AWS Certified Cloud Practitioner (CLF-C02)

Articles covering AWS Certified Cloud Practitioner (CLF-C02) exam task statements. These guides focus on AWS cloud concepts, services, security, architecture, pricing, and support topics essential for your AWS Cloud Practitioner certification.

CLF-C02 Task Statement 1.1: Define the Benefits of the AWS Cloud

Comprehensive guide to defining the benefits of the AWS Cloud including understanding the value proposition of the AWS Cloud, understanding the economies of scale (for example, cost savings), understanding the benefits of global infrastructure (for example, speed of deployment, global reach), and understanding the advantages of high availability, elasticity, and agility in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 1.2: Identify Design Principles of the AWS Cloud

Comprehensive guide to identifying design principles of the AWS Cloud including understanding the AWS Well-Architected Framework, understanding the pillars of the Well-Architected Framework (for example, operational excellence, security, reliability, performance efficiency, cost optimization, sustainability), and identifying differences between the pillars of the Well-Architected Framework in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 1.3: Understand the Benefits of and Strategies for Migration to the AWS Cloud

Comprehensive guide to understanding the benefits of and strategies for migration to the AWS Cloud including cloud adoption strategies, resources to support the cloud migration journey, understanding the benefits of the AWS Cloud Adoption Framework (AWS CAF) (for example, reduced business risk; improved environmental, social, and governance (ESG) performance; increased revenue; increased operational efficiency), and identifying appropriate migration strategies (for example, database replication, use of AWS Snowball) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 1.4: Understand Concepts of Cloud Economics

Comprehensive guide to understanding concepts of cloud economics including aspects of cloud economics, cost savings of moving to the cloud, understanding the role of fixed costs compared with variable costs, understanding costs that are associated with on-premises environments, understanding the differences between licensing strategies (for example, Bring Your Own License [BYOL] model compared with included licenses), understanding the concept of rightsizing, identifying benefits of automation (for example, provisioning and configuration management with AWS CloudFormation), and identifying managed AWS services (for example, Amazon RDS, Amazon Elastic Container Service [Amazon ECS], Amazon Elastic Kubernetes Service [Amazon EKS], Amazon DynamoDB) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 2.1: Understand the AWS Shared Responsibility Model

Comprehensive guide to understanding the AWS shared responsibility model including recognizing the components of the AWS shared responsibility model, describing the customer's responsibilities on AWS, describing AWS responsibilities, describing responsibilities that the customer and AWS share, and describing how AWS responsibilities and customer responsibilities can shift, depending on the service used (for example, Amazon RDS, AWS Lambda, Amazon EC2) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 2.2: Understand AWS Cloud Security, Governance, and Compliance Concepts

Comprehensive guide to understanding AWS Cloud security, governance, and compliance concepts including AWS compliance and governance concepts, benefits of cloud security (for example, encryption), where to capture and locate logs that are associated with cloud security, identifying where to find AWS compliance information (for example, AWS Artifact), understanding compliance needs among geographic locations or industries (for example, AWS Compliance), describing how customers secure resources on AWS (for example, Amazon Inspector, AWS Security Hub, Amazon GuardDuty, AWS Shield), identifying different encryption options (for example, encryption in transit, encryption at rest), recognizing services that aid in governance and compliance (for example, monitoring with Amazon CloudWatch; auditing with AWS CloudTrail, AWS Audit Manager, and AWS Config; reporting with access reports), and recognizing compliance requirements that vary among AWS services in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 2.3: Identify AWS Access Management Capabilities

Comprehensive guide to identifying AWS access management capabilities including identity and access management (for example, AWS Identity and Access Management [IAM]), importance of protecting the AWS root user account, principle of least privilege, AWS IAM Identity Center (AWS Single Sign-On), understanding access keys, password policies, and credential storage (for example, AWS Secrets Manager, AWS Systems Manager), identifying authentication methods in AWS (for example, multi-factor authentication [MFA], IAM Identity Center, cross-account IAM roles), defining groups, users, custom policies, and managed policies in compliance with the principle of least privilege, identifying tasks that only the account root user can perform, understanding which methods can achieve root user protection, and understanding the types of identity management (for example, federated) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 2.4: Identify Components and Resources for Security

Comprehensive guide to identifying components and resources for security including security capabilities that AWS provides, security-related documentation that AWS provides, describing AWS security features and services (for example, security groups, network ACLs, AWS WAF), understanding that third-party security products are available from AWS Marketplace, identifying where AWS security information is available (for example, AWS Knowledge Center, AWS Security Center, AWS Security Blog), and understanding the use of AWS services for identifying security issues (for example, AWS Trusted Advisor) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.1: Define Methods of Deploying and Operating in the AWS Cloud

Comprehensive guide to defining methods of deploying and operating in the AWS Cloud including different ways of provisioning and operating in the AWS Cloud, different ways to access AWS services, types of cloud deployment models, connectivity options, deciding between options such as programmatic access (for example, APIs, SDKs, CLI), the AWS Management Console, and infrastructure as code (IaC), evaluating requirements to determine whether to use one-time operations or repeatable processes, identifying different deployment models (for example, cloud, hybrid, on-premises), and identifying connectivity options (for example, AWS VPN, AWS Direct Connect, public internet) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.2: Define the AWS Global Infrastructure

Comprehensive guide to defining the AWS global infrastructure including AWS Regions, Availability Zones, and edge locations, high availability, use of multiple Regions, benefits of edge locations, AWS Wavelength Zones and AWS Local Zones, describing relationships among Regions, Availability Zones, and edge locations, describing how to achieve high availability by using multiple Availability Zones, recognizing that Availability Zones do not share single points of failure, describing when to use multiple Regions (for example, disaster recovery, business continuity, low latency for end users, data sovereignty), and describing at a high level the benefits of edge locations (for example, Amazon CloudFront, AWS Global Accelerator) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.3: Identify AWS Compute Services

