AWS Free Tier for Cert Study: Hands-On Labs Without a Bill
Quick answer: Open a new AWS account, turn on MFA, and create a Zero spend budget before you build anything. Then run short labs with IAM, S3, EC2, Lambda, DynamoDB, CloudWatch, and CloudFormation that match your exam, and delete every resource at the end of each session.↗ Share on X
You can study for an AWS certification on the Free Tier by opening a new account, setting a zero-spend budget alert before you touch anything else, and doing small hands-on labs with services that have free usage, like EC2, S3, Lambda, DynamoDB, and IAM. Build each lab, take notes, and delete everything when you finish. Done this way, most people can cover the hands-on practice for an entry-level cert like Cloud Practitioner or Solutions Architect Associate with little or no cost. The main risk is forgetting to delete something, and the steps below are built to stop that.
How does the AWS Free Tier work right now?
20 Minutes a Day: A Study Plan That Passes AWS or PMP →
Shift Worker? Plan Cloud Cert Study by Rotation, Not Week →
Tech Certification Roadmap From Zero: The First 12 Months →AWS changed its Free Tier in July 2025. Accounts created after that date get a credit-based plan instead of the older "12 months free" model. In simple terms:
- New accounts get promotional credits to spend on many services, and you can earn more credits by finishing some starter activities in the console.
- You can choose a free plan that runs for a limited period (check the current length on the AWS Free Tier page). On the free plan, AWS stops the account from running into charges and closes it if you do not upgrade.
- Some services have "always free" amounts every month, such as a set number of Lambda requests and a small amount of DynamoDB storage.
- Older accounts may still be on the legacy 12-month Free Tier.
AWS updates these details, so open the official AWS Free Tier page before you start and read the current limits. Do not rely on old blog posts, including details that change after this was written.
Level up — free guides in your inbox
Step 1: Set up the account safely
Do this in the first 20 minutes, before you launch any lab.
1. Create the account with an email you check often. AWS sends billing alerts there.
2. Turn on multi-factor authentication (MFA) for the root user. The root user is the main owner login. MFA means a code from your phone is needed to sign in. This protects you from someone running up charges on a stolen password.
3. Create an IAM user or use IAM Identity Center for daily work. IAM is AWS's tool for users and permissions. Use this login for labs, not the root user. This is also a core exam topic, so you are studying already.
4. Pick one region and stay in it. A region is the AWS data center area, like us-east-1. Resources you forget usually hide in a region you clicked by accident.
Step 2: Set a billing alarm before anything else
Free Spreadsheet to Track Cloud Cert Study Hours by Domain →
How to Explain Cloud Cert Projects in a Tech Interview →
AWS Practice Exam Review: Score Higher Without Burning Out →This is the most important step.
1. Open Billing and Cost Management, then Budgets.
2. Choose Create budget and pick the Zero spend budget template. It emails you as soon as your spending goes above $0.01.
3. Add a second budget with a monthly limit you are comfortable with, for example $5, as a backup.
4. In Billing preferences, turn on Free Tier usage alerts if your account shows that option.
Now, if a lab runs past the free limits, you will know within hours, not at the end of the month.
Step 3: Match labs to your exam
Different exams need different amounts of hands-on work. Here is a practical map:
| Exam | Hands-on needed | Services to practice |
|---|---|---|
| Cloud Practitioner | Light | IAM, S3, EC2 basics, Billing console, Pricing Calculator |
| Solutions Architect Associate | Medium | VPC, EC2, Auto Scaling, Load Balancers, S3, RDS, IAM, CloudWatch |
| Developer Associate | Medium to heavy | Lambda, API Gateway, DynamoDB, S3, IAM roles, CloudFormation |
| SysOps / CloudOps Administrator Associate | Heavy | CloudWatch, Systems Manager, EC2, backups, IAM, CloudFormation |
Pick the row for your exam. Use that list to choose your weekly labs.
Step 4: Run small, free-friendly labs
Each lab below fits in about 30 to 60 minutes. The goal is to see each service with your own eyes, not to build big systems.
Lab 1: IAM users, groups, and policies
Create a group, attach a read-only policy, add a test user, and sign in as that user. Try to delete an S3 bucket and watch it fail. This teaches the "least privilege" idea, meaning people only get the access they need. IAM itself has no charge.
Lab 2: S3 static website
Create an S3 bucket, upload a simple HTML file, turn on static website hosting, and open the page. Then try bucket policies and versioning. Keep files tiny. When done, empty and delete the bucket.
