AWS Certified Advanced Networking Specialty Interactive Course

Design patterns for the usage of content distribution networks

Design patterns for global traffic management

Integration patterns for content distribution networks and global traffic management with other services

Evaluating requirements of global inbound and outbound traffic from the internet to design an appropriate content distribution solution

DNS protocol

DNS logging and monitoring

Amazon Route 53 features

Integration of Route 53 with other AWS networking services

Integration of Route 53 with hybrid, multi-account, and multi-Region options

Domain registration

Using Route 53 public hosted zones

Using Route 53 private hosted zones

Using Route 53 Resolver endpoints in hybrid and AWS architectures

Using Route 53 for global traffic management

Creating and managing domain registrations

How load balancing works at layer 3, layer 4, and layer 7 of the OSI model

Different types of load balancers and how they meet requirements for network design, high availability, and security

Connectivity patterns that apply to load balancing based on the use case

Scaling factors for load balancers

Integrations of load balancers and other AWS services

Configuration options for load balancers

Configuration options for load balancer target groups

AWS Load Balancer Controller for Kubernetes clusters

Considerations for encryption and authentication with load balancers

Selecting an appropriate load balancer based on the use case

Integrating auto scaling with load balancing solutions

Integrating load balancers with existing application deployments

Amazon CloudWatch metrics, agents, logs, alarms, dashboards, and insights in AWS architectures to provide visibility

AWS Transit Gateway Network Manager in architectures to provide visibility

VPC Reachability Analyzer in architectures to provide visibility

Flow logs and traffic mirroring in architectures to provide visibility

Access logging

Identifying the logging and monitoring requirements

Recommending appropriate metrics to provide visibility of the network status

Capturing baseline network performance

Routing fundamentals

Layer 1 and layer 2 concepts for physical interconnects

Encapsulation and encryption technologies

Resource sharing across AWS accounts

Overlay networks

Identifying the requirements for hybrid connectivity

Designing a redundant hybrid connectivity model with AWS services

Designing BGP routing with BGP attributes to influence the traffic flows based on the desired traffic patterns

Designing for integration of a software-defined wide area network with AWS

Different connectivity patterns and use cases

Capabilities and advantages of VPC sharing

IP subnets and solutions accounting for IP address overlaps

Connecting multiple VPCs by using the most appropriate services based on requirements

Using VPC sharing in a multi-account setup

Managing IP overlaps by using different available services and options

Routing protocols

VPNs

Layer 1 and types of hardware to use

Layer 2 and layer 3

Traffic management and SD-WAN

DNS

Security appliances

Load balancing

Infrastructure automation

AWS Organizations and AWS Resource Access Manager

Test connectivity

Networking services of VPCs

Configuring the physical network requirements for hybrid connectivity solutions

Configuring static or dynamic routing protocols to work with hybrid connectivity solutions

Configuring existing on-premises networks to connect with the AWS Cloud

Configuring existing on-premises name resolution with the AWS Cloud

Configuring and implementing load balancing solutions

Configuring network monitoring and logging for AWS services

Testing and validating connectivity between environments

Inter-VPC and multi-account connectivity

Private application connectivity

Methods of expanding AWS networking connectivity

Host and service name resolution for applications and clients

Infrastructure automation

Authentication and authorization

Security

Test connectivity

Configuring hybrid connectivity with existing third-party vendor solutions

Configuring network connectivity architectures by using AWS services in a single-VPC or multi-VPC design

Configuring a hub-and-spoke network architecture

Configuring a DNS solution to make hybrid connectivity possible

Implementing security between network boundaries

Configuring network monitoring and logging by using AWS solutions

When to use private hosted zones and public hosted zones

Methods to alter traffic management

DNS delegation and forwarding

Different DNS record types

DNSSEC

How to share DNS services between accounts

Requirements and implementation options for outbound and inbound endpoints

Configuring DNS zones and conditional forwarding

Configuring traffic management by using DNS solutions

Configuring DNS for hybrid networks

Configuring appropriate DNS records

Configuring DNSSEC on Route 53

Configuring DNS within a centralized or distributed network architecture

Configuring DNS monitoring and logging on Route 53

Infrastructure as code

Event-driven network automation

Common problems of using hardcoded instructions in IaC templates when provisioning cloud networking resources

