VPC Networking: Designing a Software Defined Data Center on AWS
2h 29mIntermediate2019-06-26
Authors

Mark Wilkins
Author, Technical Trainer, AWS Cloud Expert
Course details
Virtual private clouds (VPC) are the heart of your AWS network. They connects AWS resources, route traffic, and provide security. To get started on AWS, you first need to create a VPC. In this course, instructor Mark Wilkins teaches VPC networking on AWS using a use case scenario for a company that hopes to move an on-premises app to the cloud using a multitier software-defined data center at AWS. Mark takes you through the example step by step: from defining the VPC and choosing regions and availability zones, to creating subnets, configuring custom route tables, assigning IP addresses, and creating security groups to control access. In addition, learn about setting up private and public connections, including an internet gateway; monitoring your VPC activity; and setting up identity and access management and compliance controls. By the end of this course, you should have the knowledge necessary to set up your own VPCs to deploy two- and three-tier applications on the AWS cloud.
Learning objectives
Creating a VPC
Creating subnets
Default and custom route tables
IP addressing
Creating security groups
Configuring an internet gateway
Peering VPCs together
Sharing VPC resources
Creating flow logs for monitoring
Controlling access with IAM roles
Dedicated tenancy
Using automation for compliance
Learning objectives
Creating a VPC
Creating subnets
Default and custom route tables
IP addressing
Creating security groups
Configuring an internet gateway
Peering VPCs together
Sharing VPC resources
Creating flow logs for monitoring
Controlling access with IAM roles
Dedicated tenancy
Using automation for compliance
Skills covered
Amazon Web Services (AWS)AmazonCloud ServicesCloud PlatformsCloud ComputingDeep Dive (X:Y)
Concepts
Introduction
- Designing a software-defined data center at AWS
- What you should know
- H+Sports use case
VPC Architecture
- Defining the VPC
- Deep dive - Packet flow
- AWS regions
- AWS Availability Zones
- Availability Zone considerations
- AWS costs
- AWS Regions and Availability Zones
- Planning for fault tolerance, and high-availability
Creating VPCs
- VPC design choices
- Create a VPC
- The default VPC
Creating Subnets
- Reasons to create subnets
- Creating subnets
- Route tables
- The master route table
- Custom route table
IP Addressing
- Public and private IP addresses
- Order an Elastic IP address
- Hosting public IP addresses at AWS
- Order BYOIP
VPC Security
- VPC security options
- Security groups
- Security group design
- Create a custom network ACL
- Network ACLs
- Create security groups
- Designing packet flow with security groups
VPC Public Connectivity
- Internet gateway services
- Order and configure an internet gateway
- Egress-only internet gateway
- Add an Egress-only internet gateway
- NAT services
- Adding NAT services
VPC Private Connectivity
- VPC peering
- Peering VPCs together
- Sharing VPC resources
- Sharing resources with RAM
- Private endpoints
- Gateway and interface endpoints
- VPN connections
VPC Compliance
- Monitoring with Flow Logs
- Create flow logs
- Controlling access with IAM roles
- Creating IAM roles for cross-account access
- Dedicated tenancy VPC
- Creating a dedicated tenancy VPC
- VPC soft limits
- Requesting a service limit increase
- Using automation for compliance
- Deploying a network stack with CloudFormation
Conclusion
- Next steps