Lab 3: Launch an EC2 instance
Launch a small instance type that is listed as free-tier eligible in the launch screen (look for the "Free tier eligible" label). Connect to it, install a web server, and view the page from your browser. Then terminate it. "Stopped" instances can still cost money for attached storage. "Terminated" means gone.
Lab 4: Serverless with Lambda and DynamoDB
Write a short Lambda function that saves an item to a DynamoDB table. Trigger it from the console test button. Both services include always-free monthly amounts that a study lab usually stays well inside.
Lab 5: Monitoring with CloudWatch
Create an alarm on your EC2 instance's CPU, then make the CPU busy and watch the alarm change state. Use the basic metrics. Delete the alarm afterward.
Lab 6: Infrastructure as code with CloudFormation
Write a small template that creates one S3 bucket. Create the stack, then delete the stack and watch AWS remove the bucket for you. This is the easiest way to clean up, and it appears on several exams.
Which services can surprise you with charges?
Most surprise bills on study accounts come from a short list. Be careful with these:
| Service or item | Why it can cost money | What to do |
|---|---|---|
| NAT Gateway | Charges per hour even with no traffic | Create it only for a lab, delete it the same day |
| Elastic IP address | Public IPv4 addresses carry an hourly charge | Release it when the lab ends |
| EBS volumes and snapshots | Stay after you stop an instance | Delete unattached volumes and old snapshots |
| RDS databases | Larger sizes and Multi-AZ are not free | Use the smallest free-eligible option, delete after |
| Load Balancers | Charge per hour | Delete as soon as you test |
| Running in multiple regions | Easy to forget resources | Stick to one region |
When the console offers a bigger default option, slow down and choose the smallest one.
Step 5: Clean up after every session
Make this a fixed routine. It takes five minutes.
1. Terminate EC2 instances and delete unattached EBS volumes.
2. Release Elastic IPs.
3. Delete NAT Gateways and Load Balancers.
4. Delete RDS databases (skip the final snapshot for practice labs).
5. Empty and delete S3 buckets you no longer need.
6. Delete CloudFormation stacks.
7. Open Billing, then Bills or Cost Explorer, and check that today's cost is still near zero.
A helpful extra: the Tag Editor in the Resource Groups console lets you search across regions for resources you forgot.
How do you track study hours by exam domain?
Each AWS exam guide lists "domains," which are topic areas with a percentage weight. Track your hours against them so you study what matters most.
1. Download the official exam guide for your cert from the AWS Certification website.
2. Make a spreadsheet with columns: Date, Domain, Lab or topic, Hours, Confidence (1 to 5).
3. After each session, add one row.
4. Each week, add up hours per domain and compare with the domain weight. If a domain carries a large share of the exam but has few hours, plan your next labs there.
5. Any topic with confidence 1 or 2 goes on next week's list.
Spreadsheets in Google Sheets or Excel are enough. You do not need a paid tool.
A sample 4-week plan for Solutions Architect Associate
| Week | Focus | Labs |
|---|---|---|
| Week 1 | Security and IAM, S3 | Labs 1 and 2 |
| Week 2 | Compute and networking | Lab 3, plus a simple VPC with public and private subnets |
| Week 3 | Databases, serverless, monitoring | Labs 4 and 5, plus a small RDS test |
| Week 4 | Infrastructure as code and review | Lab 6, practice exams, redo weak labs |
Adjust the pace to your schedule. Two short labs a week is better than one long weekend you cannot repeat.
Your next step
Today, open your AWS account, turn on MFA for the root user, and create the Zero spend budget. Then download the exam guide for your certification and set up your tracking spreadsheet with one row per domain. Tomorrow, do Lab 1 (IAM) and log the hours. That first lab costs nothing and covers a topic on every AWS exam.
FAQ
Can I prepare for an AWS certification using only the Free Tier?
For entry-level and associate exams, most hands-on practice fits in small labs on free-eligible services, as long as you set billing alerts and delete resources after each session.
Which AWS services cause surprise charges on study accounts?
NAT Gateways, Elastic IP addresses, leftover EBS volumes and snapshots, larger RDS databases, and Load Balancers are the most common.
Did the AWS Free Tier change?
Yes. In July 2025 AWS moved new accounts to a credit-based Free Tier with a free plan option. Check the official Free Tier page for the current limits.