This course covers configuring and deploying an Amazon Virtual Private Cloud (Amazon VPC)[A1] with multiple subnets across two Availability Zones beyond the fundamental level. The course also covers best practices and common use scenarios for a variety of basic network architectures built with Amazon VPC. [A2]

• Course level: Intermediate
• Duration: 2 hours

Activities

This course includes written material, videos, and knowledge checks.

This course also includes one optional self-paced lab hosted at amazon.qwiklabs.com. You must pay for labs with credits, which cost $1 USD per credit. Labs typically cost up to 15 credits. This cost is not included with free digital training on aws.training. You will need to create a Qwiklabs account to purchase credits and take a lab.

Course objectives

In this course, you will learn to:

• Describe how to deploy and configure Amazon VPCs, subnets, internet gateways, and route tables.
• Identify ways to design, deploy, and configure a simple Amazon VPC with access through the internet.
• Explain how to secure an Amazon VPC infrastructure using security groups and network access control lists (network ACLs).
• Identify ways to expand a simple Amazon VPC across multiple Availability Zones to provide higher availability.
• Recognize ways to design, deploy, and configure a multi-tier Amazon VPC that lets you reduce or eliminate the public availability of critical resources.

Intended audience

This course is intended for:

• Network engineers
• Enterprise architects
• Infrastructure architects
• System operators
• Software engineers
• Application architects

Prerequisites

We recommend that attendees of this course have 2 years networking experience and 2–5 years AWS experience. In addition, attendees should have a working understanding of:

• Business networking, including routing technology, IP addressing, and network security
• Amazon Virtual Private Cloud (Amazon VPC)
• Networking standards
• Protocol standards
• Open Systems Interconnection (OSI) model
• Network access control list (network ACL)
• Switching protocols
• Domain Name System (DNS)
• Classless Inter-Domain Routing (CIDR)

Course outline

Module 1: Amazon VPC Deployment

Identify what an Amazon Virtual Private Cloud (Amazon VPC) is

Describe the difference between a default Amazon VPC and a custom Amazon VPC

Demo: Deploying a simple Amazon VPC via the AWS Management Console

Demo: Deploying a simple Amazon VPC via the AWS Command Line Interface (AWS CLI)

Module 2: Securing and Configuring High Availability

Describe AWS Identity and Access Management (IAM)

Identify network access control lists (network ACLs)

Identify security groups

Compare and contrast stateless and stateful controls

Identify Elastic Load Balancing and the different types[A3] [A4]

Module 3: Multi-Tier Architecture

Explain how to design a custom Amazon VPC for your requirements

Describe a multi-tier application architecture design

Identify how to strengthen security by customizing an Amazon VPC

Identify how to limit exposure to resources in an Amazon VPC

Module 4: Check Your Understanding

Apply knowledge from Modules 1-3

Course Wrap-Up

Identify resources for further learning.

Optional Hands-On Lab: Configuring and Deploying Amazon VPC for a Three-Tier Web Application

[A1]Should this be “an Amazon Virtual Private Cloud (Amazon VPC)”?

[A2]If you keep “VPC” above, expand this to “Amazon Virtual Private Cloud (Amazon VPC)”

[A3]This edit was still in progress—please update according to decision made in course

[A4]