How to pass AWS Cloud Practitioner (CLF-C02) in 4 weeks

Four weeks is enough for CLF-C02 if you can put in 8–10 hours a week and you're not coming in completely cold to IT. That's the honest framing. If you've never opened a terminal, give yourself 6–8 weeks instead.

I've taken CLF-C02 in 2024 and watched a dozen people prep for it since. The plan below is what I'd give to a friend. Some of the popular advice — buy three Udemy courses, watch every Stephane Maarek video at 1.75x — is wasteful. You don't need that much input. You need the right input, and you need to spend more time clicking around in the AWS console than you think.

What you're signing up for

CLF-C02 is 65 questions in 90 minutes. $100 USD. Pass at 700/1000 on a scaled scoring system, which is roughly 70% raw correct. Four domains:

• Cloud Concepts (24%)
• Security and Compliance (30%)
• Cloud Technology and Services (34%)
• Billing, Pricing, and Support (12%)

Notice that Security + Cloud Technology + Compliance is 64% of the exam. If you have one weekend before the test and you've been ignoring those domains, that's where you focus. Billing is the smallest slice but also the easiest to score on, so don't skip it — it's free points.

The exam is conceptual. There's no command line, no architecture diagrams to draw, no scenario where you need to know Lambda's exact memory limits. It tests whether you know what AWS services exist, what they're for, and what the broad pricing and shared-responsibility model looks like.

Week 1: vocabulary and the console

The first week is unglamorous. You're learning the names of 30+ services and what they do at a one-sentence level. EC2 is virtual machines. S3 is object storage. IAM is identity. Lambda is functions-as-a-service. RDS is managed relational databases. DynamoDB is managed NoSQL. Etc.

What to do this week:

1. Sign up for AWS Skill Builder's CLF-C02 learning plan. The free track is enough — you don't need the paid subscription for this exam. Watch the "AWS Cloud Practitioner Essentials" course (about 6 hours total). Don't take notes yet. Just absorb the names.
2. Open a Free Tier AWS account if you don't have one. Don't put a payment method in unless you have to. Click around. Open the EC2 console. Open the S3 console. Open IAM. You're not building anything; you're getting comfortable with the navigation.
3. End of week 1: take a free cold practice test (the official one from Skill Builder, or anyone's — accuracy doesn't matter yet). Expect 40–50%. That's normal. The point is to see what categories of questions you can't even read yet.

If you finish the Skill Builder content in three days, don't speed-run forward. Use the extra time to actually launch an EC2 instance, upload a file to S3, and create an IAM user with read-only permissions. That hour of clicking will save you ten hours of memorization later.

Week 2: the core services in depth

This is where most of the points are won. The "Cloud Technology and Services" domain (34% of the exam) is where AWS asks "which service would you use to..." and gives you four options. Knowing the service catalog cold is the only way to answer these reliably.

Categories to drill, in priority order:

Compute: EC2, Lambda, Elastic Beanstalk, ECS/Fargate at the highest level, Lightsail. Know the difference between EC2 (you manage the OS), Lambda (you give them code, they run it), Beanstalk (PaaS), and Lightsail (small simple workloads). The exam likes "least operational overhead" questions where Lambda or Beanstalk is the answer.

Storage: S3 (and the storage classes — Standard, Standard-IA, One Zone-IA, Glacier Instant/Flexible/Deep Archive, Intelligent-Tiering), EBS, EFS, FSx. Memorize the S3 class table. You'll see it on the exam.

Database: RDS, Aurora, DynamoDB, ElastiCache, Redshift. Know which is relational and which isn't. Know that DynamoDB is NoSQL key-value, and Redshift is a data warehouse.

Networking: VPC, Subnets, Route 53 (DNS), CloudFront (CDN), API Gateway, Direct Connect, Site-to-Site VPN. You don't need deep networking knowledge — just what each service is for.

