A 4-Week Study Plan for the AWS Cloud Practitioner (CLF-C02)
A focused four-week study plan for the AWS Certified Cloud Practitioner exam, mapped to the four official domains and weighted by what actually shows up on the test.
By ExamCoachAI
6 min read
On this page (7)
The AWS Certified Cloud Practitioner (CLF-C02) is the most-taken AWS exam in the world. Sixty-five questions, 90 minutes, $100, no prerequisites. It is also the cert most candidates over-prepare for. With four focused weeks at about eight hours per week, most candidates pass on a first attempt.
This is a domain-weighted plan you can drop into a calendar.
Week 1: Cloud concepts (24% of the exam)#
Foundations week. Get the vocabulary right.
- The AWS Cloud value proposition: agility, elasticity, economies of scale, managed services.
- Cloud economics: CapEx vs OpEx, the six advantages of cloud computing, the AWS Pricing Calculator.
- The Well-Architected Framework's six pillars at a high level.
- Cloud architecture design principles: design for failure, decouple components, automate everything, scale horizontally.
Hands-on: create a free-tier AWS account if you do not have one. Tour the Console. Read the Well-Architected Framework whitepaper. Do not memorize it word for word.
Week 2: Security and compliance (30% of the exam)#
The single largest domain. Spend the most time here.
- The AWS Shared Responsibility Model. Know which side owns what for IaaS, PaaS, and SaaS.
- IAM fundamentals: users, groups, roles, policies, MFA, root account protection, IAM Identity Center (formerly SSO).
- Encryption: KMS, CloudHSM, TLS in transit, server-side vs client-side encryption.
- Security services by purpose: GuardDuty (threat detection), Inspector (vulnerability scanning), Macie (PII discovery in S3), Security Hub (aggregator), AWS WAF, AWS Shield, Network Firewall.
- Compliance: AWS Artifact, AWS Config, AWS Audit Manager. AWS regions and data residency.
Hands-on: create an IAM user with MFA, attach a least-privilege policy, log in as that user. Walk through the Security Hub dashboard.
Week 3: Cloud technology and services (34% of the exam)#
The largest domain, but mostly identification questions ("which service does X"). Wide and shallow study works here.
- Compute: EC2 instance families, Lambda, ECS, EKS, Fargate, Beanstalk, Lightsail, Batch, Outposts.
- Storage: S3 storage classes, EBS volume types, EFS, FSx, Storage Gateway, Snow Family.
- Database: RDS, Aurora, DynamoDB, Redshift, ElastiCache, DocumentDB, Neptune, Timestream, QLDB.
- Networking: VPC, subnets, route tables, NAT, IGW, security groups vs NACLs, Direct Connect, Site-to-Site VPN, Transit Gateway, CloudFront, Route 53, Global Accelerator.
- Application integration: SQS, SNS, EventBridge, Step Functions, API Gateway.
- Migration and transfer: Migration Hub, DMS, Application Migration Service, DataSync, Snowball, Snowmobile.
- Developer and management tools: CloudFormation, CDK, Systems Manager, CloudWatch, CloudTrail, Trusted Advisor, AWS Health Dashboard, AWS Organizations, Control Tower, Service Catalog.
Hands-on: spin up an EC2 instance, create an S3 bucket, attach an IAM role to the instance, write to S3 from within. Tear it down. Repeat with a Lambda. The hands-on is what makes service names stick.
Week 4: Billing, pricing, and support (12%) plus practice exams#
The smallest domain. Quick to cover, then full review.
Days 1 to 2: Billing and pricing.
- Pricing models: on-demand, Reserved Instances, Savings Plans, Spot, dedicated hosts.
- AWS Organizations consolidated billing and discount sharing.
- AWS Free Tier (always free, 12-month free, free trials).
- Cost management tools: Cost Explorer, Budgets, Cost and Usage Reports, AWS Pricing Calculator.
- Support plans: Basic, Developer, Business, Enterprise On-Ramp, Enterprise. Know what each unlocks (TAM, third-party software help, response times).
Days 3 to 5: Two timed practice exams under exam conditions (90 minutes, no notes). Score by domain. Anything under 70% gets a focused half-day review.
Day 6: One final timed exam. Sleep on it.
Day 7 (exam day): Light review only. Coffee, calm, take the exam.
Total time budget#
About 32 hours over four weeks:
- 6 hours on cloud concepts.
- 10 hours on security and compliance.
- 12 hours on cloud technology and services.
- 4 hours on billing and support, plus practice exams.
If your background is non-technical, add a fifth week and double the hands-on time in week 3. Service names stick faster from one console click than from ten readings.
What to drop if you fall behind#
If you lose a week, compress weeks 1 and 4 first. They are the smallest domains and the most readable. Do not compress week 2 (security) or the hands-on portions of week 3.
What this exam is not#
CLF-C02 is not a test of how to architect on AWS. It is a test of whether you can identify services and explain the AWS value proposition. People fail when they over-engineer their study and start memorizing EC2 instance vCPU counts. Resist that impulse. Wide and shallow is the shape of the exam.
Ready to put this into practice? Start a free practice test on ExamCoachAI.
Free practice on your certification, scored instantly. No card required.
Google PMLE vs AWS MLA-C01: Which ML Certification Should You Pick in 2026?
AWS SAA-C03 vs Azure AZ-305: Which Architect Cert Should You Pick in 2026?
An Eight-Week Study Plan for the Microsoft AZ-104 Azure Administrator Exam
An eight-week AZ-104 study plan mapped to the official domain weights, with hands-on lab time built into every week because reading alone fails this exam.
AWS Cloud Practitioner vs Azure Fundamentals: Which Cloud Cert First in 2026?
AWS Cloud Practitioner or Azure Fundamentals as your first cloud cert? A beginner-friendly comparison of cost, difficulty, expiry, job markets, and what to take next.
AWS SAA-C03 vs Azure AZ-305: Which Architect Cert Should You Pick in 2026?
A side-by-side comparison of AWS Solutions Architect Associate and Azure Solutions Architect Expert. What each tests, who they suit, and which to take first.