Comprehensive guide to identifying AWS compute services including AWS compute services, recognizing the appropriate use of different EC2 instance types (for example, compute optimized, storage optimized), recognizing the appropriate use of different container options (for example, Amazon ECS, Amazon EKS), recognizing the appropriate use of different serverless compute options (for example, AWS Fargate, Lambda), recognizing that auto scaling provides elasticity, and identifying the purposes of load balancers in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.4: Identify AWS Database Services

Comprehensive guide to identifying AWS database services including AWS database services, database migration, deciding when to use EC2 hosted databases or AWS managed databases, identifying relational databases (for example, Amazon RDS, Amazon Aurora), identifying NoSQL databases (for example, DynamoDB), identifying memory-based databases, and identifying database migration tools (for example AWS Database Migration Service [AWS DMS], AWS Schema Conversion Tool [AWS SCT]) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.5: Identify AWS Network Services

Comprehensive guide to identifying AWS network services including AWS network services, identifying the components of a VPC (for example, subnets, gateways), understanding security in a VPC (for example, network ACLs, security groups), understanding the purpose of Amazon Route 53, identifying edge services (for example, CloudFront, Global Accelerator), and identifying network connectivity options to AWS (for example AWS VPN, Direct Connect) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.6: Identify AWS Storage Services

Comprehensive guide to identifying AWS storage services including AWS storage services, identifying the uses for object storage, recognizing the differences in Amazon S3 storage classes, identifying block storage solutions (for example, Amazon Elastic Block Store [Amazon EBS], instance store), identifying file services (for example, Amazon Elastic File System [Amazon EFS], Amazon FSx), identifying cached file systems (for example, AWS Storage Gateway), understanding use cases for lifecycle policies, and understanding use cases for AWS Backup in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.7: Identify AWS AI/ML and Analytics Services

Comprehensive guide to identifying AWS AI/ML and analytics services including AWS AI/ML services, AWS analytics services, understanding the different AI/ML services and the tasks that they accomplish (for example, Amazon SageMaker, Amazon Lex, Amazon Kendra), and identifying the services for data analytics (for example, Amazon Athena, Amazon Kinesis, AWS Glue, Amazon QuickSight) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 3.8: Identify Services from Other In-Scope AWS Service Categories

Comprehensive guide to identifying services from other in-scope AWS service categories including application integration services (Amazon EventBridge, Amazon SNS, Amazon SQS), business application services (Amazon Connect, Amazon SES), customer engagement services (AWS Activate for Startups, AWS IQ, AWS Managed Services, AWS Support), developer tool services (AWS AppConfig, AWS Cloud9, AWS CloudShell, AWS CodeArtifact, AWS CodeBuild, AWS CodeCommit, AWS CodeDeploy, AWS CodePipeline, AWS CodeStar, AWS X-Ray), end-user computing services (Amazon AppStream 2.0, Amazon WorkSpaces, Amazon WorkSpaces Web), frontend web and mobile services (AWS Amplify, AWS AppSync), IoT services (AWS IoT Core, AWS IoT Greengrass), and choosing appropriate services for messaging, business applications, customer support, development, virtual machines, frontend development, and IoT device management in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 4.1: Compare AWS Pricing Models

Comprehensive guide to comparing AWS pricing models including compute purchasing options (On-Demand Instances, Reserved Instances, Spot Instances, Savings Plans, Dedicated Hosts, Dedicated Instances, Capacity Reservations), data transfer charges, storage options and tiers, identifying and comparing when to use various compute purchasing options, describing Reserved Instance flexibility, describing Reserved Instance behavior in AWS Organizations, understanding incoming data transfer costs and outgoing data transfer costs (from one Region to another Region, within the same Region), and understanding different pricing options for various storage options and tiers in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 4.2: Understand Resources for Billing, Budget, and Cost Management

Comprehensive guide to understanding resources for billing, budget, and cost management including billing support and information, pricing information for AWS services, AWS Organizations, AWS cost allocation tags, understanding the appropriate uses and capabilities of AWS Budgets, AWS Cost Explorer, and AWS Billing Conductor, understanding the appropriate uses and capabilities of AWS Pricing Calculator, understanding AWS Organizations consolidated billing and allocation of costs, and understanding various types of cost allocation tags and their relation to billing reports (for example, AWS Cost and Usage Report) in AWS Certified Cloud Practitioner exam preparation.

CLF-C02 Task Statement 4.3: Identify AWS Technical Resources and AWS Support Options

Comprehensive guide to identifying AWS technical resources and AWS Support options including resources and documentation available on official AWS websites, AWS Support plans, role of the AWS Partner Network (independent software vendors and system integrators), AWS Support Center, locating AWS whitepapers, blogs, and documentation on official AWS websites, identifying and locating AWS technical resources (AWS Prescriptive Guidance, AWS Knowledge Center, AWS re:Post), identifying AWS Support options for AWS customers (customer service and communities, AWS Developer Support, AWS Business Support, AWS Enterprise On-Ramp Support, AWS Enterprise Support), identifying the role of Trusted Advisor, AWS Health Dashboard, and AWS Health API, identifying the role of the AWS Trust and Safety team, understanding the role of AWS Partners (AWS Marketplace, independent software vendors, system integrators), identifying the benefits of being an AWS Partner, identifying the key services that AWS Marketplace offers, and identifying technical assistance options available at AWS (AWS Professional Services, AWS Solutions Architects) in AWS Certified Cloud Practitioner exam preparation.