What's changed: In-scope coverage: added other-category overview (API Gateway/Global Accelerator/PrivateLink/Transit Gateway/Client VPN/EventBridge/SNS/SQS/Step Functions/SES/Amplify/AppSync/IoT Core/WorkSpaces/AppStream/DocumentDB/SageMaker AI/CLI/CodeBuild/CodePipeline/X-Ray) and migration & transfer (Migration Hub/Discovery/Evaluator/MGN/DMS/SCT/Snow Family) to §4.3
4.1Networking Services
Understand AWS networking basics: the VPC and subnets, security groups, Route 53 (DNS), and CloudFront (content delivery).
AWS resources need to connect securely—to each other and the outside. The foundation is the VPC (Virtual Private Cloud), your own private network inside AWS. You divide a VPC with subnets, control traffic with security groups, and connect to on-premises as needed. We also cover Route 53 (DNS) and CloudFront (content delivery).
4.1.1VPC, subnets, and firewalls
- VPC: a private network inside AWS with an address range, where you place resources securely.
- Subnets: divide a VPC into public (internet-facing via an internet gateway, e.g., web) and private (no direct internet, e.g., databases).
- Security groups: instance-level virtual firewalls—stateful (return traffic auto-allowed), allow rules only.
- Network ACLs (NACLs): subnet-level firewalls—stateless, supporting both allow and deny rules.
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.