Course Overview
The AWS Certified Networking Specialty Exam ANS-C01 is one of the most challenging certification exams you can take from Amazon. Passing it tells employers in no uncertain terms that your knowledge of AWS networking is wide and deep. But, even experienced technologists need to prepare heavily for this exam. This course sets you up for success by covering all of the AWS networking topics on the exam and how they fit together.
Best-selling Udemy instructors Stéphane Maarek and AWS Networking expert Chetan Agrawal have teamed up to deliver the most comprehensive and hands-on prep course we've seen.
This course combines Stéphane's depth on AWS with Chetan's experience in AWS Networking. Chetan and Stéphane took and passed the exam themselves on the first try.
The world of networking on AWS includes in-depth knowledge about technologies and services. Here are some of the concepts we will cover:
Learn networking fundamentals with Amazon VPC
Learn advanced features of VPC
Understand DNS and DHCP options on VPC
Learn Networking Performance and Optimizations
Configure VPC Peering, VPC Gateway & Interface Endpoints
Learn Hybrid Networking (combining networking of on-premises and AWS) in depth.
In-depth configuration of Site-to-Site VPN, AWS Client VPN, and Direct Connect
Networking aspects of AWS Elastic Load Balancers and AWS CloudFront
Advanced DNS configurations with Route 53
Kubernetes networking and Amazon EKS Networking
Advanced Network architectures
many additional AWS networking features
You'll have many opportunities to reinforce your learning with hands-on exercises throughout the course. We'll also arm you with some valuable test-taking tips and strategies along the way.
AWS Networking is an advanced certification, and it's best tackled by students who have already obtained associate-level certification in AWS and have some real-world industry experience. This exam is not intended for AWS beginners.
You want to go into the AWS Certified Networking Specialty Exam confidently, which is what this course delivers. Hit the enroll button, and we're excited to see you in the course... and ultimately to see you get your certification!
Course content updates 06-11-2024:
19-05-2025: Fully refreshed VPC endpoint section - IPv6, UDP support, Resource, Lattice service network endpoint
13-02-2025: VPC lattice section
17-12-2024: Refreshed Hybrid DNS Hands-on exercises (Lectures 196-198) with latest UI changes and Amazon Linux 2023 AMI.
06-11-2024: Minor updates as per increased limits and student's feedback. Improved audio for Client VPN section.
22-04-2024: Added "VPC sharing" lecture under Additional Topics section.
23-03-2024: Updated VPC DNS and DHCP section (no new lectures. Just re-recorded for better explanation)
11-03-2024: Updated lectures for AWS Shied, ACM and added AWS Firewall Manager
26-02-2024: Added lectures and hands-on walkthrough for AWS Cloud WAN
12-02-2024: Refreshed Transit Gateway lectures for Centralized architectures. Added TGW+VPN lecture. Added 10 practice questions for Transit gateway section.
02-01-2024: Added lectures for VPC IP Address Manager (IPAM), VPC Rechability Analyzer, VPC Network Access Analyzer
01-01-2024: Remove few lectures from Hybrid networking basics section as there was some repeatation
30-Sep-2023: Updated most of the Direct Connect lectures to accomodate latest changes/limits etc. Incorporated feedback from the students.
To be added soon - Kindly refer AWS documentation or Re:Invent videos or AWS blogs until we publish a lecture here:
AWS Transit Gateway Private IP VPN
API Gateway PrivateLink integration with VPC resources
IPv6 on AWS (DNS64, NAT64)
AWS Route53 Profiles
Instructor
My name is Stephane Maarek, and I'll be your instructor in this course. I teach about AWS certifications, always focusing on helping my students improve their professional proficiencies in AWS. I am also the author of some of the most highly-rated & best-selling courses on AWS Lambda, AWS CloudFormation & AWS EC2.
Throughout my career in designing and delivering these certifications and courses, I have already taught 1,000,000+ students and gotten 350,000+ reviews!
I'm delighted to welcome Chetan Agrawal as my co-instructor for this course!
Chetan has been passionate about AWS Networking. He himself learned Networking in the cloud practically during his 6+ years of professional career as a Cloud and DevOps architect. Cloud platforms provide an opportunity to try and experiment with networking configurations quickly; hence, wherever possible, these courses include supporting hands-on exercises/demos that you can implement. This helps retain knowledge and build skills for a lifetime.
