AWS Certified Cloud Practitioner (CLF-C02) Study Guide (Tom Taulli)（Z-Library）

# AWS Certified Cloud Practitioner (CLF-C02) Study Guide ## 【One-Line Pitch】 A practical, exam-focused companion for anyone starting their AWS certification journey, this guide walks you through cloud fundamentals, core AWS services, security, and cost management—ideal for IT professionals, business managers, and career switchers who want a structured path to passing the CLF-C02 exam and speaking fluent cloud. ## 【Book Arc】 - **Opening (~0%–9%)**: Sets the stage with exam logistics—registration, rescheduling, age requirements, accommodations, and retake policies—then walks through creating an AWS account, including payment verification and Free Tier caveats. This solves the "how do I even start" problem. - **Early (~9%–25%)**: Covers cloud deployment models (public, private, hybrid), service models (IaaS, PaaS, SaaS), and foundational frameworks like the AWS Cloud Adoption Framework (CAF) with its six perspectives. Introduces cost concepts like BYOL vs. License Included and rightsizing as an ongoing practice. - **Early (~25%–34%)**: Dives into security fundamentals—IAM policies, authentication vs. authorization, MFA, and identity providers. Includes practical examples of balanced IAM policies and CLI setup across operating systems. - **Middle (~34%–47%)**: Explores the shared responsibility model, edge protection services (Security Groups vs. NACLs), encryption tools (KMS, Secrets Manager, ACM), and data center physical infrastructure. Transitions into AWS global infrastructure—Regions, Availability Zones, and edge locations. - **Middle (~47%–end)**: Covers deployment and management tools—Console, CLI, SDKs, and infrastructure-as-code—plus container services like ECS and EKS. Emphasizes choosing between manual tasks and automation based on context, and wraps with billing, budgeting, and cost management strategies. ## 【Key Takeaways】 - **Exam logistics matter as much as content** (Opening): Know the 14-day retake waiting period, 24-hour rescheduling window, and accommodation options before you book. Missing an exam doesn't count as failing, but you lose the fee. - **Cloud deployment models are situational choices** (Early): Private cloud suits data sovereignty and performance needs; public cloud excels at scalability for seasonal spikes; hybrid blends both. There's no "best" model—only the right fit for your constraints. - **Rightsizing is a habit, not a one-time fix** (Early): Overprovisioned EC2 and RDS instances waste money; underprovisioned ones risk performance. Use Compute Optimizer and Cost Explorer to review usage trends over 14–93 days and adjust continuously. - **Authentication and authorization are distinct security layers** (Early): Authentication verifies who you are (passwords, MFA, IdPs); authorization determines what you can do (IAM policies, roles, permission boundaries). Think of it as unlocking the door vs. deciding which rooms you can enter. - **The shared responsibility model is nuanced** (Middle): AWS patches managed services like RDS, but you handle patching for EC2 and container images. Configuration responsibilities split differently per service—know where your obligations begin. - **Security Groups and NACLs serve different purposes** (Middle): Security Groups are stateful, resource-level filters attached to ENIs; NACLs are stateless, subnet-level barriers requiring explicit rules for both directions. Use both for layered defense. - **Automation beats manual work for production** (Middle): CloudFormation, CLI, SDKs, and Terraform turn one-off efforts into repeatable processes. Manual makes sense for quick fixes; automation wins for multi-team, multi-Region deployments. ## 【Reading Tips】 - **Skim the exam logistics chapter** (~0–9%): You only need the key facts—retake rules, rescheduling windows, and accommodation requests. Don't memorize every registration step; bookmark the URL and move on. - **Deep-read the security sections** (~25–47%): IAM policies, authentication vs. authorization, and the shared responsibility model are exam staples. Pay special attention to the Security Group vs. NACL comparison table—it's highly testable. - **Practice with the chapter quizzes** (Early sections): The book includes end-of-chapter questions with answer keys. Use these to gauge your understanding before moving to full practice exams. - **Hands-on with the AWS Free Tier is essential**: Set up your account, launch a test EC2 instance, create an S3 bucket, and experiment with the CLI. The book's examples make more sense once you've touched the actual services. - **Treat the CAF and Well-Architected Framework as complementary**: The CAF addresses organizational readiness; Well-Architected focuses on technical design. Don't confuse their purposes—the exam may ask which framework fits which scenario. ## 【Coverage Limits】 The excerpts cover roughly the first half of the book in detail—exam logistics, cloud fundamentals, security, and global infrastructure. Later chapters on specific services (EC2, S3, RDS, Lambda), developer tools, and detailed billing models are mentioned in the table of contents but not fully covered in this guide. ##