hours, covers all domains)

Week 2: Core AWS Services (20 hours)

This is the highest-weight domain. Learn what each service does, when to use it, and how it compares to alternatives. You do not need to know how to configure them — just understand their purpose.

Day 1-2: Compute Services

ServiceWhat It DoesWhen to Use It
EC2Virtual servers in the cloudFull control over OS, long-running workloads
LambdaServerless compute — run code without managing serversEvent-driven, short-duration tasks (<15 min)
ECS/EKSContainer orchestration (Docker/Kubernetes)Microservices, containerized applications
Elastic BeanstalkPaaS — deploy web apps without managing infrastructureQuick deployment for web applications
LightsailSimplified virtual serversSimple websites, dev environments
FargateServerless containersContainers without managing EC2 instances

Day 3: Storage Services

ServiceWhat It DoesWhen to Use It
S3Object storage (files, images, backups)Static content, data lakes, backups
EBSBlock storage attached to EC2Database storage, OS volumes
EFSManaged file system (NFS)Shared file storage across EC2 instances
S3 Glacier / Glacier Deep ArchiveLong-term archival storageCompliance archives, rarely accessed data
Storage GatewayHybrid cloud storageOn-premises to AWS storage bridge

Know the S3 storage classes: S3 Standard, S3-IA, S3 One Zone-IA, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, S3 Glacier Deep Archive, S3 Intelligent-Tiering. The exam loves questions about choosing the right storage class based on access patterns and cost.

Day 4: Database Services

ServiceWhat It DoesWhen to Use It
RDSManaged relational databases (MySQL, PostgreSQL, etc.)Traditional SQL workloads
AuroraAWS-optimized MySQL/PostgreSQLHigh-performance relational workloads
DynamoDBManaged NoSQL (key-value + document)High-scale, low-latency NoSQL
ElastiCacheIn-memory caching (Redis, Memcached)Session stores, caching layers
RedshiftData warehouseAnalytics, large-scale queries
DocumentDBMongoDB-compatible document databaseDocument-oriented workloads

Day 5: Networking Services

ServiceWhat It DoesWhen to Use It
VPCVirtual private network in the cloudIsolating and securing your resources
CloudFrontContent Delivery Network (CDN)Serving static content globally with low latency
Route 53DNS serviceDomain name management, routing
API GatewayManaged REST/WebSocket APIsFrontend for Lambda and backend services
Direct ConnectDedicated network connection to AWSHigh-bandwidth, consistent latency
Elastic Load BalancingDistributes traffic across targetsHigh availability for applications

Day 6-7: Application Integration, Analytics, ML, and Management

  • SQS, SNS, EventBridge (messaging and events)

  • CloudWatch (monitoring), CloudTrail (API audit logging), AWS Config (resource configuration tracking)

  • Kinesis (real-time data streaming), Athena (query S3 with SQL)

  • SageMaker (machine learning), Rekognition (image/video analysis), Comprehend (NLP), Lex (chatbots)

  • CloudFormation (infrastructure as code), Systems Manager, Trusted Advisor

You do not need deep knowledge of ML or analytics services — just know what they do and when you would choose one over another.

Week 3: Billing, Pricing, Support + Security Deep Dive (15 hours)

Day 1-2: AWS Pricing and Billing

  • Free Tier: what is included (750 hours EC2 t2.micro/month, 5GB S3, 25GB DynamoDB, Lambda 1M requests/month for 12 months, plus always-free services)

  • Pricing models: On-Demand (pay per hour/second), Reserved Instances (1-year or 3-year commitment, up to 72% savings), Savings Plans (similar savings, more flexible), Spot Instances (up to 90% savings, can be interrupted)

  • Cost management tools: AWS Cost Explorer, AWS Budgets, Cost and Usage Report, Pricing Calculator

  • AWS Organizations: consolidated billing, volume discounts across accounts

  • Support plans: Basic (free), Developer ($29/month), Business ($100/month minimum), Enterprise On-Ramp ($5,500/month), Enterprise ($15,000/month). Know the key differences: response times, TAM access, Trusted Advisor checks.

Day 3-4: Security Deep Dive

  • IAM in detail: users, groups, roles, policies (JSON-based). Principle of least privilege. When to use roles vs. users. Cross-account access.

