Security groups versus network ACLs and when each applies - SkilBrill

Skip to content

Home
Courses
About
Contact
Blog
- Freshers

Search for:

Home - Lessons - AWS Cloud Architecture - M2 — Network Design on AWS - Security groups versus network ACLs and when each applies

AWS Cloud Architecture Security groups versus network ACLs and when each applies

AWS Cloud Architecture

0% Completed

M1 — Architecture Method and Requirements

Reading a brief: functional, non-functional and explicit constraints

Availability, durability and consistency as competing demands

The AWS Well-Architected lenses and how they are actually used

Requirement to design decision: writing the chain down

Common failure patterns and what causes them

When the right answer is not to move to cloud

M2 — Network Design on AWS

VPC, subnets and the public-private boundary

Availability zone placement for resilience

Route tables, NAT and the egress decision

Security groups versus network ACLs and when each applies

VPC endpoints to keep traffic off the internet

Network design review checklist

M3 — Compute Choices and Resilience

EC2 instance families and how to pick one honestly

Auto Scaling groups and target tracking policies

Load balancer types and health-check design

Placement groups, spot and the interruption risk

Containers on ECS and EKS as an architecture option

Multi-AZ design that does not pretend to be multi-region

M4 — Storage and Data Patterns

S3 storage classes, lifecycle and the real cost curve

EBS versus S3 versus EFS: block, object and file

RDS, Aurora and DynamoDB selection against access patterns

Read replicas, backup strategy and recovery targets

Caching with ElastiCache and where it belongs in a design

Data residency and where Indian regulations bite

M5 — Decoupling and Event-Driven Design

Why synchronous calls turn small failures into outages

SQS: queues, visibility and dead-letter design

SNS and fan-out patterns

EventBridge for event routing across services

Step Functions for orchestrated multi-step work

Idempotency: making retries safe

M6 — Security Architecture

Identity boundaries: accounts, roles and least privilege

Service-to-service authentication patterns

Encryption in transit and at rest without the buzzwords

Secrets management and what not to hard-code

Logging and evidence as part of the design

Threat modelling a cloud design in an afternoon

M7 — Cost-Aware and Well-Architected Review

Reading a cost explorer graph and explaining it

Right-sizing, reserved capacity and savings plans

Tagging strategy so cost has an owner

Running a Well-Architected review and recording findings

Trade-off writing: what you gave up and why

Design review questions that catch weak work

M8 — Capstone: A Production-Grade Design

Take a written brief and produce the requirement set

Draw the network, compute and data design

Cost the design line by line before building

Write the resilience and security argument

Record the trade-offs you rejected and why

Defend the design in a panel review

Announcements Course Info

Global Trusted Software Training Partner Since 2022

SkilBrill Training Institute delivers industry-focused technology education that bridges the gap between academic learning and real-world demands. Our structured programs combine foundational theory with practical application, ensuring every graduate is confident and job-ready from day one.

Learn More About Us

© 2026 SkilBrill Training Institute. All Rights Reserved. Privacy Policy Terms Refunds Outcomes

📞 Enroll Now

Start Your Journey

Fill in your details and our team will get back to you within 24 hours

Please enable JavaScript in your browser to complete this form.

Full Name *

Email *

Course Interested In *

Mode of Course *