AWS Certified Cloud Practitioner Prep
Preparing for the AWS Certified Cloud Practitioner (AWS CCP) exam? Don’t know where to start? This post is the AWS Certified Cloud Practitioner Certificate Study Guide (with links to each objective in the exam domain).
I have curated a detailed list of articles from AWS documentation and other blogs for each objective of the AWS Certified Cloud Practitioner (CLF-C01) exam. Please share the post within your circles so it helps them to prepare for the exam.
Courses on AWS Certified Cloud Practitioner
LinkedIn Learning [Free Trial] | Preparing for the Cloud Practitioner Exam |
Pluralsight | Cloud Practitioner Learning Path [Free Trial] |
Udemy | AWS Practitioner Course by Zeal Vora |
Coursera | AWS Fundamentals Specialization |
Practice Test for AWS Certified Cloud Practitioner
Whizlabs Exam Questions | Cloud Practitioner [195 Questions & 21 Labs] |
Udemy Practice Test | AWS Certification Exam Practice Questions |
Amazon AWS-CCP e-book | AWS Cloud Practitioner Study Guide |
AWS Certified Cloud Practitioner Exam Questions
Check out all the other AWS certificate study guides
Full Disclosure: Some of the links in this post are affiliate links. I receive a commission when you purchase through them.
Domain 1: Cloud Concepts – 26%
1.1 Define the AWS Cloud and Its Value Proposition
Define the benefits of the AWS cloud including:
o Security
Six advantages of cloud security
o Reliability
Reliability pillar: AWS Well-Architected Framework
o High Availability
o Elasticity
Elasticity in AWS Well-Architected Framework
o Agility
o Pay-as-you-go pricing
o Scalability
Scalability in AWS Well-Architected Framework
o Global Reach
Global infrastructure Amazon.com
o Economy of scale
Explain how the AWS cloud allows users to focus on business value
o Shifting technical resources to revenue-generating activities as opposed to managing infrastructure
Cloud Computing’s value proposition | Maximize value with AWS
1.2 Identify Aspects of AWS Cloud Economics
Define items that would be part of a Total Cost of Ownership proposal
o Understand the role of operational expenses (OpEx)
o Understand the role of capital expenses (CapEx)
Cloud, CapEx, and OpEx: Reframing the Conversation
o Understand labor costs associated with on-premises operations
Evaluate the TCO for an on-premise application system
o Understand the impact of software licensing costs when moving to the cloud
Identify which operations will reduce costs by moving to the cloud
o Right-sized infrastructure
o Benefits of automation
The case for investing in cloud automation
o Reduce compliance scope (for example, reporting)
Minimize the PCI compliance burden
o Managed services (for example, RDS, ECS, EKS, DynamoDB)
1.3 Explain the Different Cloud Architecture Design Principles
Explain the design principles
o Design for failure
o Decouple components versus monolithic architecture
How to break a monolith application into microservices?
o Implement elasticity in the cloud versus on-premises
Elasticity: AWS Well-Architected Framework
o Think parallel
Amazon link (affiliate)
Domain 2: Security and Compliance – 25%
2.1 Define the AWS Shared Responsibility Model
Recognize the elements of the Shared Responsibility Model
Shared Responsibility Model in AWS
Describe the customer’s responsibility on AWS
o Describe how the customer’s responsibilities may shift depending on the service used (for example with RDS, Lambda, or EC2)
Describe AWS responsibilities
AWS responsible for the security of the cloud
2.2 Define AWS Cloud Security and Compliance Concepts
Identify where to find AWS compliance information
o Locations of lists of recognized available compliance controls (for example, HIPPA, SOCs)
o Recognize that compliance requirements vary among AWS services
At a high level, describe how customers achieve compliance on AWS
o Identify different encryption options on AWS (for example, In transit, At rest)
Describe who enables encryption on AWS for a given service
The importance of encryption and how AWS can help
Recognize there are services that will aid in auditing and reporting
o Recognize that logs exist for auditing and monitoring (do not have to understand the logs)
View HSM audit logs in CloudWatch Logs
o Define Amazon CloudWatch, AWS Config, and AWS CloudTrail
Explain the concept of least privileged access
2.3 Identify AWS Access Management Capabilities
Understand the purpose of User and Identity Management
o Access keys and password policies (rotation, complexity)
Managing access keys for IAM users
Setting an account password policy for IAM users
o Multi-Factor Authentication (MFA)
o AWS Identity and Access Management (IAM)
• Groups/users
IAM Identities (users, user groups)
• Roles
• Policies, managed policies compared to custom policies
o Tasks that require use of root accounts
Tasks that require root user credentials
o Protection of root accounts
2.4 Identify Resources for Security Support
Recognize there are different network security capabilities
o Native AWS services (for example, security groups, Network ACLs, AWS WAF)
Network ACLs in Amazon Virtual Private Cloud
o 3rd party security products from the AWS Marketplace
Recognize there is documentation and where to find it (for example, best practices, whitepapers, official documents)
o AWS Knowledge Center, Security Center, security forum, and security blogs
o Partner Systems Integrators
Know that security checks are a component of AWS Trusted Advisor
AWS Trusted Advisor security check reference
Domain 3: Technology – 33%
3.1 Define Methods of Deploying and Operating in the AWS Cloud
Identify at a high-level different ways of provisioning and operating in the AWS cloud
o Programmatic access, APIs, SDKs, AWS Management Console, CLI, Infrastructure as Code
Identify different types of cloud deployment models
Cloud computing deployment models
o All in with cloud/cloud-native
o Hybrid
o On-premises
Identify connectivity options
3.2 Define the AWS Global Infrastructure
Describe the relationships among Regions, Availability Zones, and Edge Locations
Global infrastructure regions & AZs
Describe how to achieve high availability through the use of multiple Availability Zones
o Recall that high availability is achieved by using multiple Availability Zones
High availability (Multi-AZ) for Amazon RDS
Amazon RDS Multi-AZ Deployments
o Recognize that Availability Zones do not share single points of failure
Describe when to consider the use of multiple AWS Regions
Multi-region application architecture
o Disaster recovery/business continuity
Disaster recovery options in the cloud
o Low latency for end-users
Low-latency computing with AWS Local Zones
o Data sovereignty
Describe at a high level the benefits of Edge Locations
o Amazon CloudFront
Content Delivery Network (CDN)
o AWS Global Accelerator
3.3 Identify the Core AWS Services
Describe the categories of services on AWS (compute, storage, network, database)
Identify AWS compute services
o Recognize there are different compute families
o Recognize the different services that provide compute (for example, AWS Lambda compared to Amazon Elastic Container Service (Amazon ECS), or Amazon EC2, etc.)
