AWS · SAA-C03
Secure network design
SAA-C03 · Lesson 3 of 23 · 17:50
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAA-C03 exam (AWS Certified Solutions Architect – Associate). In this lesson: public and private subnets, route tables, internet and NAT gateways, security groups and network ACLs, gateway and interface VPC endpoints, Session Manager and VPC Flow Logs, and external connections with Site-to-Site VPN, Client VPN, and Direct Connect. Includes three original practice questions.
Preview the topics
- The security team must block a known malicious IP address range from reaching the subnets of the tracking platform. What should the architect use?
- Private application servers upload large files to Amazon S3 through a NAT gateway. The security team wants private connectivity to S3, with no internet gateway or NAT in the path. What is the simplest fix?
- A warehouse sends high-volume traffic over a dedicated 10 Gbps Direct Connect connection, at a location that supports MACsec, and that traffic must now be encrypted. What is the most efficient option?