With AWS becoming more than a buzzword, I've decided it's time for students to learn how to properly be an AWS Advanced Networking Specialist. So, let’s kick start the course! You are in good hands!
This course also comes with:
Lifetime access to all future updates
A responsive instructor in the Q&A Section
Udemy Certificate of Completion Ready for Download
A 30-Day "No Questions Asked" Money Back Guarantee!
Join me in this course if you want to pass the AWS Certified Advanced Networking Specialty Certification and master the AWS platform!
FAQ
FAQ area empty
Course curriculum
-
Section Introduction
201 Xem trước -
What is Amazon VPC?
332 -
Scope of VPC with respect to AWS Account, Region & AZ
498 Xem trước -
VPC Building blocks - core components
353 -
VPC Addressing (CIDR)
1188 -
VPC Route Tables
948 Xem trước -
IP Addresses - IPv4 vs IPv6, Private vs Public vs Elastic IP
626 -
VPC Firewall - Security Group
753 -
VPC Firewall - Network Access Control List (NACL)
730 -
Default VPC
333 -
[Important] AWS Console UI Update
74 -
Hands On: Creating VPC with Public Subnet
785 -
Hands On: Add Private subnet
722 -
NAT Gateway
594 -
Hands On: Create NAT Gateway
214 -
NAT Gateway High Availability
138 -
NAT EC2 Instance and Demo
627 -
New ! Regional NAT Gateway (Re:invent 2025)
228 -
Exam Essentials
477 -
VPC Fundamentals
-
Section Introduction - How DNS works?
331 -
Amazon VPC DNS Server (Route53 Resolver)
808 -
VPC DHCP Option sets
867 -
Hands on exercises scenarios
136 -
Hands On: VPC DNS with Route53 Private Hosted zone
479 -
Hands On: VPC DNS with custom DNS server
662 -
Introduction to Route53 DNS Resolver Endpoints (Hybrid DNS)
306 -
Exam Essentials
162 -
VPC DNS
-
Basics of Network performance - Bandwidth, Latency, Jitter, Throughput, PPS, MTU
1207 -
Placement Groups and EBS Optimized EC2 instances
343 -
Enhanced Networking
743 -
DPDK and Elastic Fabric Adapter (EFA)
278 -
Bandwidth Limits inside and outside of VPC
757 -
Network I/O credits
116 -
Network performance Summary
194 -
Exam Essentials
465 -
Network Peformance
-
Introduction to VPC Endpoint and PrivateLink
653 -
VPC Gateway Endpoint
388 -
Hands On: VPC Gateway endpoint to access S3 bucket
836 -
Introduction to VPC PrivateLink powered endpoints
327 -
VPC PrivateLink - Important to know features
514 -
VPC endpoint DNS
479 -
Hands On: VPC interface endpoint to access Amazon SQS queue
899 -
VPC Endpoint Service
508 -
Hands On: Create VPC endpoint service and access through VPC endpoint
1611 -
Hands On: Accessing VPC endpoint service using Custom Domain Name (DNS)
359 -
VPC endpoints security
577 -
Other VPC endpoint types - Gateway Load Balancer, Resource, Service-network
403 -
VPC Endpoint architectures - Accessing on-premises services
138 -
VPC Endpoint architectures - Accessing from peered or connected VPC
420 -
VPC Endpoint architectures - Accessing from on-premises network
175 -
VPC Endpoint architectures - Centralized VPC endpoints
356 -
VPC Peering vs VPC Endpoints
204 -
Exam Essentials
265 -
VPC Endpoints
-
VPC PrivateLink and Interface endpoints
-
Introduction to Transit Gateway
411 -
Transit Gateway VPC attachments and Routing
389 -
Hands On: Transit Gateway & VPCs with full routing
995 -
Hands On: Transit Gateway & VPCs with restricted routing
1007 -
Transit Gateway VPC Network Patterns
370 -
Transit Gateway AZ considerations
219 -
Transit Gateway AZ affinity & Appliance mode
658 -
Transit Gateway Peering
349 -
Transit Gateway Connect Attachment
446 -
Transit Gateway VPN Attachment
627 -
Transit Gateway & Direct Connect
340 -
Transit Gateway Multicast
957 -
TGW Architecture: Centralized egress internet
540 -
TGW Architecture: Centralized traffic inspection with Gateway Load Balancer
712 -
TGW Architecture: Centralized traffic inspection with AWS Network Firewall
221 -
TGW Architecture: Centralized traffic inspection with Network Function attachmnt
