Service-matching drill
Read the job, pick the service. 97 services from the exam guide’s in-scope list, with close choices from the same category.
Services you know
0of 97
Which service does this job?
Store any amount of files as objects, reachable over the internet
All 97 services
Compute and containers
| Service | What it does |
|---|---|
| Amazon EC2 | Virtual servers (instances) in many sizes and families. You manage the guest operating system and what runs on it. |
| AWS Lambda | Serverless functions that run in response to events. You pay for the compute time your code uses. |
| AWS Fargate | A serverless compute engine for containers on Amazon ECS and Amazon EKS. |
| Amazon ECS | Amazon Elastic Container Service: AWS's container orchestration service. |
| Amazon EKS | Amazon Elastic Kubernetes Service: managed Kubernetes. |
| Amazon ECR | Amazon Elastic Container Registry: a managed registry for container images. |
| AWS Elastic Beanstalk | Deploys and runs web applications on AWS resources it provisions for you. |
| Amazon Lightsail | Easy virtual servers, storage and networking bundled into simple plans. |
| AWS Batch | Plans, schedules and runs batch jobs across compute resources it manages. |
| AWS Outposts | AWS-managed racks and servers installed on premises for a hybrid setup. |
Storage
| Service | What it does |
|---|---|
| Amazon S3 | Object storage with storage classes for frequent, infrequent and archive access. |
| Amazon S3 Glacier | Archive storage classes in Amazon S3 for long-term retention. |
| Amazon EBS | Amazon Elastic Block Store: block volumes that persist independently of the instance's life. |
| Amazon EFS | Amazon Elastic File System: a managed, elastic NFS file system. |
| Amazon FSx | Fully managed third-party file systems, such as Windows File Server and Lustre. |
| AWS Storage Gateway | Hybrid storage that connects on-premises applications to storage in AWS. |
| AWS Backup | Policy-based backup for services such as EBS, RDS, DynamoDB and EFS. |
| AWS Elastic Disaster Recovery | Continuously replicates servers so they can be recovered quickly in AWS. |
Databases
| Service | What it does |
|---|---|
| Amazon RDS | Amazon Relational Database Service: AWS handles provisioning, patching and backups. |
| Amazon Aurora | A relational database engine built for the cloud, offered through Amazon RDS. |
| Amazon DynamoDB | A serverless NoSQL key-value and document database. |
| Amazon ElastiCache | Managed in-memory caching compatible with Redis OSS, Valkey and Memcached. |
| Amazon Neptune | A managed graph database. |
| Amazon DocumentDB | A managed JSON document database with MongoDB compatibility. |
| AWS Database Migration Service | AWS DMS migrates and replicates data between databases. |
Networking and content delivery
| Service | What it does |
|---|---|
| Amazon VPC | Amazon Virtual Private Cloud: subnets, route tables, gateways and security controls. |
| Amazon CloudFront | A content delivery network that serves content from edge locations. |
| Amazon Route 53 | A DNS service with domain registration, health checks and routing policies. |
| AWS Direct Connect | A dedicated network connection that does not travel over the public internet. |
| AWS Site-to-Site VPN | IPsec VPN connections between your network and your VPCs. |
| AWS Client VPN | A managed client-based VPN for individual users. |
| AWS Transit Gateway | A network transit hub that replaces many point-to-point connections. |
| AWS Global Accelerator | Improves availability and performance using the AWS global network and edge locations. |
| Amazon API Gateway | A managed service for creating and running APIs at any scale. |
| AWS PrivateLink | Private connectivity between VPCs and services through interface endpoints. |
Security, identity and compliance
| Service | What it does |
|---|---|
| AWS Identity and Access Management | IAM: authentication and authorization for AWS resources. |
| AWS IAM Identity Center | Central workforce access to multiple accounts and applications. |
| Amazon Cognito | User identity for web and mobile apps, including social sign-in. |
| AWS Key Management Service | AWS KMS: managed encryption keys integrated with many services. |
| AWS CloudHSM | Single-tenant hardware security modules in the AWS Cloud. |
| AWS Certificate Manager | ACM: public and private certificates for AWS services. |
| AWS Secrets Manager | Stores, retrieves and rotates secrets such as credentials and API keys. |
| AWS WAF | A web application firewall with rules for HTTP and HTTPS requests. |
| AWS Shield | DDoS protection; Shield Standard applies automatically, Shield Advanced adds more. |
| AWS Firewall Manager | Central management of AWS WAF, Shield Advanced and security group rules. |
| Amazon GuardDuty | Intelligent threat detection using logs such as CloudTrail, VPC Flow Logs and DNS logs. |
| Amazon Inspector | Automated vulnerability management for workloads. |
| Amazon Macie | Uses machine learning and pattern matching to find sensitive data in Amazon S3. |
