CLF-C02
Deep Dive
The CLF-C02 covers a wide range of services beyond the core areas of compute, storage, and databases. This guide covers application integration services, developer tools, end-user endpoints, and business services that can appear on the exam.
Contents
Decoupled architectures separate application components using queues or event buses, letting each component scale and fail independently.
Amazon SNS — Simple Notification Service
Pub/sub messaging — push notifications — fan-out
A fully managed messaging and push notification service. Publishers send messages to a topic and SNS delivers them to all subscribers at once (fan-out).
Possible subscribers
Typical use case
A new order → SNS topic → simultaneously notifies: email to the customer, SQS for inventory processing, SQS for billing.
Amazon SQS — Simple Queue Service
Message queue — decouples producers and consumers
A fully managed message queue for decoupling and scaling microservices and distributed applications. Messages sit in the queue until a consumer processes them.
Queue types
Key benefit
If the payment processor is slow, orders wait in the queue. The order service doesn't block waiting for a response.
Amazon EventBridge
Serverless event bus — event routing
A serverless event bus that makes it easy for applications to communicate using event data. Routes events from AWS services, your own applications, and SaaS partners to targets like Lambda, SQS, SNS, and more.
AWS Step Functions
Workflow orchestration — serverless state machines
A serverless orchestration service for coordinating multiple AWS services into workflows. Define the flow visually as a state machine: each step can be a Lambda function, an API call, a pause for human approval, and more.
SNS vs SQS vs EventBridge — Exam traps
SNS: active push to multiple subscribers at once (fan-out). Messages aren't stored if there's no subscriber.
SQS: a persistent message queue. The consumer polls (asks if there are messages). Decouples producer and consumer in time.
EventBridge: event routing with complex filtering logic. For event-driven architectures and reacting to state changes.
Common pattern: SNS → SQS (fan-out to queues) to process the same event with multiple independent consumers at their own pace.
Create a pub/sub messaging topic and an email subscription to receive alerts.
+1 more...
Create a message queue to decouple a producer from a consumer without losing messages.
+1 more...
AWS CodeBuild
CI — Build and test
A fully managed continuous integration (CI) service. Compiles source code, runs tests, and produces deployable artifacts. Pay per build minute.
AWS CodePipeline
CD — Full pipeline
A continuous delivery (CD) service that automates the release pipeline: code → build → test → deploy. Orchestrates the steps of the software delivery lifecycle.
AWS X-Ray
Observability — distributed tracing
A distributed tracing service for debugging and analyzing applications in production. Lets you see a service map, identify bottlenecks, and find errors in microservices architectures.
AWS CLI
CLI access — automation
A unified command-line tool for managing all AWS services. Enables scripting and automation of any AWS operation from a terminal or CI/CD scripts.
Solutions for giving remote employees or contractors secure access to desktops and applications.
Amazon AppStream 2.0
Streams individual desktop applications to the user's browser. Nothing to install locally. The app runs on AWS servers.
Use case
Contractors who need access to CAD design tools without installing them on their personal machines.
Amazon WorkSpaces
Full virtual desktops (VDI) in the cloud. Windows or Linux. Access from any device. Persistent — desktop state is preserved between sessions.
Use case
Remote employees who need a full corporate Windows desktop from their personal laptop.
Amazon WorkSpaces Secure Browser
A managed secure web browser in the cloud for accessing internal web applications without exposing data on the user's device.
Use case
Secure access to internal web apps for employees using BYOD (personal devices).
AWS Amplify
Full-stack framework for web and mobile
A framework and toolset for building full-stack web and mobile applications on AWS. Provides hosting, authentication (Cognito), APIs (REST/GraphQL), storage, and more, all through a single CLI.
AWS AppSync
Managed GraphQL API
A fully managed GraphQL API service. Simplifies application development by providing a flexible data layer. Supports real-time data over WebSockets and offline operations.
Amazon Connect
A cloud contact center (call center). No hardware, pay per minute. Integrates voice, chat, and tasks. Uses ML for call analytics.
Example
A company replacing its traditional call center with a cloud solution and no on-prem hardware.
Amazon SES
Simple Email Service — a bulk and transactional email service. Sends millions of emails (newsletters, notifications, welcome emails) with high deliverability.
Example
An e-learning platform that emails certificates and course reminders to thousands of students.
AWS IoT Core
Securely connects IoT devices to AWS. Supports MQTT and HTTP protocols. Manages millions of devices simultaneously with rules for processing and routing data.
Example
A smart thermostat manufacturer connecting millions of devices to AWS for analytics and remote control.
AWS Batch
Runs batch jobs at any scale without managing infrastructure. Define jobs, and AWS automatically provisions the optimal compute capacity.
Amazon ECR — Elastic Container Registry
A fully managed Docker container registry. Stores, manages, and deploys container images. Integrated with ECS, EKS, and Fargate.
AWS PrivateLink
Private connectivity between VPCs and AWS services without going over the public internet. Data never leaves the AWS network. Higher security and lower latency.
Amazon API Gateway
A service for creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs at any scale. The front door to backend services (Lambda, EC2, any HTTP endpoint).
Amazon Cognito
An authentication and authorization service for web and mobile applications. Handles sign-up, sign-in, and JWT tokens. User Pools (user authentication) + Identity Pools (access to AWS).
Amazon Detective
Investigates security incidents and finds root cause. Automatically analyzes VPC Flow Logs, CloudTrail, and GuardDuty to build a behavior graph and speed up forensic investigation.
Did you get this topic?
Test what you just learned
An e-commerce company processes orders asynchronously. The order service creates an order and the payment service processes it later. The team wants to make sure that if the payment service is busy, orders aren't lost and are processed in order. Which AWS service best solves this problem?
Put what you learned to the test with original CLF-C02 exam questions.
Start CLF-C02 mock examUnlimited mock exams with the Pro plan
Log in to track your progress.