Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • AWS Certified Advanced Networking – Specialty (ANS-C01) Certification Guide
  • Toc
  • feedback
AWS Certified Advanced Networking – Specialty (ANS-C01) Certification Guide

AWS Certified Advanced Networking – Specialty (ANS-C01) Certification Guide

By : Tim McConnaughy, Steve McNutt, Christopher Miles
close
AWS Certified Advanced Networking – Specialty (ANS-C01) Certification Guide

AWS Certified Advanced Networking – Specialty (ANS-C01) Certification Guide

By: Tim McConnaughy, Steve McNutt, Christopher Miles

Overview of this book

The AWS Certified Advanced Networking – Specialty certification exam focuses on leveraging AWS services alongside industry standards to create secure, resilient, and scalable cloud networks. Written by industry experts with decades of experience in the field, this comprehensive exam guide will enable you to transform into an AWS networking expert, going beyond the ANS-C01 exam blueprint to maximize your impact in the field. You’ll learn all about intricate AWS networking options and services with clear explanations, detailed diagrams, and practice questions in each chapter. The chapters help you gain hands-on experience with essential components, such as VPC networking, AWS Direct Connect, Route 53, security frameworks, and infrastructure as code. With access to mock exams, interactive flashcards, and invaluable exam tips, you have everything you need to excel in the AWS ANS-C01 exam. This book not only prepares you to confidently take the exam, but also deepens your understanding and provides practical insights that are vital for a successful career in AWS cloud networking. By the end of this exam guide, you’ll be thoroughly trained to take the AWS ANS-C01 exam and efficiently design and maintain network architectures across a wide range of AWS services.
Table of Contents (22 chapters)
close

TGW Inspection VPC Design

With the advent of Gateway Load Balancer (GWLB), the recommended TGW inspection VPC design has changed a bit to include that, but here is the inspection VPC design without GWLB first. Note that the TGW is being used to control the connectivity and the routing from east-west flows between VPCs to force inspection by a security appliance – in this case, AWS Firewall. The following figure depicts an inspection VPC design using AWS Firewall:

Figure 5.19: TGW with an inspection VPC design using AWS Firewall

Figure 5.19: TGW with an inspection VPC design using AWS Firewall

Understanding the route table flows is key to understanding how security appliance insertion/redirection works in the cloud. The traffic flow is shown in Figure 5.19. Each step in the flow of traffic between VPCs is marked:

  1. A workload in App A VPC wants to send traffic to the workload in App B VPC. The first step is consulting the subnet route table, which points all traffic at the TGW attachment.
  2. Traffic ingresses...
bookmark search playlist download font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete