AWS Cloud Practitioner Exam Prep Study Guide

Amazon Web Services Study Guide

Use this as a compact, beginner-friendly review page for core AWS concepts, services, security, and exam-style practice.

1. What is AWS?

AWS is Amazon’s cloud platform that provides on-demand computing, storage, networking, security, and analytics services.

AWS helps organizations scale quickly while paying for what they use instead of buying hardware up front.

2. Why cloud matters

Cloud computing helps teams move faster, improve resilience, and reduce infrastructure overhead.

The main advantages are elasticity, scalability, cost efficiency, global reach, and faster deployment.

3. Core AWS concepts

Regions, Availability Zones, and edge locations are important foundations for designing reliable services.

A region is a geographic area, an Availability Zone is an isolated data center group, and edge locations improve content delivery and low-latency access.

Key AWS Services

  • EC2: Virtual servers in the cloud.
  • S3: Object storage for files, backups, and static websites.
  • RDS: Managed relational databases.
  • Lambda: Serverless compute for event-driven code.
  • CloudFront: Content delivery network for fast global distribution.

Quick Checklist

Progress: 0/5 completed

Mini Quiz

Work through five questions at a time. Your score updates as you answer.

Related Dictionary

Core Cloud Terms

  • Region: A geographic location where AWS has data centers.
  • Availability Zone: An isolated zone within a region designed for redundancy.
  • Elasticity: The ability to scale resources up or down automatically.
  • Scalability: The ability to handle growth by adding capacity.

Security Terms

  • IAM: Identity and Access Management for users, groups, and permissions.
  • Least Privilege: Granting only the permissions needed to perform a task.
  • Shared Responsibility Model: AWS handles some security of the cloud, while customers handle security in the cloud.
  • Encryption: Protecting data using cryptographic methods.

Cost and Operations

  • Pay-as-you-go: Paying only for the resources you consume.
  • Auto Scaling: Automatically adjusting capacity based on demand.
  • CloudWatch: Monitoring and observability service for AWS resources.
  • Trusted Advisor: Tool that provides best practice recommendations.

Beginner Tips

Massive AWS Services Reference

A broad overview of major AWS services grouped by purpose, with notes on special cases and limitations where they matter.

Compute

  • EC2 – Virtual machines; choose instance type based on CPU, memory, and workload.
  • Lambda – Serverless functions; ideal for event-driven tasks and short workloads.
  • Elastic Beanstalk – Platform as a Service for deploying and managing apps.
  • Lightsail – Simple VPS-style hosting for small projects and learning.
  • ECS – Container orchestration for Docker-based apps.
  • EKS – Managed Kubernetes service for containerized workloads.
  • Batch – Runs large-scale batch computing jobs efficiently.
  • Fargate – Serverless compute for containers.

Storage

  • S3 – Object storage; highly durable and scalable for files, backups, and websites.
  • Glacier – Low-cost archival storage for rarely accessed data.
  • EFS – Shared file storage for Linux-based workloads.
  • FSx – Managed file systems, including Windows File Server and Lustre options.
  • Backup – Centralized backup management for AWS resources.
  • Snowball – Physical data transfer appliance for large-scale migration.
  • Snowcone – Small edge device for secure data transfer.

Databases

  • RDS – Managed relational databases such as MySQL, PostgreSQL, SQL Server, and MariaDB.
  • DynamoDB – Managed NoSQL key-value database with low-latency access.
  • ElastiCache – Managed in-memory caching, often Redis or Memcached.
  • Neptune – Managed graph database service.
  • Redshift – Data warehousing for analytics and reporting.
  • DocumentDB – Managed MongoDB-compatible database.
  • Timestream – Time series database for IoT and telemetry workloads.

Networking & Content Delivery

  • VPC – Virtual private cloud; the foundation of private networking in AWS.
  • Route 53 – Managed DNS service.
  • CloudFront – CDN for fast global delivery of static and dynamic content.
  • API Gateway – Create, publish, and manage APIs.
  • ELB – Load balancers for spreading traffic across targets.
  • Direct Connect – Dedicated network connection from on-premises to AWS.
  • Transit Gateway – Centralized connectivity between VPCs and on-prem networks.
  • Global Accelerator – Improves availability and performance for global applications.