  • AWS Shield (DDoS protection — Standard is free, Advanced is paid), AWS WAF (web application firewall), AWS GuardDuty (threat detection), AWS Inspector (vulnerability scanning), AWS Macie (sensitive data discovery in S3).

  • Encryption: KMS (Key Management Service), CloudHSM (hardware security modules), SSL/TLS certificate management with ACM (AWS Certificate Manager).

  • Compliance programs: HIPAA, PCI-DSS, SOC 1/2/3, FedRAMP, GDPR. Know that AWS provides compliance documentation via AWS Artifact.

  • AWS Security Hub: centralized security findings view.

Day 5-7: Review and Gap-Filling

  • Revisit any service you cannot explain in one sentence.

  • Create flashcards for service names and their one-line descriptions.

  • Review the AWS Well-Architected Framework's six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability. Know each pillar's definition.

Week 4: Practice Exams and Test Strategy (15-20 hours)

This week is about practice tests. Your goal: score 85% or higher on practice exams consistently before booking the real exam.

Day 1-2: First Practice Exam

Take one full 65-question practice exam under timed conditions (90 minutes, no breaks, no notes). Use one of these free options:

  • AWS Skill Builder Official Practice Exam (20 questions, free)

  • Tutorials Dojo's free CLF-C02 sample exam (free set of 10-15 questions)

  • ExamTopics CLF-C02 discussion forum (community-sourced questions — use for exposure, not as sole study material)

Score yourself. For every wrong answer, write down:

  1. What the question asked

  2. Why the correct answer is correct

  3. Why each wrong answer is wrong

This error analysis is the highest-value study activity in your entire preparation.

Day 3-4: Targeted Review

Based on your practice exam results, review the domains where you scored below 80%. Reread the relevant sections of the AWS Skill Builder course. Rewatch the FreeCodeCamp video sections. Create additional flashcards.

Day 5-6: Second and Third Practice Exams

Take two more full practice exams on different days. Repeat the error analysis process. If you are scoring 85%+ consistently, you are ready.

Day 7: Final Review and Exam Booking

  • Review your error analysis notes one final time

  • Book the exam through aws.training → Certification → Schedule/Manage Exams

  • Choose either a testing center or online proctored (at home). Online proctored requires: webcam, microphone, stable internet, clear desk, government ID.

Free Resources: The Complete List

You can pass CLF-C02 spending $0 on study materials. Here is everything you need:

Video Courses (Free)

ResourceLengthQualityNotes
AWS Cloud Practitioner Essentials (AWS Skill Builder)6 hoursOfficial, excellentThe primary course. Created by AWS. Start here.
FreeCodeCamp AWS CCP Course (YouTube)13 hoursVery thoroughCovers every domain in detail. Good supplement.
ExamPro AWS CCP Course (YouTube)14 hoursComprehensiveAndrew Brown's course. Well-structured, updated for CLF-C02.

Reading Materials (Free)

ResourceFormatNotes
AWS Whitepapers: Overview of Amazon Web ServicesPDFOfficial AWS document. Covers all major services.
AWS Well-Architected FrameworkPDF/WebSix pillars explained. 3-5 questions on the exam from this document.
AWS Shared Responsibility ModelWeb pageCritical for the 30% security domain.
AWS Pricing documentationWebRead the pricing pages for EC2, S3, Lambda, and RDS at minimum.
CLF-C02 Exam GuidePDFOfficial exam guide from AWS. Lists every topic that can appear. Download from aws.amazon.com/certification.

Practice Questions (Free and Low-Cost)

ResourceQuestionsCostNotes
AWS Official Practice Exam20FreeOn AWS Skill Builder. Good baseline.
Tutorials Dojo Free Sampler10-15FreeHigh quality. Jon Bonso's questions are closest to real exam difficulty.
Tutorials Dojo Full Set390$15Not free, but cheapest high-quality practice exam set. Worth every cent.
ExamTopics CLF-C02400+FreeCommunity-sourced. Quality varies. Read the discussion threads — they often correct wrong answers.
Digital Cloud Training Free Sampler10-15FreeNeal Davis's questions. Good difficulty calibration.

