Segmenting a VPC so one compromise stays contained - SkilBrill

Skip to content

Home
Courses
About
Contact
Blog
- Freshers

Search for:

Home - Lessons - AWS Networking - M7 — Network Security and Segmentation - Segmenting a VPC so one compromise stays contained

AWS Networking Segmenting a VPC so one compromise stays contained

AWS Networking

0% Completed

M1 — Networking Foundations for AWS

TCP/IP, DNS and TLS as they appear in a cloud context

Regions, availability zones and the edge network

Subnets, CIDR blocks and address planning from the start

Public versus private and what that actually implies

The shared-responsibility line for networking

Reading a network diagram you did not draw

M2 — VPC Design and Subnet Strategy

CIDR planning that leaves room to grow

Public, private and isolated subnet tiers

Availability zone spread and why three tiers matter

Secondary CIDR and address exhaustion recovery

VPC endpoints to keep traffic off the internet

Multi-VPC layout and when to split rather than grow

M3 — Routing, Gateways and Egress

Route table evaluation and longest-prefix matching

Internet gateway and the NAT gateway decision

Centralised versus distributed egress and its trade-offs

Egress proxying and inspection paths

VPC peering versus Transit Gateway and when each wins

Troubleshooting a route that is not there

M4 — Hybrid Connectivity

Site-to-site VPN: configuration, MTU and performance limits

Direct Connect: ports, virtual interfaces and lead times

Direct Connect Gateway across regions

VPN over Direct Connect for encryption with better latency

Redundancy: dual connections and the failover you have tested

Accelerated VPN and the latency question

M5 — DNS, Edge and Content Delivery

Route 53 hosted zones and record types in practice

Routing policies: weighted, latency, failover and geolocation

Private hosted zones and split-horizon DNS for VPCs

Resolver rules for hybrid name resolution

CloudFront distributions, origins and cache behaviour

Edge security: WAF at the edge and origin protection

M6 — Load Balancing and Traffic Management

Application, Network and Gateway load balancers compared

Target groups, health checks and what a good check looks like

Listener design, rules and path-based routing

Cross-zone balancing and its cost implications

Internal versus internet-facing placement

Session affinity, sticky sessions and when to avoid them

M7 — Network Security and Segmentation

Security groups and reference rules between tiers

Network ACLs and stateless subnet control

Gateway endpoints and prefix lists

Flow logs: capture, destinations and analysis

WAF rules and rate limiting at the edge

Segmenting a VPC so one compromise stays contained

M8 — Capstone: A Multi-Region Network

Plan the CIDR allocation across accounts and regions

Build the VPCs, subnets and routing for a two-region estate

Connect on-premise with Direct Connect and a tested VPN failover

Interconnect VPCs with Transit Gateway and a written route domain

Set up DNS, edge delivery and load balancing with health checks

Diagnose and fix an injected fault using flow logs and route tables

Announcements Course Info

Global Trusted Software Training Partner Since 2022

SkilBrill Training Institute delivers industry-focused technology education that bridges the gap between academic learning and real-world demands. Our structured programs combine foundational theory with practical application, ensuring every graduate is confident and job-ready from day one.

Learn More About Us

© 2026 SkilBrill Training Institute. All Rights Reserved. Privacy Policy Terms Refunds Outcomes

📞 Enroll Now

Start Your Journey

Fill in your details and our team will get back to you within 24 hours

Please enable JavaScript in your browser to complete this form.

Full Name *

Email *

Course Interested In *

Mode of Course *