Overview of AWS Compute Services
o Recognize that elasticity is achieved through Auto Scaling
Use AutoScaling to achieve elastic computing
o Identify the purpose of load balancers
Identify different AWS storage services
o Describe Amazon S3
Cloud object storage | Amazon Simple Storage Service (S3)
o Describe Amazon Elastic Block Store (Amazon EBS)
Amazon Elastic Block Store (Amazon EBS)
o Describe Amazon S3 Glacier
o Describe AWS Snowball
o Describe Amazon Elastic File System (Amazon EFS)
Use Amazon EFS with Amazon EC2
o Describe AWS Storage Gateway
Identify AWS networking services
o Identify VPC
o Identify security groups
Identify the security groups to use
o Identify the purpose of Amazon Route 53
o Identify VPN, AWS Direct Connect
Identify different AWS database services
o Install databases on Amazon EC2 compared to AWS managed databases
Choose between RDS, EC2 on AWS for your DB
Amazon EC2-hosted vs. Amazon RDS
o Identify Amazon RDS
o Identify Amazon DynamoDB
o Identify Amazon Redshift
3.4 Identify Resources for Technology Support
Recognize there is documentation (best practices, whitepapers, AWS Knowledge Center, forums, blogs)
Follow security best practices
Identify the various levels and scope of AWS support
o AWS Abuse
o AWS support cases
o Premium support
Announcing AWS premium support
o Technical Account Managers
Recognize there is a partner network (marketplace, third-party) including Independent Software Vendors and System Integrators
Systems Integrators | AWS Partner Network (APN)
Identify sources of AWS technical assistance and knowledge including professional services, solution architects, training and certification, and the Amazon Partner Network
Successful solutions architects do these five things
Identify the benefits of using AWS Trusted Advisor
Domain 4: Billing and Pricing – 16%
4.1 Compare and Contrast the Various Pricing Models for AWS (For Example, On-Demand Instances, Reserved Instances, and Spot Instance Pricing)
Identify scenarios/best fit for On-Demand Instance pricing
EC2 on-demand instance pricing
On-Demand Instances in Elastic Compute Cloud
Identify scenarios/best fit for Reserved-Instance pricing
o Describe Reserved-Instances flexibility
Instance size flexibility for EC2 Reserved Instances
o Describe Reserved-Instances behavior in AWS Organizations
Identify scenarios/best fit for Spot Instance pricing
Strategies for using spot instances
4.2 Recognize the Various Account Structures in Relation to AWS Billing and Pricing
Recognize that consolidated billing is a feature of AWS Organizations
Consolidated billing for AWS Organizations
Identify how multiple accounts aid in allocating costs across departments
Cost allocation basics that you need to know
AWS cost allocation for customer bills
4.3 Identify Resources Available for Billing Support
Identify ways to get billing support and information
Get help with AWS Billing & Cost Management
o Cost Explorer, AWS Cost and Usage Report, Amazon QuickSight, third-party partners, and AWS Marketplace tools
Analyzing your costs with Cost Explorer
o Open a billing support case
o The role of the Concierge for AWS Enterprise Support Plan customers
Identify where to find pricing information on AWS services
o AWS Simple Monthly Calculator
o AWS Services product pages
o AWS Pricing API
Recognize that alarms/alerts exist
Creating a billing alarm to monitor your AWS charges
Monitor Your AWS charges with billing alerts
Identify how tags are used in cost allocation
This brings us to the end of the AWS Certified Cloud Practitioner (AWS CCP) [CLF-C01] Exam Preparation Study Guide.
What do you think? Let me know in the comments section if I have missed out on anything. Also, I love to hear from you about how your preparation is going on!
In case you are preparing for other AWS certification exams, check out the AWS study guides for those exams.
Get Updates on AWS Certified Cloud Practitioner
Want to be notified as soon as I post? Subscribe to the RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.