- What Domain 3 Actually Covers
- Compute Services You Must Know
- Storage and Database Services
- Networking and Content Delivery
- AI, Machine Learning, and Analytics Services
- Deployment, Management, and Monitoring
- How Domain 3 Questions Are Written
- A Domain-Weighted Study Schedule
- Frequently Asked Questions
- Domain 3 is the single heaviest domain at 34% of your CLF-C02 score - mastering it is non-negotiable.
- The exam has 65 questions total (50 scored); roughly 17 scored questions come from this domain alone.
- No per-domain minimum exists - compensatory scoring rewards deep knowledge of heavy domains like Domain 3.
- Questions test conceptual understanding of AWS services, not hands-on configuration or code.
What Domain 3 Actually Covers
At 34%, Cloud Technology and Services is the largest single domain on the AWS Certified Cloud Practitioner exam (CLF-C02). If you are looking at all four domains together - Cloud Concepts at 24%, Security and Compliance at 30%, Cloud Technology and Services at 34%, and Billing, Pricing, and Support at 12% - this one domain outweighs every other. You can read about the full domain breakdown in our Cloud Practitioner Exam Domains 2026: Complete Guide to All 4 Content Areas, but the bottom line is clear: if your goal is a passing score of 700 on the 100-1000 scaled score, this domain has more leverage than any other.
The domain is broad by design. AWS wants to confirm that Cloud Practitioner candidates can identify the right service category for a given business scenario, understand the core purpose of flagship AWS services, and distinguish between similar offerings. The exam does not ask you to write a CloudFormation template or configure a VPC subnet mask. It asks you to recognize that Amazon VPC provides network isolation, that Amazon S3 is an object storage service, or that AWS Lambda removes the need to manage underlying server infrastructure.
The official CLF-C02 exam guide groups Domain 3 into several task statements. Candidates must be able to define AWS compute, storage, network, and database service categories; identify services for migration and transfer; recognize services for AI and machine learning; and understand the purpose of application integration services. Each of those task statements spawns multiple exam questions.
Compute Services You Must Know
Compute is where most candidates spend the most time, and for good reason - AWS offers more compute options than any other category, and the distinctions between them are a rich source of exam questions.
Core Compute Services for CLF-C02
Every candidate must be able to identify the purpose of each of these and choose the right one for a given scenario.
- Amazon EC2 - Virtual machines in the cloud; you choose the instance type, OS, and you manage patching. Useful when you need full control over the server environment.
- AWS Lambda - Serverless compute; code runs in response to events without provisioning servers. Billed per invocation and duration. Eliminates server management entirely.
- Amazon ECS / Amazon EKS - Container orchestration. ECS is AWS-native; EKS uses Kubernetes. Both let you run containerized applications at scale.
- AWS Fargate - Serverless compute engine for containers; works with ECS and EKS so you do not manage the underlying EC2 instances.
- AWS Elastic Beanstalk - Platform as a Service (PaaS) for web applications; you upload code, AWS handles provisioning, load balancing, and scaling.
- AWS Batch - Managed batch computing for large-scale jobs without managing compute clusters manually.
- Amazon Lightsail - Simplified compute for small applications, developers, and students who do not need the full EC2 feature set.
A classic CLF-C02 question style here is a scenario like: "A company wants to run code in response to file uploads without managing servers. Which service should they use?" The answer is Lambda. The distractor answers will typically include EC2 (requires server management) and Elastic Beanstalk (still provisions infrastructure). Knowing the exact differentiator - event-driven, no server management, pay-per-use - lets you eliminate wrong answers quickly.
EC2 pricing models also appear in this domain, though they overlap with Domain 4. Know that On-Demand instances have no upfront commitment, Reserved Instances offer savings for predictable workloads, Spot Instances use unused capacity at a discount with possible interruption, and Savings Plans provide flexible pricing across compute usage.
Storage and Database Services
Storage: Object, Block, and File
The exam distinguishes clearly between three storage types, and questions will describe a use case and ask which category fits.
