Book Image

AWS Certified SysOps Administrator ??? Associate Guide

By : Marko Sluga
Book Image

AWS Certified SysOps Administrator ??? Associate Guide

By: Marko Sluga

Overview of this book

AWS certifications are becoming one of the must have certifications for any IT professional working on an AWS Cloud platform. This book will act as your one stop preparation guide to validate your technical expertise in deployment, management, and operations on the AWS platform. Along with exam specific content this book will also deep dive into real world scenarios and hands-on instructions. This book will revolve around concepts like teaching you to deploy, manage, and operate scalable, highly available, and fault tolerant systems on AWS. You will also learn to migrate an existing on-premises application to AWS. You get hands-on experience in selecting the appropriate AWS service based on compute, data, or security requirements. This book will also get you well versed with estimating AWS usage costs and identifying operational cost control mechanisms. By the end of this book, you will be all prepared to implement and manage resources efficiently on the AWS cloud along with confidently passing the AWS Certified SysOps Administrator – Associate exam.
Table of Contents (26 chapters)

Chapter 4 – Networking with Virtual Private Cloud

  1. The VPC network and the VPC subnets.
  2. A way to determine the network address in CIDR, IP addresses are described as consisting of two groups of bits in the address: the network address and the host address.
  3. Between /16 and /28.
  4. Public subnets have a route to the IGW while private subnets don't.
  5. IGW for public subnets, NAT gateways for private subnets, VPN and Direct Connect for on-premises.
  6. By default, transient traffic isn't supported with VPC peering. To achieve this, a proxy instance could be installed in VPC B, and traffic for VPC C from VPC A would be redirected to the proxy.
  7. You didn't allow the ephemeral ports on the outbound policy of the NACL. NACLs are stateless and the return traffic needs to be allowed. Determine the ephemeral ports the instance responds on and allow those in the NACL...