CLF-C02 Cheat Sheet
AWS Cloud Practitioner — Quick reference for the exam
CLI Commands
36aws configureTOPConfigure credentials (Access Key, Secret, Region)
aws configure listView active configuration
aws sts get-caller-identityTOPView current identity (account, ARN, UserId)
aws configure --profile <name>Configure an additional profile
Comparisons
6| Model | Commitment | Discount | Interruption | When to use it |
|---|---|---|---|---|
| On-Demand | None | Base price | No | Unpredictable workloads or new projects |
| Reserved (1 yr) | 1 year | Up to 40% | No | Production apps with steady load |
| Reserved (3 yr) | 3 years | Up to 72% | No | Very stable long-term workloads |
| Savings Plans | 1-3 years ($/hr) | Up to 66% | No | Flexibility across instances and Lambda |
| Spot | None | Up to 90% | Yes (2 min) | Batch processing, fault-tolerant jobs |
| Dedicated Host | Optional | Variable | No | BYOL licensing, regulatory compliance |
Quick Reference
37Global infrastructure
33+ global regions available
Minimum of 3 Availability Zones per region
400+ points of presence for CloudFront and Route 53
Region > AZ > Datacenter. AZs are physically separated
Region extensions for ultra-low latency in cities
AWS inside telecom carriers' 5G networks
S3 — key facts
99.999999999% (11 nines) for all objects
5 TB per object (multipart for >5 GB)
Globally unique, lowercase only, 3-63 characters
Cheaper to store, but charges a fee per access
Cheapest class. Retrieval: 12-48 hours
Protects against accidental overwrite/deletion
IAM — key facts
Do NOT use for daily operations. Initial setup only
Grant only the minimum permissions needed
Users, groups, and roles are not region-scoped
Use roles for apps on EC2/Lambda. Access Keys for CLI/local
Always enable on root and privileged users
Managed = reusable. Inline = resource-specific
Well-Architected Framework
Automate operations, continuously improve processes
Protect data, systems, and identities
Recover from failures, scale, meet demand
Use resources efficiently and maintain performance
Eliminate unnecessary spend, maximize value
Minimize the environmental impact of workloads
Services — quick reference
CloudWatch = performance metrics/logs. CloudTrail = API call auditing
Rekognition = analyzes images/faces. Textract = extracts text from documents
SNS = pub/sub fan-out. SQS = point-to-point queue
Polly = text→speech. Transcribe = speech→text
RDS = relational SQL, fixed schema. DynamoDB = NoSQL, flexible
Stateful — an inbound rule automatically allows the outbound reply
Stateless — needs explicit inbound AND outbound rules
Pricing and billing
12 months free + always free (Lambda 1M req, DynamoDB 25GB)
Free — uploading data to AWS has no cost
Has a cost — downloading data from AWS to the internet is billed
Analyze historical spend and forecast costs
Alerts when spend exceeds defined thresholds
Estimate costs BEFORE creating resources
Ready to practice?
Put what you learned to the test with original CLF-C02 exam questions.
Start CLF-C02 mock examUnlimited mock exams with the Pro plan