- Amazon S3 - Object storage; flat namespace, unlimited scale, accessed via API. Best for backups, static websites, data lakes, and media files. S3 storage classes (Standard, Intelligent-Tiering, Glacier, Glacier Deep Archive) reflect cost vs. retrieval time tradeoffs.
- Amazon EBS (Elastic Block Store) - Block storage volumes attached to EC2 instances, like a hard drive. Persistent, low-latency, and tied to a single Availability Zone.
- Amazon EFS (Elastic File System) - Managed NFS file system; multiple EC2 instances can mount the same file system simultaneously. Scales automatically.
- AWS Storage Gateway - Hybrid storage service connecting on-premises environments to AWS cloud storage.
- AWS Snow Family (Snowcone, Snowball, Snowmobile) - Physical devices for transferring large amounts of data to AWS when network transfer is impractical.
Databases: Relational, NoSQL, and Specialty
Database Services on CLF-C02
Know the primary use case for each; exam questions often describe a workload and ask which database type applies.
- Amazon RDS - Managed relational database supporting MySQL, PostgreSQL, Oracle, SQL Server, and MariaDB. AWS handles patching, backups, and failover.
- Amazon Aurora - AWS-built relational database; MySQL and PostgreSQL compatible, up to 5x faster than standard MySQL. Fully managed.
- Amazon DynamoDB - Fully managed NoSQL key-value and document database. Single-digit millisecond latency at any scale. Serverless.
- Amazon ElastiCache - In-memory caching using Redis or Memcached. Reduces database load for read-heavy workloads.
- Amazon Redshift - Cloud data warehouse for analytical queries across petabytes of data. OLAP workloads, not transactional.
- Amazon Neptune - Managed graph database for applications with highly connected data (social networks, fraud detection).
- Amazon DocumentDB - MongoDB-compatible managed document database.
Networking and Content Delivery
Networking questions on the Cloud Practitioner exam test your ability to match a connectivity or content delivery requirement to the right service - not your ability to configure routing tables.
- Amazon VPC (Virtual Private Cloud) - Logically isolated section of the AWS Cloud where you launch resources. Subnets, route tables, and internet gateways live here.
- Amazon CloudFront - Content Delivery Network (CDN) that caches content at edge locations globally to reduce latency for end users.
- AWS Direct Connect - Dedicated private network connection from your data center to AWS; bypasses the public internet for consistent bandwidth and lower latency.
- Amazon Route 53 - Scalable DNS and domain registration service. Supports routing policies like latency-based, failover, and geolocation routing.
- Elastic Load Balancing (ELB) - Distributes incoming traffic across multiple targets (EC2, containers, Lambda). Application Load Balancer (ALB), Network Load Balancer (NLB), and Gateway Load Balancer are the three types.
- AWS VPN - Encrypted connection between on-premises networks and AWS over the public internet. Lower cost than Direct Connect, with less consistency.
- AWS Global Accelerator - Routes user traffic through AWS's global network backbone to improve performance and availability.
AI, Machine Learning, and Analytics Services
CLF-C02 added expanded coverage of AI and ML services compared to earlier exam versions. You do not need to understand model training at a technical level - you need to know which AWS AI service answers a given business need.
| AWS Service | Primary Use Case | Key Differentiator |
|---|---|---|
| Amazon Rekognition | Image and video analysis | Detect objects, faces, text, and activities in media |
| Amazon Comprehend | Natural language processing | Sentiment analysis, entity recognition, key phrase extraction |
| Amazon Transcribe | Speech to text | Converts audio to text; supports multiple languages |
| Amazon Polly | Text to speech | Converts text into lifelike speech |
| Amazon Translate | Language translation | Neural machine translation between languages |
| Amazon Lex | Conversational interfaces (chatbots) | Same technology as Alexa; builds voice and text bots |
| Amazon SageMaker | Build, train, deploy ML models | End-to-end ML platform for data scientists |
| Amazon Kendra | Intelligent enterprise search | ML-powered search across internal documents |
| Amazon Personalize | Personalized recommendations | Same technology behind Amazon.com recommendations |
| Amazon Athena | Query S3 data with SQL | Serverless; no infrastructure to manage |
| AWS Glue | ETL (extract, transform, load) | Managed data integration service for analytics pipelines |
| Amazon QuickSight | Business intelligence dashboards | Serverless BI tool integrated with AWS data sources |
Deployment, Management, and Monitoring
This section of Domain 3 overlaps slightly with Cloud Concepts, but here the focus is on specific AWS tools rather than broad architectural principles.
