Arrow keys / Click to navigate

Cloud Operations on AWS

Module 11: Operate Secure and Resilient Networks

Module Overview

Network ACLs	Security Groups
Subnet-level	Instance / ENI-level
Allow & Deny rules	Allow rules only
Stateless	Stateful
Evaluated in rule-number order	All rules evaluated together

VPC Peering — direct 1:1 connections
AWS Transit Gateway — hub for many VPCs and VPNs (now with policy-based routing)
AWS PrivateLink & VPC endpoints — private access to services
Amazon Route 53 Resolver — DNS resolution for every VPC

Amazon CloudFront — distribute content, reduce latency
AWS WAF — protect against common web exploits (SQLi, XSS)
AWS Shield — managed DDoS protection (Standard free, Advanced adds WAF integration)
AWS Certificate Manager — provision, manage, deploy SSL/TLS certs

Issue: Instances in subnets cannot communicate with one another.

Solution: Verify it's a network issue, check network ACLs, and review VPC Flow Logs if enabled.

Next: Module 12 — Mountable Storage

Click branch to expand

1 / 9