This course is for individuals who seek knowledge of networking on Amazon Web Services (AWS) beyond the foundational level. You will learn how to monitor and troubleshoot network-related problems on AWS. The course also discusses logging, analyzing metrics, and how to use tools and services to visualize and audit your network.

Course level: Intermediate

Duration: 5 hours

Activities

This course includes written material, video, and knowledge checks. This course also includes one optional self-paced lab hosted at amazon.qwiklabs.com. You must pay for labs with credits, which cost one USD per credit. Labs typically cost up to 15 credits. This cost is not included with free digital training on aws.training.com. You will need to create a Qwiklabs account to purchase credits and take a lab.

Course objectives

In this course, you will learn to:

• Determine a network monitoring and troubleshooting strategy by associating network requirements to available AWS services and features
• Analyze logs to troubleshoot common network problems
• Differentiate between metadata logs and content logs within a network monitoring strategy
• Identify and visualize network traffic paths using AWS tools to map the network topology

Intended audience

This course is intended for:

• Network engineers
• Enterprise architects
• Infrastructure architects
• System operators
• Software engineers
• Application architects

Prerequisites

We recommend that attendees of this course have:

2 years of networking experience

2–5 years of AWS experience

Business networking, including routing technology, IP addressing, and network security

Amazon Virtual Private Cloud (Amazon VPC)

Networking standards

Protocol standards

Open Systems Interconnection (OSI) model

Network access control list (network ACL)

Switching protocols

Domain Name System (DNS)

Classless Inter-Domain Routing (CIDR)

Course outline

Module 1: Overview of Network Monitoring and Troubleshooting

Explain the philosophy of monitoring with an overview of common network issues

Identify why network monitoring is important for troubleshooting

Distinguish how security applies to monitoring and troubleshooting

Explain fundamentals of tools and services for monitoring and troubleshooting

Module 2: Monitoring your Network with Amazon CloudWatch

Identify the benefits of CloudWatch

Associate the benefits of AWS Systems Manager Agent (SSM Agent) to metrics

Summarize CloudWatch dashboards, logs, and queries

Understand how to optimize your network with CloudWatch alarms

Module 3: Traffic Visibility and Analysis

Understand the benefits of Amazon VPC Flow Logs

Explain the concepts of Amazon VPC Traffic Mirroring

Summarize limitations of Amazon VPC Traffic Mirroring

Learn how to engage open-source tools to maintain your network

Explore the anatomy of a log and relate the given use case or scenario

Module 4: Network Mapping

Explain benefits of the VPC Reachability Analyzer

Identify the benefits of the AWS Transit Gateway Network Manager

Demonstration: VPC Reachability Analyzer

Demonstration: AWS Transit Gateway Network Manager

Demonstration: VPC Reachability Analyzer compared to AWS Transit Gateway Network Manager

Module 5: Check Your Understanding

Recall information from previous modules through interactive knowledge checks

Course Summary

Summarize key networking concepts learned in this course

Identify resources for further learning

Optional hands-on lab: VPC Logging and Troubleshooting (fee required)