143 -
TGW Architecture: Centralized VPC interface endpoints
797 -
Transit Gateway vs VPC Peering
373 -
Transit Gateway Sharing
327 -
Transit Gateway
-
Introduction to AWS Site-to-Site VPN
728 -
IPv4 and IPv6 traffic over AWS Site-to-Site VPN
489 -
Hands On: Setup AWS Site-to-Site VPN
1859 -
Accelerated Site-to-Site VPN (Using AWS Global Accelerator)
440 -
VPN NAT Traversal (NAT-T)
316 -
VPN Route Propagation (Static vs Dynamic)
285 -
VPN Transitive Routing scenarios
585 -
VPN Tunnels - Active/Passive Mode
667 -
VPN Dead Peer Detection (DPD)
309 -
VPN Monitoring
220 -
AWS Site-to-Site VPN Architectures
402 -
AWS VPN CloudHub
271 -
EC2 based VPN
430 -
AWS Transit VPC architecture using VPN connections
840 -
AWS Site-to-Site VPN Quiz
-
Introduction to AWS Direct Connect
583 -
Direct Connect network requirements
404 -
BGP Autonomous System (AS) and ASN
337 -
Direct Connect Connection Types - Dedicated vs Hosted
657 -
Steps to create Direct Connect Connections
873 -
Walkthrough: Creating a DX Connection
206 -
Introduction to DX Virtual Interfaces (VIFs)
382 -
DX Virtual Interfaces (VIF) creation parameters
557 -
Ip-ranges.json
362 -
Public VIF
601 -
Private VIF
732 -
Transit VIF
180 -
Direct Connect Gateway with Private VIF and VGW
714 -
Direct Connect with Transit VIF and TGW
539 -
Direct Connect SiteLink
693 -
DX Routing policies and BGP communities
657 -
Public VIF Routing policies
444 -
Public VIF routing scenarios
668 -
Public VIF BGP Communities
857 -
Private VIF routing policies and BGP communities
661 -
DX Link Aggregation Groups (LAGs)
457 -
DX Connection Resiliency
407 -
DX Failure detection with BFD
178 -
DX Security - Encrypting DX traffic
167 -
DX Security - Public IP VPN over DX connection (Layer 3)
430 -
DX Security - Private IP VPN over DX connection (Layer 3)
245 -
DX Security - MACSec encryption (Layer2)
239 -
DX support for MTU and Jumbo Frames
240 -
DX Pricing
1060 -
DX Monitoring using CloudWatch
244 -
DX Troubleshooting - Layer1-4
439 -
DX Architecture - Putting it together
546 -
DX Summary and Exam Essentials
648 -
Direct Connect Quiz
-
What is AWS Cloud WAN?
839 -
Core Network Policy
1033 -
Hands-On: Set up AWS Cloud WAN network, Segments & VPC attachments
1604 -
Connecting Transit Gateway & Direct Connect
289 -
Traffic Inspection in AWS Cloud WAN - Inspection VPC attachment
318 -
Traffic Inspection in AWS Cloud WAN - Network Function group (Service Insertion)
280 -
AWS Cloud WAN Summary
237
-
VPC lattice introduction
410 -
VPC lattice components - Lattice Network, Service, Resource and more
417 -
VPC lattice network associations
424 -
VPC lattice traffic flow
316 -
Hands on: VPC lattice service access with custom domain name
1307 -
VPC lattice features - Good to know
222 -
VPC lattice common architectures
252 -
VPC lattice section summary
130
-
CloudFront Overview
308 -
CloudFront Origins
417 -
Hands On: CloudFront Origin Groups
378 -
CloudFront Origin Headers
101 -
CloudFront Origin Security
257 -
Hands On: Restrict an ALB to CloudFront
363 -
CloudFront and HTTPS
239 -
End-to-End Encryption in CloudFront
131 -
CloudFront Geo Restrictions
88 -
CloudFront Functions and Lambda@Edge
598 -
Hands On: CloudFront Functions
497 -
CloudFront Cleanup
41 -
AWS Global Accelerator
366 -
Hands On: AWS Global Accelerator
529 -
CloudFront
-
ELB Overview
375 -
Classic Load Balancer
286 -
Application Load Balancer
568 -
Network Load Balancer
623 -
Connection Idle Timeout
95 -
Request Routing Algorithm
158 -
Sticky Sessions (Session Affinity)
351 -
Cross-Zone Load Balancing
353 -
ELB SSL/TLS
360 -
Connection Draining
142 -
X-Forwarded Headers
115 -
Hands On: ALB X-Forwarded Headers
434 -
Proxy Protocol
180 -
Hands On: NLB Proxy Protocol
430 -
GRPC & ALB
138 -
Hybrid Connectivity
203 -
Security Groups Outbound Rules & Managed Prefixes
105 -
Load Balancer
-
What is a DNS ?