- AWS CloudFormation - Infrastructure as Code (IaC); define your entire AWS environment in a JSON or YAML template and deploy it repeatably.
- AWS CDK (Cloud Development Kit) - Define cloud infrastructure using familiar programming languages (Python, TypeScript, Java) that synthesize into CloudFormation.
- AWS Systems Manager - Operations hub for managing EC2 instances and on-premises servers at scale; includes patching, session management, and parameter storage.
- Amazon CloudWatch - Monitoring and observability service; collects metrics, logs, and events from AWS resources. Alarms trigger notifications or automated actions.
- AWS CloudTrail - Records API calls made in your AWS account; essential for governance, compliance, and security auditing.
- AWS Config - Tracks configuration changes to AWS resources over time; evaluates resources against desired configurations.
- AWS Trusted Advisor - Automated recommendations across cost optimization, security, fault tolerance, performance, and service limits.
- AWS Health Dashboard - Personalized view of AWS service health events affecting your specific account and resources.
Key Takeaway
CloudWatch monitors performance metrics and logs. CloudTrail records who did what via API calls. AWS Config tracks how resources are configured over time. These three services are frequently tested as a set, and exam questions will describe a scenario - an auditor needs a record of configuration changes - and expect you to identify Config rather than CloudWatch or CloudTrail.
Application integration services also appear here. Amazon SNS (Simple Notification Service) is a pub/sub messaging service for push notifications and fan-out architectures. Amazon SQS (Simple Queue Service) is a fully managed message queue that decouples application components. Amazon EventBridge is a serverless event bus that connects AWS services, SaaS applications, and custom applications. Knowing when to queue (SQS) versus publish (SNS) versus route events (EventBridge) is fair game on the exam.
How Domain 3 Questions Are Written
The CLF-C02 uses multiple choice (one correct answer, three distractors) and multiple response (two or more correct answers from five options) formats. There are no hands-on labs, no coding exercises, and no simulations. Understanding this format helps you study more efficiently - you are preparing to recognize correct answers, not to build infrastructure.
Domain 3 questions typically follow one of three patterns:
- Scenario-to-service mapping - "A company needs to send emails when an order ships. Which service should they use?" (Answer: Amazon SNS)
- Service distinction - "What is the difference between Amazon S3 and Amazon EBS?" (Answer: S3 is object storage accessed via API; EBS is block storage attached to EC2)
- Best-fit selection - "A startup wants to deploy a web application without managing servers. Which service requires the least operational overhead?" (Answer: AWS Elastic Beanstalk or Lambda, depending on specifics in the stem)
Because 15 of the 65 questions are unscored pretest items and are not labeled, treat every question as if it counts. You cannot afford to guess on Domain 3 questions - this domain likely represents close to 17 scored questions. Practicing with realistic questions at our Cloud Practitioner practice tests trains you to recognize the exact phrasing patterns AWS uses before exam day.
For a broader view of what makes this exam challenging, see our article on How Hard Is the Cloud Practitioner Exam? Complete Difficulty Guide 2026. The service recognition component of Domain 3 is one of the main contributors to difficulty for candidates who are not already working in AWS environments.
