← All 186 courses
CL-201 Cloud & Platform

AWS Core Services Practitioner

Hands-on command of the AWS services every workload touches: EC2, VPC, S3, IAM, RDS, and CloudWatch — built by deploying a small but real three-tier application with least-privilege IAM and cost tags from the first hour, not as an afterthought.

B2Foundation
6modules
42skill atoms
5role journeys
Curriculum

What this course covers.

6 modules, 42 named skill atoms. Expand any module to see them.

1Compute & Storage7 skill atoms
EC2 lifecycleEBS/S3 classesAMIsinstance family selectionuser-data bootstrapgp3 vs io2 volume choiceS3 lifecycle rules to Glacier
2VPC Foundations7 skill atoms
subnetsroute tablessecurity groups vs NACLsinternet gateway vs NAT gatewaypublic vs private subnet definitiongateway VPC endpoint for S3subnet spread across AZs
3IAM Right from Day One7 skill atoms
policiesrolesleast-privilege labsidentity vs resource policiesinstance profiles for EC2explicit deny evaluation ordercondition keys
4Managed Data7 skill atoms
RDSbackupsparameter groupsmulti-AZ vs read replicaDB subnet groupspoint-in-time restorecredentials in Secrets Manager
5Observability & Cost7 skill atoms
CloudWatchalarmstaggingbudgetsLogs Insights queriesCloudWatch agent for memory metricsCost Explorer grouped by tag
6Three-Tier Build7 skill atoms
deploysecuredocumentteardownALB in front of an ASGsecurity group chaining between tiersRDS in isolated subnets
Where it fits

CL-201 in the role journeys.

This course appears in 5 of our 45 role journeys. Here is what a learner takes immediately before and after it in each.

Cloud Engineer

Practitioner stage
CL-107CL-201CL-211

Cloud / Solutions Architect

Foundation stage
starts hereCL-201CL-211

FinOps Analyst

Foundation stage
CL-101CL-201CL-404

Multi-Cloud Engineer

Practitioner stage
CL-105CL-201CL-211

Enterprise Architect

Foundation stage
AI-101CL-201CL-106

Roles this course serves

The capability ladder

This course is authored to band B2.

Every course we run is written to one rung of the CASI ladder, so a plan can be assembled to take a team from where they are to where they need to be.

What do B1–B6 mean?The CASI Capability Ladder — click to expand

Every course targets a band on the CASI Capability Ladder — our six-band proficiency scale, anchored to open standards (O*NET, ESCO, NICE, NIST AI RMF, Bloom's). A band tells you how deep a course goes, and what evidence proves it.

What the learner can doTypical evidence
B1
AwareUnderstands concepts and vocabulary; uses tools with guidance
Knowledge checks
B2
FoundationPerforms standard tasks correctly in familiar contexts
Guided labs, autograded exercises
B3
PractitionerDelivers complete pieces of work independently
Scenario labs, proctored hands-on exams
B4
ProfessionalHandles production-grade complexity, trade-offs and failure modes
Break-fix drills, design defenses
B5
AdvancedEngineers systems end-to-end under constraints; leads others
Rubric-scored capstones, vivas
B6
ExpertSets direction; recognised authority across teams
Portfolio + panel evaluation

A note on B6. Courses in this catalog target B1–B5. B6 is not taught — it is recognised, through a portfolio and a panel, once someone is setting direction for others. Every journey here is built to land a learner at B5.

Next step

Run CL-201 for your team.

This course runs at several lengths depending on how deep you need to go and how much of it your people already have. Tell us who is being trained and we will scope it.

Add it to a training plan Talk to our team Check your team’s level free