Hands-On Labs (Free)

ResourceNotes
AWS Free Tier AccountSign up at aws.amazon.com. 12 months of free-tier services. Do not skip this — hands-on experience helps you remember services.
AWS Skill Builder LabsSome labs are free with a Skill Builder account. Look for "Cloud Practitioner" tagged labs.
Citadel Cloud Management Free CoursesStructured learning paths that align with CCP exam objectives

The Practice Question Strategy

This strategy maximizes your learning from practice questions. Follow it exactly.

Step 1: Untimed Review Mode First

Before taking a timed practice exam, go through 20-30 questions in untimed review mode. Read each question. Attempt an answer. Then read the explanation for every option — correct and incorrect. This builds understanding before you test speed.

Step 2: Timed Full Exam

Take a 65-question practice exam under realistic conditions: 90-minute timer, no notes, no pauses. This simulates the real exam.

Step 3: Error Analysis (The Most Important Step)

For each wrong answer, create an entry in a notebook or spreadsheet:

  • Question topic (e.g., "S3 storage class selection")

  • Why you got it wrong (e.g., "confused S3-IA with S3 One Zone-IA")

  • The correct reasoning (e.g., "S3-IA replicates across multiple AZs, One Zone-IA does not — use One Zone-IA only when data can be recreated")

  • Domain (e.g., "Domain 3 — Cloud Technology")

Step 4: Pattern Recognition

After 2-3 practice exams, review your error analysis. You will see patterns — topics you consistently get wrong. These are your highest-leverage study areas. Go back to the AWS Skill Builder course and rewatch the sections covering those topics.

Step 5: Target Score

Take the real exam when you score 85% or higher on at least two different practice exam sets. The real exam pass mark is approximately 70% (700/1000 scaled), so 85% on practice exams gives you a comfortable margin for exam-day nerves and the 15 unscored pilot questions.

Exam Day Strategy

Time Management

You have 90 minutes for 65 questions — approximately 83 seconds per question. That is generous. Most people finish in 50-60 minutes. Do not rush, but do not agonize over any single question.

The Two-Pass Method

  • First pass: Answer every question you are confident about. Flag questions you are unsure about. Do not spend more than 60 seconds on any question during the first pass.

  • Second pass: Return to flagged questions. Re-read carefully. Eliminate obviously wrong answers. Choose the best remaining option. If you are stuck between two answers, go with your first instinct — research on exam psychology consistently shows that first answers are correct more often than changed answers.

Elimination Strategy

Most CLF-C02 questions have one obviously wrong answer, one subtly wrong answer, and two plausible answers. Eliminate the obviously wrong option first. Then focus on distinguishing between the remaining plausible answers. Look for qualifying words: "most cost-effective," "highest availability," "least operational overhead" — these narrow the correct answer.

Read Every Word

AWS exam questions are precisely worded. The difference between "which service provides..." and "which service should you use to..." can change the correct answer. Read the full question stem and all answer options before selecting.

Service Cheat Sheet: 50 AWS Services in One Table

Print or bookmark this table for your final review. Every service listed here can appear on the CLF-C02 exam.

CategoryServiceOne-Line Description
ComputeEC2Virtual servers
ComputeLambdaServerless functions
ComputeECSContainer orchestration (Docker)
ComputeEKSManaged Kubernetes
ComputeFargateServerless containers
ComputeElastic BeanstalkPaaS for web apps
ComputeLightsailSimple virtual servers
StorageS3Object storage
StorageEBSBlock storage for EC2
StorageEFSShared file storage
StorageS3 GlacierArchival storage
StorageStorage GatewayHybrid storage bridge
DatabaseRDSManaged relational DB
DatabaseAuroraHigh-performance MySQL/PostgreSQL
DatabaseDynamoDBManaged NoSQL
DatabaseElastiCacheIn-memory cache
DatabaseRedshiftData warehouse
DatabaseDocumentDBMongoDB-compatible
NetworkingVPCVirtual private network
NetworkingCloudFrontCDN
NetworkingRoute 53DNS
NetworkingAPI GatewayManaged APIs
NetworkingDirect ConnectDedicated network link
NetworkingELBLoad balancing
SecurityIAMIdentity and access management
SecurityKMSEncryption key management
SecurityShieldDDoS protection
SecurityWAFWeb application firewall
SecurityGuardDutyThreat detection
SecurityInspectorVulnerability scanning
SecurityMacieSensitive data discovery
SecurityACMSSL/TLS certificates
SecuritySecurity HubCentralized security view
SecurityArtifactCompliance documents
ManagementCloudWatchMonitoring and logging
ManagementCloudTrailAPI audit logging
ManagementConfigResource configuration tracking
ManagementSystems ManagerOperations management
ManagementTrusted AdvisorBest practice recommendations
ManagementCloudFormationInfrastructure as code
ManagementOrganizationsMulti-account management
IntegrationSQSMessage queue
IntegrationSNSNotification service (pub/sub)
IntegrationEventBridgeEvent bus
IntegrationStep FunctionsWorkflow orchestration
AnalyticsKinesisReal-time data streaming
AnalyticsAthenaQuery S3 with SQL
MLSageMakerMachine learning platform
MLRekognitionImage and video analysis
MLComprehendNatural language processing