Identity and security: IAM users vs roles vs groups, MFA, KMS, Secrets Manager, Shield, WAF, GuardDuty, Inspector, Macie. The exam loves to test whether you can distinguish the security services. Macie is for finding sensitive data in S3. GuardDuty is threat detection. Inspector is vulnerability scanning. Don't mix them up.

A specific tip: build a one-page cheat sheet of services where you write "X is for Y." One sentence each. Print it. Stare at it during week 3. Most CLF-C02 failures I've seen come from candidates who watched 20 hours of video but couldn't tell you in a sentence what AWS Config does (it tracks configuration changes for compliance auditing).

Week 3: hands-on plus the boring domains

By week 3 you should be in the AWS console at least twice a week, doing small concrete tasks. Suggested labs:

• Launch an EC2 instance with a security group that only allows SSH from your IP. SSH in. Stop the instance. Note that you stop being charged for compute but still pay for the EBS volume. This is a billing exam question waiting to happen.
• Create an S3 bucket. Upload a file. Make it public via a bucket policy. Then turn on Block Public Access and watch the policy break. Now you understand why S3 misconfigurations make the news.
• Create two IAM users, one with AdministratorAccess and one read-only. Log in as each. Try to do things. Get denied. This single exercise teaches you 80% of what CLF-C02 asks about IAM.
• Open Cost Explorer. Look at your current spend (probably $0–$3). Set up a billing alarm at $5 via CloudWatch.

Then knock out the boring domains. The Billing, Pricing, and Support domain (12%) is reliably scoreable points if you memorize a few specific things:

• The four AWS Support plans: Basic (free), Developer ($29/mo), Business ($100/mo or 10% of bill, whichever is higher), Enterprise On-Ramp ($5,500/mo+), Enterprise ($15,000/mo+). Know which support plans give you a Technical Account Manager (TAM) — only Enterprise On-Ramp and Enterprise.
• AWS Organizations and consolidated billing.
• Savings Plans vs Reserved Instances vs Spot vs On-Demand. The exam asks "you have a steady workload that runs 24/7 — which pricing model?" and you need to recognize Savings Plans / RI as the answer over Spot.
• AWS Pricing Calculator vs Total Cost of Ownership (TCO).

Compliance and Well-Architected: know that AWS publishes the Shared Responsibility Model (you secure what's in the cloud, AWS secures the cloud itself), and the six pillars of Well-Architected (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability). The sustainability pillar was added in 2021, and it shows up in newer questions.

Week 4: practice exams and gap-fill

This is the most important week. Stop watching videos. Start drilling questions.

Take a full-length timed practice exam at the start of week 4. Use the CLF-C02 question bank on CertLabPro or any reputable source. Score honestly under exam conditions — no pausing, no looking things up. If you score above 75%, you're ready and can schedule the real exam for the end of the week. If you score 65–75%, study the gaps for three more days and retake. If you score below 65%, push the exam another week. Failing costs $100 and a 14-day cooldown — much worse than spending another week studying.

What "studying the gaps" actually means: every question you got wrong, write down which service or concept you didn't know. Patterns will emerge. Almost everyone has a weak spot in AWS Organizations, the security services, or the support plan tiers. Drill that specific area for two days, then retake.

Schedule the exam through Pearson VUE for an in-person testing center if there's one near you. Online proctoring works but is finicky — if your webcam dies or your room lighting changes, you can fail check-in and lose your slot. In-person is more reliable.

How you know you're ready

Two consecutive timed practice exams above 80% with explanations read on every wrong answer. That's the bar. Not "I feel ready." Not "I've watched all the videos." Score-based readiness is the only honest signal.

Pass it, take a week off, then decide what's next. CLF-C02 isn't a destination — it's the on-ramp to SAA-C03, AIF-C01, or DVA-C02 depending on what you actually want to do. Most of the candidates I've seen go on to SAA-C03 within six months, and the foundational vocabulary makes that exam significantly less painful than going in cold.