A Domain-Weighted Study Schedule
Because Domain 3 is 34% of the exam and Security and Compliance (Domain 2) is 30%, these two domains should occupy more than half of your total study time. The schedule below assumes roughly four weeks of preparation - adjust based on your existing AWS exposure. Our full Cloud Practitioner Study Guide 2026: How to Pass on Your First Attempt covers all four domains in depth.
Domain 1 + Domain 4 Foundation
- Cloud Concepts (24%) - cloud value proposition, AWS global infrastructure, the six pillars of the Well-Architected Framework
- Billing, Pricing, and Support (12%) - pricing models, AWS Cost Explorer, Support plans
- These lighter domains are best covered first to free up maximum time for Domain 3
Domain 2: Security and Compliance (30%)
- Shared Responsibility Model, IAM, AWS Organizations, compliance programs
- Security services: GuardDuty, Inspector, Macie, WAF, Shield
- See Domain 2 Complete Study Guide for full coverage
Domain 3: Cloud Technology and Services - Part 1
- Compute services: EC2, Lambda, ECS, Fargate, Elastic Beanstalk
- Storage: S3 and storage classes, EBS, EFS, Snow Family
- Networking: VPC, CloudFront, Route 53, Direct Connect, ELB
- Complete 25-30 practice questions each evening to reinforce service recognition
Domain 3: Cloud Technology and Services - Part 2 + Full Review
- Databases: RDS, Aurora, DynamoDB, Redshift, ElastiCache
- AI/ML services table - memorize the one-line purpose of each
- Management and monitoring: CloudWatch vs. CloudTrail vs. Config
- Two to three full 65-question timed practice exams at cloudpractitionerexam.com
- Review every wrong answer; identify which Domain 3 service category is weakest
If you are already working in an AWS environment, you may compress weeks 3 and 4 - but still spend dedicated time on the AI/ML service catalog, which many practitioners have less hands-on exposure to. The Domain 1 Complete Study Guide and Domain 4 Complete Study Guide cover their respective content areas in the same format as this article.
Earning this certification can meaningfully affect your career trajectory. Our Cloud Practitioner Salary Guide 2026: Complete Earnings Analysis breaks down what credential holders earn across roles - and Domain 3 knowledge is directly applicable to cloud operations, solutions architecture, and DevOps positions.
Frequently Asked Questions
The exam has 65 total questions, of which 50 are scored and 15 are unscored pretest items. Since Domain 3 represents 34% of scored content, you can expect roughly 17 scored questions from this domain. However, AWS does not label which questions are scored, so you should treat all 65 with equal care.
No. The CLF-C02 is entirely multiple choice and multiple response - there are no hands-on labs, simulations, or coding tasks. Domain 3 tests whether you can identify the right service for a scenario and understand conceptual differences between services. You do not need to know console steps, CLI commands, or API syntax.
No. AWS uses compensatory scoring, which means there is no per-domain minimum. Your overall scaled score across all four domains must reach 700 on the 100-1000 scale. Doing exceptionally well in Domain 3 can compensate for a weaker performance in Domain 4, for example - which is one reason mastering the largest domain is strategically important.
The CLF-C02 exam guide lists dozens of services across compute, storage, database, networking, AI/ML, analytics, and management categories. Prioritize the services covered in this article - they represent the highest-frequency topics. For each service, focus on: what it does, what problem it solves, and how it differs from the closest alternative.
Because compensatory scoring applies, weak performance in one category does not automatically fail you. However, since AI and ML services represent a growing portion of Domain 3 questions on CLF-C02, skipping them entirely is risky. The good news is that these services are testable at a very surface level - knowing what Amazon Rekognition does (image analysis) versus Amazon Comprehend (NLP) is usually sufficient.
- Cloud Practitioner Domain 1: Cloud Concepts (24%) - Complete Study Guide 2026
- Cloud Practitioner Domain 2: Security and Compliance (30%) - Complete Study Guide 2026
- Cloud Practitioner Domain 4: Billing, Pricing, and Support (12%) - Complete Study Guide 2026
- Cloud Practitioner Exam Domains 2026: Complete Guide to All 4 Content Areas