AWS-Advanced-Networking-Guide

• AWS Services
• AWS White Papers
• Courses
• Blog Posts
• Exam Guide
• Sample Exams
• Things to remember

Domain	% of Exam
Domain 1: Design and implement hybrid IT network architectures at scale	24%
Domain 2: Design and implement AWS networks	28%
Domain 3: Automate AWS tasks	8%
Domain 4: Configure network integration with application services	14%
Domain 5: Design and implement for security and compliance	12%
Domain 6: Manage, optimize, and troubleshoot the network	14%

AWS Services

• VPC
  • NACL
  • Security Groups
  • VPC endpoints
  • Subnets
  • Route Tables
  • EC2
  • Placement groups
  • Enhanced networking
    • Secondary ENI
    • ENA
    • EFA
    • EBS Optimized
    • MTU
    • Throughput to the internet
  • VPC Traffic Mirroring
• Direct Connect link
  • FAQ
  • Docs
• AWS and IPsec VPN
• Load Balancing
• AWS Global Accelerator
• Gateways
  • Internet gateway
  • Egress internet
  • NAT gateway
  • Virtual GW
  • Customer gateway
  • AWS Transit Gateway
• AWS Config
• Amazon SNS
• AWS Lambda
• CloudFormation
• Amazon CloudWatch
• Amazon CloudWatch Logs
• Network Manager
• Route 53
• Network Security
  • VPC flow log
  • AWS CloudTrail
  • IAM policies
  • AWS KMS
  • AWS WAF
  • GuardDuty
  • AWS Shield

Networking Topics

• High availability/load balancing
• VLANs
• 801.q
  • 802.1Q is an Ethernet standard as defined by the IEEE that enables Virtual Local Area Networks (VLANs) on an Ethernet network.
• BFD
  • Bidirectional Forwarding Detection (BFD) is a mechanism used to support fast failover of connections in the event of a failure in the forwarding path between two routers.
• LAG
  • A Link Aggregation Group (LAG) is a logical interface that uses the Link Aggregation Control Protocol (LACP) to aggregate multiple 1 Gbps or 10 Gbps connections
• Routing
• Subnetting
• DNS
• DHCP
• Sticky Sessions
• DMZ
• Data at rest and in transit
• BGP
  • Border Gateway Protocol (BGP) is a routing protocol used to exchange network routing and reachability information, either within the same or a different autonomous system.
• AS_PATH prepending
  • is a mechanism where you artificially make the AS_PATH longer on one connection compared to the other by adding your own ASN multiple times to the path.

Whitepapers

• Best Practices for VPCs and Networking in Amazon WorkSpaces Deployments
• Building a Scalable and Secure Multi-VPC AWS Network Infrastructure
• Amazon Virtual Private Cloud Connectivity Options
• AWS Best Practices for DDoS Resiliency
• High Performance Computing on AWS Redefines What is Possible
• Integrating AWS with Multiprotocol Label Switching
• AWS Certified Advanced Networking Official Study Guide: Specialty Exam

Courses/Videos

• AWS re:Invent 2017: Deep Dive: AWS Direct Connect and VPNs (NET403)
• AWS re:Invent 2017: Extending Data Centers to the Cloud: Connectivity Options and Co (NET301)

Blog Posts

https://crishantha.medium.com/aws-site-to-site-vpn-c4baf45703fd

Exam Guide

https://d1.awsstatic.com/training-and-certification/docs-advnetworking-spec/AWS-Certified-Advanced-Networking-Specialty_Exam-Guide.pdf

Sample Exams

Things to remember

Route Table Priority

Priority	Description
1	Local route, even if a more specific route exists for the CIDR
2	Most specific route (longest-prefix match)
3	Static routes are preferred over dynamic routes for equivalent prefixes
4	Dynamic routes propagated from AWS Direct Connect
5	Static routes configured on a VGW VPN connection
6	Dynamic routes propagated from a VPN

BGP path selection order is as follows:

1. Local routes to the VPC (no override with more specific routing)
2. Longest prefix match first
3. Static route table entries preferred over dynamic
4. Dynamic routes:
   1. Prefer AWS Direct Connect BGP routes
      1. Shorter AS_PATH
      2. Considered equivalent and will balance traffic per flow
   2. VPN static routes (defined on VPN connection)
   3. BGP routes from VPN
      1. Shorter AS_PATH

VPC Endpoints

Gateway endpoints ( Route Table entry )

• Amazon Simple Storage Service (Amazon S3)
• Amazon DynamoDB.

Interface endpoints ( ENI in your VPC )

• Amazon Kinesis Streams
• Elastic Load Balancing API
• Amazon EC2 API
• Amazon EC2 Systems Manager (SSM)
• AWS Service Catalog
• Endpoint services hosted by other account
• Partner Solutions