A 4-Week Study Plan for the AWS Cloud Practitioner (CLF-C02)
A focused four-week study plan for the AWS Certified Cloud Practitioner exam, mapped to the four official domains and weighted by what actually shows up on the test.
By ExamCoachAI
6 min read
On this page (7)
The AWS Certified Cloud Practitioner (CLF-C02) is the most-taken AWS exam in the world. Sixty-five questions, 90 minutes, $100, no prerequisites. It is also the cert most candidates over-prepare for. With four focused weeks at about eight hours per week, most candidates pass on a first attempt.
This is a domain-weighted plan you can drop into a calendar.
Week 1: Cloud concepts (24% of the exam)#
Foundations week. Get the vocabulary right.
- The AWS Cloud value proposition: agility, elasticity, economies of scale, managed services.
- Cloud economics: CapEx vs OpEx, the six advantages of cloud computing, the AWS Pricing Calculator.
- The Well-Architected Framework's six pillars at a high level.
- Cloud architecture design principles: design for failure, decouple components, automate everything, scale horizontally.
Hands-on: create a free-tier AWS account if you do not have one. Tour the Console. Read the Well-Architected Framework whitepaper. Do not memorize it word for word.
Week 2: Security and compliance (30% of the exam)#
The single largest domain. Spend the most time here.
- The AWS Shared Responsibility Model. Know which side owns what for IaaS, PaaS, and SaaS.
- IAM fundamentals: users, groups, roles, policies, MFA, root account protection, IAM Identity Center (formerly SSO).
- Encryption: KMS, CloudHSM, TLS in transit, server-side vs client-side encryption.
- Security services by purpose: GuardDuty (threat detection), Inspector (vulnerability scanning), Macie (PII discovery in S3), Security Hub (aggregator), AWS WAF, AWS Shield, Network Firewall.
- Compliance: AWS Artifact, AWS Config, AWS Audit Manager. AWS regions and data residency.
Hands-on: create an IAM user with MFA, attach a least-privilege policy, log in as that user. Walk through the Security Hub dashboard.
Week 3: Cloud technology and services (34% of the exam)#
The largest domain, but mostly identification questions ("which service does X"). Wide and shallow study works here.
- Compute: EC2 instance families, Lambda, ECS, EKS, Fargate, Beanstalk, Lightsail, Batch, Outposts.
- Storage: S3 storage classes, EBS volume types, EFS, FSx, Storage Gateway, Snow Family.
- Database: RDS, Aurora, DynamoDB, Redshift, ElastiCache, DocumentDB, Neptune, Timestream, QLDB.
- Networking: VPC, subnets, route tables, NAT, IGW, security groups vs NACLs, Direct Connect, Site-to-Site VPN, Transit Gateway, CloudFront, Route 53, Global Accelerator.
- Application integration: SQS, SNS, EventBridge, Step Functions, API Gateway.
- Migration and transfer: Migration Hub, DMS, Application Migration Service, DataSync, Snowball, Snowmobile.
- Developer and management tools: CloudFormation, CDK, Systems Manager, CloudWatch, CloudTrail, Trusted Advisor, AWS Health Dashboard, AWS Organizations, Control Tower, Service Catalog.
Hands-on: spin up an EC2 instance, create an S3 bucket, attach an IAM role to the instance, write to S3 from within. Tear it down. Repeat with a Lambda. The hands-on is what makes service names stick.
Week 4: Billing, pricing, and support (12%) plus practice exams#
The smallest domain. Quick to cover, then full review.
Days 1 to 2: Billing and pricing.
- Pricing models: on-demand, Reserved Instances, Savings Plans, Spot, dedicated hosts.
- AWS Organizations consolidated billing and discount sharing.
- AWS Free Tier (always free, 12-month free, free trials).
- Cost management tools: Cost Explorer, Budgets, Cost and Usage Reports, AWS Pricing Calculator.
- Support plans: Basic, Developer, Business, Enterprise On-Ramp, Enterprise. Know what each unlocks (TAM, third-party software help, response times).
Days 3 to 5: Two timed practice exams under exam conditions (90 minutes, no notes). Score by domain. Anything under 70% gets a focused half-day review.
Day 6: One final timed exam. Sleep on it.
Day 7 (exam day): Light review only. Coffee, calm, take the exam.
Total time budget#
About 32 hours over four weeks:
- 6 hours on cloud concepts.
- 10 hours on security and compliance.
- 12 hours on cloud technology and services.
- 4 hours on billing and support, plus practice exams.
If your background is non-technical, add a fifth week and double the hands-on time in week 3. Service names stick faster from one console click than from ten readings.
What to drop if you fall behind#
If you lose a week, compress weeks 1 and 4 first. They are the smallest domains and the most readable. Do not compress week 2 (security) or the hands-on portions of week 3.
What this exam is not#
CLF-C02 is not a test of how to architect on AWS. It is a test of whether you can identify services and explain the AWS value proposition. People fail when they over-engineer their study and start memorizing EC2 instance vCPU counts. Resist that impulse. Wide and shallow is the shape of the exam.
Ready to put this into practice? Start a free practice test on ExamCoachAI.
Free practice on your certification, scored instantly. No card required.
Google PMLE vs AWS MLA-C01: Which ML Certification Should You Pick in 2026?
AWS SAA-C03 vs Azure AZ-305: Which Architect Cert Should You Pick in 2026?
AWS SAA-C03 vs Azure AZ-305: Which Architect Cert Should You Pick in 2026?
A side-by-side comparison of AWS Solutions Architect Associate and Azure Solutions Architect Expert. What each tests, who they suit, and which to take first.
Is the AWS Cloud Practitioner Exam Hard? (CLF-C02 Guide for 2026)
Is the AWS Cloud Practitioner CLF-C02 hard? Pass score, who actually struggles with it, study time, and 3 real-style practice questions.
AWS AI Practitioner vs NVIDIA NCA-GENL: Which AI Cert Should You Take First?
AWS AI Practitioner and NVIDIA NCA-GENL are the two most defensible foundational AI certs in 2026. A side-by-side on what each tests and which to take first.