| AWS Security Hub | Aggregates and prioritizes security findings across AWS services and accounts. |
| Amazon Detective | Analyzes and visualizes data to help investigate security issues. |
| AWS Artifact | On-demand access to AWS security and compliance reports and agreements. |
Management and governance
| Service | What it does |
|---|---|
| Amazon CloudWatch | Monitoring and observability: metrics, logs, alarms and dashboards. |
| AWS CloudTrail | Logs account activity and API calls for auditing. |
| AWS Config | Records configuration history and evaluates compliance with rules. |
| AWS CloudFormation | Provisions AWS resources repeatably from templates. |
| AWS Organizations | Groups accounts, applies policies and consolidates billing. |
| AWS Control Tower | Sets up a landing zone with guardrails across accounts. |
| AWS Systems Manager | Operations hub for patching, running commands and storing parameters. |
| AWS Trusted Advisor | Inspects your environment and recommends improvements against best practices. |
| AWS Health Dashboard | Shows the health of AWS services and events that affect your account. |
| AWS Compute Optimizer | Recommends optimal resources from your utilization data. |
| AWS Well-Architected Tool | Reviews workloads against AWS best practices and tracks improvements. |
| AWS Auto Scaling | Scales resources to match demand across services. |
Analytics
| Service | What it does |
|---|---|
| Amazon Athena | Serverless interactive queries on data in Amazon S3. |
| Amazon Kinesis | Ingests and analyzes real-time data streams such as clickstreams and logs. |
| AWS Glue | Serverless data integration: data catalog and ETL. |
| Amazon Redshift | A managed data warehouse for analytics with SQL. |
| Amazon Quick Sight | Business intelligence: interactive dashboards and reports. |
| Amazon EMR | A managed big data platform for open-source frameworks. |
| Amazon OpenSearch Service | Managed OpenSearch clusters for search and log analytics. |
Machine learning and AI
| Service | What it does |
|---|---|
| Amazon SageMaker AI | A managed service for the whole machine learning workflow. |
| Amazon Lex | Conversational interfaces with speech recognition and language understanding. |
| Amazon Polly | Text to speech. |
| Amazon Transcribe | Automatic speech recognition. |
| Amazon Translate | Neural machine translation. |
| Amazon Comprehend | Natural language processing to find insights in text. |
| Amazon Rekognition | Image and video analysis. |
| Amazon Textract | Pulls printed text, handwriting and data from documents. |
| Amazon Q | A generative AI-powered assistant. |
Integration, business and end-user services
| Service | What it does |
|---|---|
| Amazon SQS | Amazon Simple Queue Service: managed message queues for decoupling. |
| Amazon SNS | Amazon Simple Notification Service: publish and subscribe messaging and notifications. |
| Amazon EventBridge | A serverless event bus for event-driven applications. |
| AWS Step Functions | Orchestrates services into workflows with state, retries and branching. |
| Amazon SES | Amazon Simple Email Service: sends and receives email. |
| Amazon Connect | An omnichannel cloud contact center. |
| Amazon WorkSpaces | Managed virtual desktops. |
| Amazon AppStream 2.0 | Streams desktop applications without a full desktop. |
| AWS Amplify | Tools and hosting for web and mobile apps backed by AWS. |
| AWS IoT Core | Connects IoT devices securely to the cloud. |
| AWS CodePipeline | Continuous delivery pipelines. |
| AWS CodeBuild | A managed continuous integration build service. |
| AWS X-Ray | Traces and analyzes requests across application components. |
Cost management and support
| Service | What it does |
|---|---|
| AWS Budgets | Custom cost and usage budgets with alerts. |
| AWS Cost Explorer | Views and analyzes costs and usage over time. |
| AWS Pricing Calculator | Estimates costs for AWS services before you use them. |
| AWS Cost and Usage Reports | Detailed cost and usage data delivered to Amazon S3. |
| AWS Marketplace | A catalog of third-party software, data and services. |
Know the services, then the scenarios
The free diagnostic has 15 questions across all four domains and takes 20 minutes. No account. You get your score in each domain and a short lesson on the one to fix first.
Questions people ask
How many AWS services do you need to know for Cloud Practitioner?
The CLF-C02 exam guide lists the in-scope services by category and says the list is not exhaustive. This drill covers 97 of them, the ones the exam's task statements name or that come up most in its scenarios.
What kind of service questions does the exam ask?
Mostly a short scenario and a choice of services: which one fits the job. Knowing what each service is for matters more than knowing how to configure it.
What is the best way to learn the services?
A few minutes of recall every day. In the drill, a service you miss comes back after 3 other cards, and one you know comes back after 1, 3, 7, 16 and 35 days.
Does the drill need an account?
No. Your progress stays in this browser on this device.