AWS AIF-C01 Cheat Sheet 2026
A practical, foundational revision reference for the AWS Certified AI Practitioner exam.
Foundational · AI/ML & Generative AI · Free to UseWhat This Cheat Sheet Covers
AIF-C01 tests foundational AI/ML literacy, generative AI concepts, foundation model applications, responsible AI, and security/governance — rather than deep hands-on model engineering. Domain 3 (Applications of Foundation Models) is the largest domain at 28%, and together Domains 2 and 3 make up 52% of the exam. This page weights its coverage accordingly.
High-Yield Concept Comparisons
AIF-C01 leans on knowing which AI/ML approach or AWS service fits a given scenario. The format below mirrors how the exam phrases it: a scenario cue, and the service or concept that matches.
AI vs ML vs Deep Learning vs GenAI
AI: Broadest concept — systems that perform tasks requiring human intelligence (language, decisions, predictions).
ML: Subset of AI — models learn patterns from data instead of hard-coded rules (fraud detection, recommendations).
Deep Learning: Subset of ML using multi-layer neural networks (computer vision, NLP, speech).
Generative AI: Focuses on generating new content — text, images, audio, code — often via foundation models.
Supervised vs Unsupervised vs Reinforcement
Supervised: Trained on labeled data — classification (spam/not spam) and regression (price prediction).
Unsupervised: Finds hidden patterns in unlabeled data — clustering, anomaly detection, dimensionality reduction.
Reinforcement: Agent learns via reward/penalty through trial and error — robotics, game playing, autonomous systems.
Tokens vs Embeddings vs Vectors
Tokens: Small chunks of text (words, subwords) that foundation models process as input/output units.
Embeddings: Numerical representations of text/images that capture semantic meaning for similarity search.
Vectors: The mathematical arrays produced by embeddings — used in vector databases for RAG.
Amazon Bedrock vs Amazon SageMaker
Bedrock: Fully managed, serverless API access to pre-trained foundation models (Claude, Titan, Llama) — no infrastructure management.
SageMaker: End-to-end platform to build, train, tune, and deploy custom ML models — includes Studio, Canvas, JumpStart, Clarify.
RAG vs Fine-Tuning vs Prompt Engineering
Prompt Engineering: Crafting inputs (zero-shot, few-shot, chain-of-thought) — no model changes, lowest effort.
RAG: Retrieves external/company data at query time — ideal for knowledge gaps, current facts, private documents.
Fine-Tuning: Retrains model weights on labeled data — for behavior/style adaptation, not knowledge updates.
Prompt Engineering Techniques
Zero-Shot: No examples provided — model relies on its training.
Few-Shot: A small number of examples guide the model's response format.
Chain-of-Thought: Prompts model to reason step-by-step before answering.
Role-Playing / Persona: Assigns the model a specific role (e.g., "You are a security analyst").
Model Evaluation Metrics
Accuracy: Overall correctness — can be misleading on imbalanced datasets.
Precision: Of predicted positives, how many were actually positive (minimizes false positives).
Recall: Of actual positives, how many were correctly identified (minimizes false negatives).
F1 Score: Harmonic mean of precision and recall — balanced metric.
ROUGE / BLEU: Text generation quality — summary overlap / translation quality.
Core Responsible AI Principles
Fairness: AI treats all users equitably — mitigates bias in training data and outcomes.
Transparency: Users can understand how and why the AI reached a decision.
Explainability: The model's reasoning can be articulated in human-understandable terms.
Privacy: Personal data is protected — aligns with GDPR, CCPA.
Safety: AI systems operate reliably without causing harm.
Accountability: Clear ownership for AI system outcomes.
AI Security Threats
Prompt Injection: Malicious input manipulates the model to bypass instructions — focuses on the application layer.
Jailbreaking: Bypassing safety filters to make the model violate guidelines — focuses on the model itself.
Data Poisoning: Corrupting training data to degrade model performance or introduce bias.
Model Inversion: Extracting sensitive training data from a model's outputs.
AWS Security Services for AI
IAM: Controls access to Bedrock, SageMaker, and AI resources via roles and policies.
GuardDuty: Threat detection — monitors for malicious activity in AWS accounts.
Macie: Discovers and protects sensitive data (PII) in S3 — critical for AI training data.
AWS Config: Tracks resource configuration and compliance for AI workloads.
CloudTrail: Audits API activity — who accessed what AI service and when.
Amazon Q vs Bedrock vs SageMaker JumpStart
Amazon Q: Generative AI assistant for business — answers questions, generates content, and automates tasks.
Bedrock: Managed API for foundation models — the "engine" behind generative AI applications.
JumpStart: SageMaker hub with pre-trained models and solutions for quick deployment.
Bias vs Variance vs Overfitting
Bias: Model makes systematic errors — underfitting, too simple, misses patterns.
Variance: Model is too sensitive to training data — overfitting, poor generalization.
Overfitting: Model memorizes training data instead of learning patterns — performs poorly on new data.
ML Development Lifecycle
1. Data Collection: Gather and prepare training data.
2. Data Preparation: Clean, label, and split data (train/validation/test).
3. Model Training: Train the algorithm on training data.
4. Evaluation: Assess model performance against validation metrics.
5. Deployment: Deploy the model to production.
6. Monitoring: Track performance and retrain as needed.
Foundation Model Capabilities
Text Generation: Produces coherent text — summaries, articles, dialogue.
