Amazon VPC Networking - AWS Virtual Private Cloud 2020

Explore how a virtual private cloud provides a private, isolated network with subnets and routing. Connect resources via public and private subnets, internet gateways, VPN, or peering.

Explore how the default VPC creates subnets, an internet gateway, security groups, and network ACLs by default, and how to create a custom VPC and manage CIDR blocks.

Explore IPv4 addressing, CIDR subnetting concepts, and elastic IP mapping within a VPC, covering public vs private IPs, NAT, and region-based IP allocations.

Create and allocate an elastic IP in the AWS VPC console, tag and associate it with an instance, and learn about release, association, and the five IP limit.

Explore IPv6 addressing basics, and how to associate an IPv6 block with a VPC, create subnets, and notation rules including leading zeros and :: compression from regional registries.

Explore how subnets subdivide a vpc's ip space into blocks within a single availability zone. Learn cidr notation and block sizing, such as 172.31.0.0/24, with reserved addresses explained.

Explore VPC subnets, including default subnets per availability zone and auto assigned public IP, and learn to distinguish public from private subnets via route tables and internet gateway.

Discover how Amazon VPC route tables direct traffic using a local route, destinations, and targets like internet gateways, VPN, and peering, with static and dynamic routes and longest prefix match.

Explore practical route tables in Amazon VPC, including main vs custom tables, implicit and explicit subnet associations, and how internet gateways and propagation affect traffic routing.

Learn about elastic network interfaces (ENIs) in AWS VPC, including primary private IP, security groups, and optional secondary and elastic IP addresses. Attach ENIs to an instance in availability zone.

Explore elastic network interfaces (ENIs) in the AWS VPC lab, including primary and custom ENIs, IP addressing, security groups, and attaching ENIs to instances within the same availability zone.

Learn how security groups control inbound and outbound traffic for instances in Amazon VPC, including default and custom groups, rules, statefulness, and practical traffic flow examples.

Explore how security groups act as virtual firewalls in aws vpc, comparing default and custom groups, configuring inbound and outbound rules, and testing inter-instance connectivity.

Explore network access control lists (NACLs) as a subnet-level, stateless firewall that contrasts with stateful security groups. Learn about default and custom NACL rules, subnet associations, and ephemeral port behavior.

Explore NACLs and security groups in a lab setting, comparing default and custom VPCs, managing subnet associations, and understanding inbound/outbound rules and the stateless nature of ACLs.

Learn how internet gateways route traffic from public subnets to the internet, attach to default or custom VPCs, and manage public IP access via routing tables.

Learn how a NAT gateway enables private subnet instances to access the internet while preventing inbound traffic, using a public subnet and an elastic IP.

Set up a VPC with public and private subnets, attach an internet gateway and NAT gateway, launch a private instance, and access it securely via a bastion host.

Learn how a NAT instance in a public subnet enables private subnet instances to reach the internet, with security group rules, elastic IP considerations, and gateway comparisons.

Learn to configure a VPC with public and private subnets, launch a NAT instance and bastion host, and enable outbound internet access while securing with security groups and routing tables.

Understand how the egress-only internet gateway enables outbound IPv6 traffic from a VPC while blocking inbound connections, with AWS managing a highly available, stateful gateway and response traffic flow.

Learn how to configure a default VPC with IPv6 support, attach an internet gateway, assign IPv6 subnets, and test outbound and inbound IPv6 connectivity using security groups and route settings.

Learn to configure a site-to-site vpn between aws vpc and a remote network using a customer gateway and a virtual private gateway, with ipsec tunnels and routing for high availability.

Set up a site-to-site vpn between two vpc environments using vgw and cgw, configure ipsec with two tunnels and static routing, disable source-destination checks, and verify connectivity.

Explore AWS VPC flow logs. Monitor and troubleshoot network traffic by capturing IP flow data from subnets or interfaces, publishing to CloudWatch Logs or S3, using default and custom formats.

Architect a virtual private cloud across multiple availability zones, demonstrate networking components, secure VPCs, and tailor connectivity to fit various business scenarios for AWS certification exams.