Security, Identity & Compliance

  • IAM – Users, groups, roles, and permissions.
  • MFA – Multi-factor authentication for stronger account security.
  • GuardDuty – Threat detection using continuous monitoring.
  • Inspector – Vulnerability assessment for EC2 and container workloads.
  • WAF – Web application firewall to protect web applications.
  • Shield – DDoS protection service.
  • KMS – Key management for encryption.
  • Secrets Manager – Secure storage and rotation of secrets.
  • CloudTrail – Auditing and logging of account activity.
  • Config – Tracks configuration changes and compliance status.

Monitoring, Logging & Operations

  • CloudWatch – Metrics, logs, alarms, and dashboards.
  • CloudFormation – Infrastructure as code using templates.
  • Systems Manager – Operational management of instances and applications.
  • OpsWorks – Configuration management and application deployment.
  • Trusted Advisor – Best-practice recommendations around cost, performance, security, and fault tolerance.
  • Control Tower – Governance and multi-account setup for enterprises.

Analytics & Data

  • EMR – Managed Hadoop framework for big data processing.
  • Kinesis – Real-time data streaming and processing.
  • Glue – Serverless data integration and ETL service.
  • QuickSight – Business intelligence and visualization service.
  • Athena – Serverless query service for data in S3 using SQL.
  • Lake Formation – Helps build secure data lakes.

Developer Tools

  • CodeCommit – Managed source control.
  • CodeBuild – Build and test service.
  • CodePipeline – Continuous delivery pipeline.
  • CodeDeploy – Automated application deployments.
  • CodeArtifact – Package repository management.
  • Cloud9 – Cloud-based integrated development environment.

Machine Learning & AI

  • Rekognition – Image and video analysis.
  • Comprehend – Natural language processing.
  • Polly – Text-to-speech.
  • Lex – Chatbot and conversational interface service.
  • PartyRock – AWS-branded AI app-building experience built on Amazon Bedrock; useful for rapid prototyping with prompts and simple apps.
  • SageMaker – Build, train, and deploy machine learning models.
  • Transcribe – Speech-to-text.

Application Integration

  • SQS – Managed message queue for decoupling services.
  • SNS – Pub/sub notifications and fan-out messaging.
  • EventBridge – Event bus for routing events across applications.
  • Step Functions – Orchestrates serverless workflows.
  • MQ – Managed message broker for Apache ActiveMQ.

Migration & Transfer

  • DMS – Database migration service.
  • SMS – Server migration service.
  • Transfer Family – Managed file transfer services.
  • DataSync – Sync data between on-prem and AWS storage.

Special-Case Notes

  • Amazon Chime – Collaboration and communications service; not a core compute or storage service.
  • WorkSpaces – Managed virtual desktop infrastructure for Windows or Linux desktops.
  • WorkDocs – Secure content collaboration and document storage.
  • Outposts – AWS infrastructure deployed on-premises for edge and hybrid workloads.
  • IoT Core – Connects and manages devices at scale.
  • AppStream 2.0 – Streaming desktop applications to users.
  • Amazon Connect – Cloud contact center service.
  • MediaConvert / MediaLive / MediaStore – Media processing and streaming services.
  • SES – Simple Email Service for sending emails programmatically.
  • Pinpoint – Customer engagement and user campaign management.

Oddball / Constraint Notes

  • FSx for Windows File Server – Requires Windows compatibility and is intended for SMB-based shared storage.
  • FSx for Lustre – Designed for high-performance computing and Linux workloads.
  • EC2 Windows instances – Need Windows licensing considerations and are different from Linux-based AMIs.
  • S3 – Not a traditional file system; it is object storage and is not ideal for low-latency block storage.
  • EFS – Best for shared Linux file systems, not for Windows-native SMB file sharing by default.
  • RDS – Managed databases, but you still manage schema, users, and application-level tuning.
  • Lambda – Best for short-lived, event-driven functions, not long-running server processes.
  • Lightsail – Simpler than EC2 but less flexible for advanced networking and scaling scenarios.