Image Generation: Creates images from text prompts (e.g., Amazon Titan Image Generator).
Code Generation: Writes and explains code — Amazon Q Developer.
Multimodal: Processes and generates across text, image, and audio modalities.
Bedrock Guardrails vs Model Evaluation
Bedrock Guardrails: Runtime controls — content filters, PII redaction, denied topics, grounding checks.
Bedrock Model Evaluation: Pre-deployment assessment — automatic and human evaluation of model quality.
Classification vs Regression vs Clustering
Classification: Predicts a category — spam/not spam, fraud/not fraud (supervised).
Regression: Predicts a continuous value — house price, temperature (supervised).
Clustering: Groups similar data points without labels — customer segmentation (unsupervised).
Top AIF-C01 Exam Traps
RAG supplies current context at runtime; fine-tuning changes learned behavior. Do not pick fine-tuning for knowledge gaps — use RAG instead.
Prompt injection targets the application layer; jailbreaking targets the model's safety filters. The exam draws a sharp line between them.
Amazon Bedrock is for managed foundation model access; SageMaker is for the broader ML lifecycle including custom training and MLOps.
If the scenario mentions "labeled data," it is supervised learning — even if the task sounds like clustering or pattern-finding.
Responsible AI principles — fairness, transparency, explainability — sound similar but each applies to distinct scenarios. Read carefully.
Domain 3 (Applications of Foundation Models) is the largest domain at 28% — focus study time accordingly.
Tokens are the units models process; embeddings are the semantic representations. Do not confuse tokenization with embedding.
Accuracy alone can be misleading on imbalanced datasets — precision and recall (or F1) are often more informative metrics.
Bedrock Guardrails are runtime content controls; Model Evaluation is pre-deployment quality assessment. They serve different phases.
SageMaker JumpStart provides pre-trained models for quick deployment, but it is not the same as Bedrock's fully managed FM API.
AI/ML / GenAI / Security Quick Reference
AI/ML Essentials
- AI is the broadest concept; ML is a subset that learns from data
- Supervised = labeled data; Unsupervised = unlabeled; Reinforcement = reward-based
- Classification predicts categories; Regression predicts values; Clustering groups similar points
- Overfitting = memorizes training data; Underfitting = misses patterns
Generative AI at a Glance
- Foundation models are pre-trained on vast data and adaptable to many tasks
- Bedrock = managed FM API; SageMaker = full ML lifecycle platform
- RAG = knowledge gaps; Fine-tuning = behavior gaps; Prompt engineering = lowest effort
- Tokens are input/output units; Embeddings are semantic representations
Security & Governance
- IAM controls access to AI resources with roles and policies
- GuardDuty detects threats; Macie protects sensitive data in S3
- Prompt injection attacks the app; jailbreaking attacks the model
- Bedrock Guardrails enforce runtime content safety and PII redaction
Your 7-Day AIF-C01 Exam Sprint
Day 1–2: AI/ML Fundamentals + Learning Types — Master AI vs ML vs Deep Learning, supervised vs unsupervised vs reinforcement, and the ML development lifecycle.
Day 3: Generative AI Fundamentals — Learn tokens, embeddings, foundation models, and AWS generative AI infrastructure (Bedrock, SageMaker, Amazon Q).
Day 4: Foundation Model Applications — Focus on RAG vs fine-tuning vs prompt engineering, evaluation metrics, and model selection criteria.
Day 5: Responsible AI + Security & Governance — Master fairness, transparency, explainability, and AI-specific security threats (prompt injection, jailbreaking, data poisoning).
Day 6: Full Practice Exam — Complete a timed 25-question practice test, then review every wrong answer to understand why you missed it.
Day 7: Targeted Review & Rest — Revisit missed practice questions and refresh key service comparisons (Bedrock vs SageMaker, RAG vs fine-tuning).
Ready to Test Your AIF-C01 Knowledge?
Studying content builds recall. A practice exam is what tells you if you're actually ready.
Frequently Asked Questions
What is the AWS AIF-C01 Cheat Sheet?
A condensed foundational reference covering the AI/ML concepts, generative AI fundamentals, foundation model applications, responsible AI principles, and security topics most commonly tested on the AWS Certified AI Practitioner exam.
Is the AIF-C01 Cheat Sheet free?
Yes. This page and the downloadable PDF are both free to use.
Can I download the AIF-C01 Cheat Sheet as a PDF?
Yes, use the download button at the top of this page to get a print-friendly PDF version.
What topics does the cheat sheet cover?
AI and ML fundamentals, generative AI concepts, foundation model applications (RAG, fine-tuning, prompt engineering), responsible AI principles, AI security and governance, and key AWS services like Amazon Bedrock and Amazon SageMaker.
Is a cheat sheet enough to pass AIF-C01?
No. AIF-C01 tests scenario-based understanding of AI/ML concepts and AWS services, so a cheat sheet works best alongside practice exams — not as your only study material.
Where can I practice AIF-C01 questions?
Take CloudExamPro's free 25-question AIF-C01 practice exam to test your knowledge and identify the areas you should review before taking the full exam.
Study Smarter. Practice Smarter.
Use this cheat sheet for fast revision, then confirm what you know with a practice exam.