Chapter 5 of 5 · AWS SOA-C03
Networking and Content Delivery
VPC design, VPC and hybrid links, Route 53, CloudFront, Global Accelerator and a method for troubleshooting.
- 6topics
- 31 minfast track
- 5diagrams and exhibits
- 18%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1VPC Subnets, Routing and GatewaysBuild a VPC with public and private subnets, route tables, internet gateways, NAT gateways and egress only gateways, and how…Diagram5 min
- 2VPC Peering, Transit Gateway and EndpointsConnect VPCs with peering or Transit Gateway, and reach AWS services privately using gateway endpoints, interface endpoints and…Diagram5 min
- 3Hybrid Connectivity with VPN and Direct ConnectLink on premises networks to AWS with Site to Site VPN and Direct Connect, learn virtual interfaces and gateways, and design…Diagram5 min
- 4Route 53 DNS and Routing PoliciesConfigure Route 53 hosted zones, record types, alias records, routing policies, health checks, private zones and Resolver…Diagram5 min
- 5CloudFront and Global AcceleratorSpeed up and protect content with CloudFront origins, caching, invalidation, origin access control and signed URLs, and compare…Diagram5 min
- 6Troubleshooting Network ConnectivityFind AWS connectivity faults step by step with VPC Flow Logs, Reachability Analyzer, security group and network ACL checks, DNS…6 min
About this chapter
What this chapter covers
Networking is how traffic gets from users, data centers and other VPCs to your workload, and how names and content are delivered along the way. This chapter follows the networking and content delivery domain of the AWS Certified CloudOps Engineer Associate (SOA-C03) outline.
It starts inside the VPC with subnets and routes, moves outward to other VPCs and on premises networks, then covers DNS and content delivery. It ends with a method for finding faults.
The chapter has three outline topics, and they are spread across six pages. The first topic, networking features and connectivity, takes three pages.
How the topics fit together
A request travels from the user to the workload through these layers.
- VPC design decides which subnets are public or private and how they reach the internet.
- Peering, Transit Gateway and endpoints connect VPCs and reach AWS services privately.
- VPN and Direct Connect link on premises networks.
- Route 53 resolves names and steers users to healthy endpoints.
- CloudFront and Global Accelerator speed up and protect delivery from the edge.
- Troubleshooting applies a fixed order of checks, from DNS to the application.
For any connectivity question, ask four things in order: does the name resolve, is there a route, do the security groups and network ACLs allow it, and is the target healthy.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Draw the network on paper for each scenario, with subnets, route tables and gateways. Most wrong answers become obvious once you can see where the traffic would go.
Ready for more practice?
The full AWS SOA-C03 question bank has 850 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by AWS. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.