AWS Cloud Practitioner (CLF-C02) Flashcards
Every key term and definition you must know for the AWS Cloud Practitioner exam — the shared responsibility model, IAM, pricing options, core services and more. Flip through the interactive deck in the practice center, or review the cards below.
Shared responsibility model
AWS = security OF the cloud (physical, hardware, network). Customer = security IN the cloud (data, IAM, guest OS, security groups).
Related question →Regions, AZs and edge locations
Region = geographic area with 3+ AZs. AZ = isolated data centers. Edge location = CloudFront cache site.
Related question →IAM
Identity & Access Management: users, groups, roles and policies. Global service. Grant least privilege.
Related question →MFA
Multi-Factor Authentication: second layer of security beyond a password. Enable on the root account.
Related question →Security group
Stateful virtual firewall at instance level. Allow-only rules for inbound and outbound traffic.
Related question →CloudTrail
Records API activity for auditing, governance and compliance. "Who did what and when".
Related question →CloudWatch
Monitors metrics, collects logs and triggers alarms. Operational visibility across AWS.
Related question →GuardDuty
Threat detection service that monitors for malicious activity and unexpected behavior.
Related question →AWS WAF
Web application firewall blocking SQL injection, XSS and common web exploits.
Related question →Spot Instances
Up to 90% discount on unused capacity. Can be interrupted with a 2-minute notice.
Related question →Reserved / Savings Plans
1-3 year commitment for the biggest discounts (up to ~72%). Best for steady workloads.
Related question →Lambda
Serverless compute: run code in response to events. No servers to manage, pay per invocation.
Related question →Glacier Deep Archive
Lowest-cost S3 storage class for long-term archives with retrieval in hours.
Related question →RDS
Managed relational databases: MySQL, PostgreSQL, MariaDB, Oracle, SQL Server, Aurora.
Related question →DynamoDB
Fully managed NoSQL key-value/document DB with single-digit millisecond latency.
Related question →Route 53
DNS service: translates domain names to IP addresses. Also domain registration.
Related question →CloudFront
CDN: caches content at edge locations worldwide for low-latency delivery.
Related question →SNS
Pub/sub notification service. Push messages to email, SMS, Lambda, SQS, HTTP endpoints.
Related question →VPC
Virtual Private Cloud: logically isolated virtual network with subnets, route tables and gateways.
Related question →Well-Architected pillars
Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability.
Related question →AWS Free Tier
12-month free tier (e.g., 750h EC2/month), always-free services, and short trials for new accounts.
Related question →Trusted Advisor
Checks for cost optimization, security, fault tolerance and service limits.
Related question →Support plans
Basic (free) → Developer → Business → Enterprise (TAM, 15-min response).
Related question →CLF-C02 exam
65 questions, 90 minutes, scaled score 100-1000, passing = 700. Domains: Concepts 24%, Security 30%, Tech 34%, Billing 12%.
Related question →Turn these terms into exam-ready recall
Start free in seconds — no signup, no credit card. Practice questions, timed mock exams with the official 70% pass threshold, and flashcards.