AWS Certification & Interview Prep
A free, structured way to prepare for the AWS Certified Cloud Practitioner (CLF-C02) and Solutions Architect – Associate (SAA-C03) exams and AWS interviews — 179+ authored lessons across 36 services, deterministic practice questions, architecture scenarios and a mock interviewer. This is study material, not exam dumps, and never a pass guarantee.
Certifications covered
AWS Certified Cloud Practitioner
CLF-C02 · foundational
The foundational certification. Validates a high-level understanding of the AWS Cloud — core services, security and compliance, pricing and support — for anyone working with or around AWS. No deep technical or architecture experience assumed.
Exam domains
- • Cloud Concepts
- • Security and Compliance
- • Cloud Technology and Services
- • Billing, Pricing, and Support
AWS Certified Solutions Architect – Associate
SAA-C03 · associate
The associate architecture certification. Validates the ability to design solutions on AWS that are secure, resilient, high-performing and cost-optimized, using a broad range of AWS services and the AWS Well-Architected Framework.
Exam domains
- • Design Secure Architectures
- • Design Resilient Architectures
- • Design High-Performing Architectures
- • Design Cost-Optimized Architectures
AWS services & interview topics
Each service has authored lessons, practice questions and interview questions. Services with the deepest coverage have their own guide:
A managed front door for HTTP/REST and WebSocket APIs — throttling, auth, caching and integration with Lambda/services.
AWS’s MySQL/PostgreSQL-compatible relational engine with a distributed, self-healing storage layer.
Automatically adds/removes EC2 instances to match demand, keeping a desired capacity across AZs.
A global content delivery network (CDN) that caches content at edge locations near users.
Observability — metrics, logs, alarms and dashboards for AWS resources and applications.
A fully managed, serverless key-value and document NoSQL database with single-digit-millisecond latency at scale.
Network-attached block volumes for EC2 — like a virtual hard disk, with snapshots to S3.
Resizable virtual machines (instances) with a wide choice of families, sizes and purchasing options.
A managed, elastic, shared NFS file system that many EC2 instances (or containers) can mount at once.
Managed in-memory caching (Redis and Memcached) for microsecond reads.
Distributes incoming traffic across targets in multiple AZs — Application (L7), Network (L4) and Gateway load balancers.
A serverless event bus that routes events from AWS services, SaaS and your apps to targets using rules.
Controls who (identities) can do what (permissions) on which AWS resources.
Create and control encryption keys used to encrypt data across AWS services, with audit via CloudTrail.
Run code in response to events without provisioning servers; scales automatically and you pay per request/duration.
Managed relational databases (PostgreSQL, MySQL, MariaDB, Oracle, SQL Server) with backups, patching and Multi-AZ.
Managed DNS and domain registration with health checks and traffic-routing policies.
Durable, virtually unlimited object storage organized as buckets and objects, accessed over HTTPS.
Pub/sub messaging that fans out notifications to many subscribers (SQS, Lambda, HTTP, email, SMS).
A managed message queue for decoupling producers and consumers (Standard and FIFO queues).
Your own isolated virtual network in AWS — subnets, route tables, gateways and firewalls.
Centralizes and automates backups across AWS services: backup plans, vaults, locks and copies in other Regions or accounts.
Infrastructure as code — define AWS resources in templates and deploy them as managed stacks.
Records account activity and API calls for governance, auditing and troubleshooting.
User sign-up/sign-in and access control for web/mobile apps (user pools) plus federated identities.
Records how your resources are configured over time and flags the ones that break your rules.
A managed container image registry integrated with ECS/EKS and IAM.
Runs Docker containers at scale; can run on EC2 or serverless with Fargate.
Continuous threat detection that analyzes AWS logs with threat intelligence and machine learning, and reports findings.
Manages many AWS accounts as one organization: groups of accounts, central policies and one bill.
Stores, rotates and retrieves secrets (DB credentials, API keys) without hard-coding them.
Managed DDoS protection: Shield Standard for every account automatically, Shield Advanced as a subscription for more.
Encrypted connections into AWS: Site-to-Site VPN between your network and your VPCs, and Client VPN for individual users.
A web application firewall that inspects HTTP(S) requests to CloudFront, load balancers and APIs and allows, blocks or counts them.
Ingests and processes large real-time data streams for analytics and event pipelines.
Low-cost S3 storage classes for archival data with varying retrieval times.
What’s included
- • Authored lessons grounded in official AWS documentation
- • Deterministic practice & certification questions
- • Architecture scenarios you reason through
- • A mock AWS interviewer with follow-ups and a scorecard
- • Service comparisons (e.g. RDS Multi-AZ vs Read Replica)
- • Honest curriculum-coverage tracking — never a pass prediction
See also the System Design practice tool and Frontend Interview Prep.