AWS Certified Cloud Practitioner (CLF-C01)

Domain 1: Cloud Concepts

Define the AWS Cloud and its value proposition

• Define the benefits of the AWS cloud including:

• Security

• Reliability

• High Availability

• Elasticity

• Agility

• Pay-as-you go pricing

• Scalability

• Global Reach

• Economy of scale

• Explain how the AWS cloud allows users to focus on business value

• Shifting technical resources to revenue-generating activities as opposed to managing infrastructure

 

Identify aspects of AWS Cloud economics

• Define items that would be part of a Total Cost of Ownership proposal

• Understand the role of operational expenses (OpEx)

• Understand the role of capital expenses (CapEx)

• Understand labor costs associated with on-premises operations

• Understand the impact of software licensing costs when moving to the cloud

• Identify which operations will reduce costs by moving to the cloud

• Right-sized infrastructure

• Benefits of automation

• Reduce compliance scope (for example, reporting)

• Managed services (for example, RDS, ECS, EKS, DynamoDB)

 

Explain the different cloud architecture design principles

• Explain the design principles

• Design for failure

• Decouple components versus monolithic architecture

• Implement elasticity in the cloud versus on-premises

• Think parallel

 

Domain 2: Security and Compliance

• Define the AWS shared responsibility model

• Recognize the elements of the Shared Responsibility Model

• Describe the customer’s responsibly on AWS

• Describe how the customer’s responsibilities may shift depending on the service used (for example with RDS, Lambda, or EC2)

• Describe AWS responsibilities

 

Define AWS Cloud security and compliance concepts

• Identify where to find AWS compliance information

• Locations of lists of recognized available compliance controls (for example, HIPPA, SOCs)

• Recognize that compliance requirements vary among AWS services

• At a high level, describe how customers achieve compliance on AWS

• Identify different encryption options on AWS (for example, In transit, At rest)

• Describe who enables encryption on AWS for a given service

• Recognize there are services that will aid in auditing and reporting

• Recognize that logs exist for auditing and monitoring (do not have to understand the logs)

• Define Amazon CloudWatch, AWS Config, and AWS CloudTrail

• Explain the concept of least privileged access

 

Identify AWS access management capabilities

• Understand the purpose of User and Identity Managemen

• Access keys and password policies (rotation, complexity)

• Multi-Factor Authentication (MFA)

• AWS Identity and Access Management (IAM)

• Groups/users

• Roles

• Policies, managed policies compared to custom policies

• Tasks that require use of root accounts

 

Protection of root accounts

• Identify resources for security support

• Recognize there are different network security capabilities

• Native AWS services (for example, security groups, Network ACLs, AWS WAF)

• 3rd party security products from the AWS Marketplace

• Recognize there is documentation and where to find it (for example, best practices, whitepapers, official documents)

• AWS Knowledge Center, Security Center, security forum, and security blogs

• Partner Systems Integrators

• Know that security checks are a component of AWS Trusted Advisor

 

Domain 3: Technology

• Define methods of deploying and operating in the AWS Cloud

• Identify at a high level different ways of provisioning and operating in the AWS cloud

• Programmatic access, APIs, SDKs, AWS Management Console, CLI, Infrastructure as Code

• Identify different types of cloud deployment models

• All in with cloud/cloud native

• Hybrid

• On-premises

• Identify connectivity options

• VPN

• AWS Direct Connect

• Public internet