384 -
Route 53 Overview
378 -
Route 53 - Registering a domain
204 -
Route 53 - Creating our first records
236 -
Route 53 - EC2 Setup
340 -
Route 53 - TTL
328 -
Route 53 CNAME vs Alias
420 -
Routing Policy - Simple
245 -
Routing Policy - Weighted
302 -
Routing Policy - Latency
279 -
Route 53 - Health Checks
294 -
Route 53 - Health Checks Hands On
279 -
Routing Policy - Failover
252 -
Routing Policy - Geolocation
255 -
Routing Policy - Geoproximity
201 -
Routing Policy - Traffic Flow & Geoproximity Hands On
590 -
Routing Policy - IP-based
105 -
Routing Policy - Multi Value
222 -
3rd Party Domains & Route 53
144 -
DNS Migration in Route 53
156 -
Common Route 53 scenarios
390 -
Route 53 - Subdomain Zones
470 -
Route 53 - DNSSEC
463 -
Route 53 Resolvers & Hybrid DNS
430 -
Hands On: Route53 Resolvers - Part 1 - Setting up VPN
1617 -
Hands On: Route53 Resolvers - Part 2 - DNS configuration
653 -
Hands On: Route53 Resolvers - Part 3 - Resolver endpoints
590 -
Route 53 Logging
135 -
Route 53 DNS Firewall
177 -
Solution Architectures for DNS
305 -
Route 53 - Cleanup
81 -
Route 53
-
Introduction to AWS Network Security Services
808 -
Recap - Security Groups and Network ACL
618 -
AWS Web Application Firewall (WAF)
699 -
Hands On: Cross-Site Scripting (XSS) attack simulation and prevention with WAF
779 -
AWS Shield and Shield Advanced (DDoS protection)
544 -
Introduction to AWS Network Firewall
564 -
AWS Network Firewall - VPC and Route tables
232 -
AWS Network Firewall Components & Rule groups
752 -
Hands On: AWS Network Firewall
1339 -
The legacy way of using the Network appliances
450 -
Gateway Load Balancer and Traffic flow
666 -
Hands On: Gateway Load Balancer
1425 -
Summary: Gateway Load Balancer
98 -
Gateway Load Balancer - Exam Essentails
240 -
AWS Certificate Manager (ACM)
692 -
AWS Firewall Manager
447
-
Section Introduction
173 -
Kubernetes Architecture
970 -
Amazon EKS Architecture
227 -
EKS Cluster Networking
943 -
EKS Pod Networking - Part 1
959 -
EKS Pod Networking - Part 2
715 -
Security Group in EKS - Node and Pod level
642 -
Exposing services using ClusterIP, NodePort, LoadBalancer and Ingress
1247 -
EKS Custom Networking - Extending IPv4 address space
333 -
EKS Networking Summary
311
Requirment
-
It is recommended to have taken at least one associate-level AWS certification
-
Basics of networking are a nice-to-have although we explain them too in the course
Outcomes
-
Master AWS Networking in depth: VPC, Hybrid Connectivity, Direct Connect, Transit Gateway, Route 53, and much more
-
All 700+ slides available as downloadable PDF
-
Covers the full scope of the ANS-C01 exam, still the reference for deep AWS Networking knowledge
-
Practice alongside several advanced hands-on
-
Design real-world network architectures on AWS: multi-VPC, multi-account, and hybrid cloud
Instructor
Stephane Maarek | AWS Certified Cloud Practitioner,Solutions Architect,Developer
0.0
-
0 Student
-
6 Courses
-
0 review
View Details