Creating and managing repeatable network configurations

Integrating event-driven networking functions

Integrating hybrid network automation options with AWS native IaC

Eliminating risk and achieving efficiency in a cloud networking environment while maintaining the lowest possible cost

Automating the process of optimizing cloud network resources with IaC

Industry-standard routing protocols that are used in AWS hybrid networks

Connectivity methods for AWS and hybrid networks

How limits and quotas affect AWS networking services

Available private and public access methods for custom services

Available inter-Regional and intra-Regional communication patterns

Managing routing protocols for AWS and hybrid connectivity options

Maintaining private access to custom services

Using route tables to direct traffic appropriately

Setting up private access or public access to AWS services

Optimizing routing over dynamic and static routing protocols

Network performance metrics and reachability constraints

Appropriate logs and metrics to assess network performance and reachability issues

Tools to collect and analyze logs and metrics

Tools to analyze routing patterns and issues

Analyzing tool output to assess network performance and troubleshoot connectivity

Mapping or understanding network topology

Analyzing packets to identify issues in packet shaping

Troubleshooting connectivity issues that are caused by network misconfiguration

Verifying that a network configuration meets network design requirements

Automating the verification of connectivity intent as a network configuration changes

Troubleshooting packet size mismatches in a VPC to restore network connectivity

Situations in which a VPC peer or a transit gateway are appropriate

Different methods to reduce bandwidth utilization

Cost-effective connectivity options for data transfer between a VPC and on-premises environments

Different types of network interfaces on AWS

High-availability features in Route 53

Availability of options from Route 53 that provide reliability

VPC subnet optimization

Frame size optimization for bandwidth across different connection types

Optimizing for network throughput

Load balancing and traffic distribution patterns

Selecting the right network interface for the best performance

Choosing between VPC peering, proxy patterns, or a transit gateway connection based on analysis of the network requirements provided

Implementing a solution on an appropriate network connectivity service to meet network requirements

Implementing a multicast capability within a VPC and on-premises environments

Creating Route 53 public hosted zones and private hosted zones and records to optimize application availability

Updating and optimizing subnets for auto scaling configurations to support increased application load

Updating and optimizing subnets to prevent the depletion of available IP addresses within a VPC

Configuring jumbo frame support across connection types

Optimizing network connectivity by using Global Accelerator to improve network performance and application availability

Common security threats

Different threat models based on application architecture

Mechanisms to secure different application flows

AWS network architecture that meets security and compliance requirements

Securing inbound traffic flows into AWS

Securing outbound traffic flows from AWS

Securing inter-VPC traffic within an account or across multiple accounts

Implementing an AWS network architecture to meet security and compliance requirements

Automating security incident reporting and alerting using AWS

Developing a threat model and identifying appropriate mitigation strategies for a given network architecture

Testing compliance with the initial requirements

Network monitoring and logging services that are available in AWS

Alert mechanisms

Log creation in different AWS services

Log delivery mechanisms

Mechanisms to audit network security configurations

Creating and analyzing a VPC flow log

Creating and analyzing network traffic mirroring

Implementing automated alarms by using CloudWatch

Implementing customized metrics by using CloudWatch

Correlating and analyzing information across single or multiple AWS log sources

Implementing log delivery solutions

Implementing a network audit strategy across single or multiple AWS network services and accounts

Network encryption options that are available on AWS

VPN connectivity over Direct Connect

Encryption methods for data in transit

Network encryption under the AWS shared responsibility model

Security methods for DNS communications

Implementing network encryption methods to meet application compliance requirements

Implementing encryption solutions to secure data in transit

Implementing a certificate management solution by using a certificate authority

Implementing secure DNS communications