Thursday, 19 February 2026

AWS Cloud Practitioner — Top 55 Must-Know Points (CLF-C02)

 


56. AWS Control Tower



Multi-account setup with guardrails (best practice governance).



57. AWS Landing Zone



Initial secure enterprise account blueprint (older concept).



58. Multi-AZ vs Multi-Region



Multi-AZ → high availability

Multi-Region → disaster recovery



59. AWS Backup Vault Lock



Prevents backups from being deleted (ransomware protection).



60. AWS Elastic Disaster Recovery (DRS)



Fast recovery of servers from on-prem/AWS to AWS.



61. AWS Migration Hub



Central place for migration tracking.



62. AWS Application Migration Service (MGN)



Lift-and-shift migration tool.



63. AWS Database Migration Service (DMS)



Move databases between engines (e.g., Oracle → Aurora).



64. Amazon Aurora Serverless v2



Auto-scales instantly, SQL-compatible.



65. Amazon QLDB



Immutable ledger database (tamper-proof log).



66. Amazon Neptune



Graph database for relationships (social graphs).



67. Amazon OpenSearch Service



Search, logs, analytics (replacement for ElasticSearch).



68. AWS Step Functions



Serverless orchestration of Lambda / SQS / APIs (workflow automation).



69. AWS Batch



Run large batch computing workloads without managing servers.



70. AWS Glue



Serverless ETL service for data processing (data catalog).



71. Amazon Athena



Query S3 data using SQL — serverless analytics.



72. Amazon QuickSight



Visualization and BI dashboards.



73. Amazon Kinesis



Real-time data streaming analytics.



74. Amazon EMR



Big data processing (Spark, Hadoop, Hive on AWS).



75. AWS IQ



Hire certified AWS experts for on-demand work.



76. AWS CodeCommit



Private Git repositories service.



77. AWS CodeBuild



Fully managed CI build service.



78. AWS CodeDeploy



Deploy to EC2, Lambda, on-prem servers.



79. AWS CodePipeline



Orchestrate CI/CD pipelines.



80. AWS AppRunner



Easy way to run containerized applications (fully managed).



81. AWS Elastic Beanstalk



Deploy applications without managing servers (PaaS).



82. AWS Amplify



Frontend/mobile app hosting + backend APIs + Auth.



83. AWS GameLift



Deploy and scale multiplayer game servers.



84. AWS IoT Core



Connect and manage IoT devices securely.



85. AWS Greengrass



Run AWS lambda + ML on edge (IoT gateway).






86. IAM Policies



JSON format, Allow/Deny rules, identity-based + resource-based.



87. IAM Permission Boundaries



The maximum allowed permissions you can give to a user/role.



88. IAM Access Analyzer



Detects public or cross-account access to resources.



89. AWS GuardDuty



Threat detection using machine learning.



90. AWS Macie



Finds and protects sensitive data in S3 (PII detection).



91. AWS Detective



Investigates security incidents using AI.



92. Security Groups



Stateful firewall for EC2 instances.



93. NACL (Network ACL)



Stateless layer of VPC security.



94. VPC Peering



Connect VPCs privately (one-to-one).



95. AWS Transit Gateway



Central hub to connect thousands of VPCs.



96. VPC Endpoints



Private connections to AWS services (Gateway & Interface endpoints).



97. Direct Connect



Dedicated fiber connection from office/datacenter to AWS.



98. AWS Certificate Manager (ACM)



Free SSL/TLS certificates.



99. AWS Secrets Manager



Store & rotate database/API passwords.



100. AWS Parameter Store



Configuration storage (cheaper; used by SSM).



101. Public vs Private Subnet



Public — has Internet Gateway

Private — uses NAT



102. Route Tables



Decide how traffic flows between subnets.



103. NAT Gateway



Let private instances access internet securely.



104. Internet Gateway



Allow public access for EC2.



105. AWS Global Infrastructure Benefits



Fault tolerance, availability, low latency.



106. Availability Zones Failure Independence



One AZ failure won’t affect others.



107. Edge Caching in CloudFront



Improves speed, reduces origin load.



108. S3 Object Lock



Protects objects from being deleted.



109. Multi-Factor Authentication Delete (MFA Delete)



Extra layer for S3 bucket deletes.



110. AWS Resilience Hub



Evaluates workload resilience automatically.





111. AWS Support Plans



Basic, Developer, Business, Enterprise On-Ramp, Enterprise.



112. Business Plan Features



24/7, Trusted Advisor full checks, fast response.



113. Enterprise Support Features



Architect, TAM, concierge billing.



114. AWS Cost Anomaly Detection



Alerts unusual usage spikes.



115. AWS Savings Plans



Cheaper compute commitment (1 or 3 years).



116. Compute Savings Plan



Applies to EC2 + Lambda + Fargate automatically.



117. EC2 Instance Savings Plan



Only EC2 instance type/region.



118. Spot Instances Best Use Cases



Batch jobs, flexible workloads.



119. Reserved Instances



Commit capacity for discounts.



120. AWS TCO Calculator



Compares on-prem cost vs cloud.



121. AWS Pricing Calculator



Estimate cost of any AWS architecture.



122. AWS Billing Alarms (CloudWatch)



Trigger alerts when cost exceeds threshold.



123. AWS Glue Data Catalog



Central metadata for S3 + analytics.



124. S3 Replication



Cross-region or same-region replication.



125. S3 Pre-Signed URLs



Temporary, secure URL for downloads/uploads.



126. Athena Partitioning



Faster/cheaper queries by splitting folders.



127. Redshift Spectrum



Query S3 data from Redshift.



128. Kinesis Firehose



Real-time ingestion → S3/Redshift.



129. Kinesis Data Streams



Real-time event pipeline.



130. Amazon Polly



Text-to-speech ML service.



131. Amazon Rekognition



Image recognition & video analysis.



132. Amazon Textract



Extract text from scanned documents.



133. Amazon SageMaker



End-to-end ML model building.



134. AWS Snowcone



Small portable device (8 TB) for edge data collection.



135. AWS Compute Optimizer



Suggests cost/performance EC2 recommendations.







No comments:

Post a Comment

AWS Cloud Practitioner — Top 76 Must-Know Points (CLF-C02)

  236. Edge Locations Count CloudFront POPs worldwide (exam sometimes asks conceptually). 237. Regional Edge Caches Bigger caches ...