For Architecture Blueprints that show how these services connect in production systems, browse Citadel's reference designs.

Frequently Asked Questions

How hard is the AWS Cloud Practitioner exam?

The CLF-C02 is an entry-level exam. With 3-4 weeks of focused study (15-20 hours per week), most people pass on their first attempt. The questions test understanding of concepts, not hands-on implementation. If you can explain what each major AWS service does and when you would use it, you will pass. The estimated first-attempt pass rate is 70-75%.

Can I pass with just free resources?

Yes. The AWS Skill Builder official course, the FreeCodeCamp YouTube video, and the free practice question sets are sufficient for most people. The only thing worth paying for, besides the $100 exam fee, is a set of Tutorials Dojo practice exams ($15) — the question quality and explanations are significantly better than free alternatives.

Should I get Cloud Practitioner or skip straight to Solutions Architect Associate?

If you have zero cloud experience, start with Cloud Practitioner. It builds the conceptual foundation that Solutions Architect Associate builds on. If you have 6+ months of hands-on cloud experience or a strong IT background, you can skip directly to SAA-C03 — but study the billing and pricing domain separately, as it is covered less in SAA preparation.

How long is the CLF-C02 valid?

3 years from the date you pass. After 3 years, you can either retake the Cloud Practitioner exam or earn a higher-level certification (e.g., Solutions Architect Associate), which automatically renews your Cloud Practitioner status.

Can I take the exam from home?

Yes. AWS partners with Pearson VUE for online proctored exams. Requirements: webcam, microphone, stable internet connection (at least 1 Mbps), government-issued photo ID, clear desk and room (no papers, books, or second monitors visible), and a quiet environment. The proctor monitors you via webcam throughout the exam.

What happens if I fail?

You can retake the exam after a 14-day waiting period. You pay the full $100 fee again. Review your score report — it shows your performance by domain so you know exactly where to focus your restudy. Most people who fail on the first attempt pass on the second with targeted review.

Is CLF-C02 enough to get a job?

Cloud Practitioner alone is not typically sufficient for a cloud engineering role, but it is enough for cloud support roles, help desk positions at AWS partner companies, and entry-level IT positions at companies using AWS. For cloud engineering jobs, pair CCP with AWS Solutions Architect Associate (SAA-C03) and 2-3 portfolio projects. CCP gets your resume past the first filter; SAA-C03 gets you the interview.

How does CLF-C02 compare to Azure Fundamentals (AZ-900)?

Both are entry-level cloud certifications. CLF-C02 costs $100 vs. AZ-900 at $165. CLF-C02 appears in more job postings globally. AZ-900 study materials are completely free through Microsoft Learn. Choose AWS if your target market is startups, tech companies, or general cloud roles. Choose Azure if your target is enterprise, government, or Microsoft-heavy environments. Earning both is a strong signal.

Sources

  • AWS. "CLF-C02 Exam Guide." AWS Training and Certification, 2024.

  • AWS. "AWS Cloud Practitioner Essentials Course." AWS Skill Builder, 2026.

  • Global Knowledge. "2025 IT Skills and Salary Report." Global Knowledge, 2025.

  • AWS. "AWS Certification Global Trends." AWS Re:Invent 2025 Presentation.

  • Synergy Research Group. "Cloud Infrastructure Market Share Q1 2026." March 2026.

  • Tutorials Dojo. "CLF-C02 Practice Exam Statistics." TutorialsDojo.com, 2025.

  • AWS. "AWS Global Infrastructure." infrastructure.aws, accessed May 2026.

  • Robert Half. "2026 Technology Salary Guide." Robert Half International, 2026.