https://github.com/strongjz/aws-advanced-networking-guide
This repository curates content that is useful to study and pass the AWS Advance Networking Speciality Certification.
https://github.com/strongjz/aws-advanced-networking-guide
aws certification certification-prep networking
Last synced: 3 months ago
JSON representation
This repository curates content that is useful to study and pass the AWS Advance Networking Speciality Certification.
- Host: GitHub
- URL: https://github.com/strongjz/aws-advanced-networking-guide
- Owner: strongjz
- License: mit
- Created: 2021-08-29T15:15:14.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2021-08-31T12:25:16.000Z (about 4 years ago)
- Last Synced: 2025-04-09T17:06:36.702Z (6 months ago)
- Topics: aws, certification, certification-prep, networking
- Homepage:
- Size: 10.7 KB
- Stars: 17
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# AWS-Advanced-Networking-Guide
* AWS Services
* AWS White Papers
* Courses
* Blog Posts
* Exam Guide
* Sample Exams
* Things to remember
| Domain | % of Exam |
|--------|-------------|
| Domain 1: Design and implement hybrid IT network architectures at scale | 24% |
| Domain 2: Design and implement AWS networks | 28% |
| Domain 3: Automate AWS tasks | 8% |
| Domain 4: Configure network integration with application services | 14% |
| Domain 5: Design and implement for security and compliance | 12% |
| Domain 6: Manage, optimize, and troubleshoot the network| 14% |
## AWS Services
* [VPC](https://aws.amazon.com/vpc/faqs/?ep=sec&sec=spec_advn)
* NACL
* Security Groups
* [VPC endpoints](http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-endpoints.html)
* Subnets
* Route Tables
* EC2
* Placement groups
* Enhanced networking
* Secondary ENI
* ENA
* EFA
* EBS Optimized
* MTU
* Throughput to the internet
* VPC Traffic Mirroring
* Direct Connect link
* [FAQ](https://aws.amazon.com/directconnect/faqs/?ep=sec&sec=spec_advn)
* [Docs](https://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html)
* AWS and IPsec VPN
* Load Balancing
* AWS Global Accelerator
* Gateways
* Internet gateway
* Egress internet
* NAT gateway
* [Virtual GW](http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-ug.pdf)
* Customer gateway
* AWS Transit Gateway
* AWS Config
* Amazon SNS
* AWS Lambda
* CloudFormation
* Amazon CloudWatch
* Amazon CloudWatch Logs
* Network Manager
* [Route 53](https://aws.amazon.com/route53/faqs/?ep=sec&sec=spec_advn)
* Network Security
* VPC flow log
* AWS CloudTrail
* IAM policies
* AWS KMS
* AWS WAF
* GuardDuty
* AWS Shield
## Networking Topics
* High availability/load balancing
* VLANs
* 801.q
* 802.1Q is an Ethernet standard as defined by the IEEE that enables Virtual Local Area Networks (VLANs) on an Ethernet network.
* BFD
* Bidirectional Forwarding Detection (BFD) is a mechanism used to support fast failover of connections in the event of a failure in the forwarding path between two routers.
* LAG
* A Link Aggregation Group (LAG) is a logical interface that uses the Link Aggregation Control Protocol (LACP) to aggregate multiple 1 Gbps or 10 Gbps connections
* Routing
* Subnetting
* DNS
* DHCP
* Sticky Sessions
* DMZ
* Data at rest and in transit
* BGP
* Border Gateway Protocol (BGP) is a routing protocol used to exchange network routing and reachability information, either within the same or a different autonomous system.
* AS_PATH prepending
* is a mechanism where you artificially make the AS_PATH longer on one connection compared to the other by adding your own ASN multiple times to the path.
## Whitepapers
* [Best Practices for VPCs and Networking in Amazon WorkSpaces Deployments](https://d1.awsstatic.com/whitepapers/best-practices-vpcs-networking-amazon-workspaces-deployments.pdf)
* [Building a Scalable and Secure Multi-VPC AWS Network Infrastructure](https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/welcome.html)
* [Amazon Virtual Private Cloud Connectivity Options](https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/welcome.html)
* [AWS Best Practices for DDoS Resiliency](https://d1.awsstatic.com/whitepapers/Security/DDoS_White_Paper.pdf)
* [High Performance Computing on AWS Redefines What is Possible](https://d1.awsstatic.com/whitepapers/Intro_to_HPC_on_AWS.pdf)
* [Integrating AWS with Multiprotocol Label Switching](https://d1.awsstatic.com/whitepapers/Networking/integrating-aws-with-multiprotocol-label-switching.pdf)
* [AWS Certified Advanced Networking Official Study Guide: Specialty Exam](https://www.amazon.com/Certified-Advanced-Networking-Official-Study-ebook/dp/B079VKD1CN)
## Courses/Videos
- [AWS re:Invent 2017: Deep Dive: AWS Direct Connect and VPNs (NET403)](https://www.youtube.com/watch?v=eNxPhHTN8gY)
- [AWS re:Invent 2017: Extending Data Centers to the Cloud: Connectivity Options and Co (NET301)](https://www.youtube.com/watch?v=lN2RybC9Vbk)
## Blog Posts
https://crishantha.medium.com/aws-site-to-site-vpn-c4baf45703fd
## Exam Guide
https://d1.awsstatic.com/training-and-certification/docs-advnetworking-spec/AWS-Certified-Advanced-Networking-Specialty_Exam-Guide.pdf
## Sample Exams
## Things to remember
Route Table Priority
|Priority |Description|
|----------|-------------|
|1 |Local route, even if a more specific route exists for the CIDR|
|2 |Most specific route (longest-prefix match)|
|3 |Static routes are preferred over dynamic routes for equivalent prefixes|
|4 |Dynamic routes propagated from AWS Direct Connect |
|5 |Static routes configured on a VGW VPN connection |
|6 |Dynamic routes propagated from a VPN |
BGP path selection order is as follows:
1. Local routes to the VPC (no override with more specific routing)
2. Longest prefix match first
3. Static route table entries preferred over dynamic
4. Dynamic routes:
1. Prefer AWS Direct Connect BGP routes
1. Shorter AS_PATH
2. Considered equivalent and will balance traffic per flow
2. VPN static routes (defined on VPN connection)
3. BGP routes from VPN
1. Shorter AS_PATH
VPC Endpoints
Gateway endpoints ( Route Table entry )
- Amazon Simple Storage Service (Amazon S3)
- Amazon DynamoDB.
Interface endpoints ( ENI in your VPC )
- Amazon Kinesis Streams
- Elastic Load Balancing API
- Amazon EC2 API
- Amazon EC2 Systems Manager (SSM)
- AWS Service Catalog
- Endpoint services hosted by other account
- Partner Solutions