Learning tracks

Address planning, subnet tiering, route table scoping, and the boundary rules that decide whether a packet ever leaves the VPC.

• Subnet Tiering and Route Table Scoping

  A subnet is not public or private by declaration — it is defined entirely by the route table associated with it. Getting the association model right is what makes every later networking decision possible.

  Associate5 min

Direct Connect, Site-to-Site VPN, and the BGP attributes that control which path your traffic actually takes on the way back.

Guides for this track are in progress.

Centralized inspection topologies, appliance mode, route table associations, and propagation across attachments.

Guides for this track are in progress.

NAT Gateway placement, per-AZ data processing charges, gateway versus interface endpoints, and where egress spend actually accrues.

• NAT Gateway Placement, Failure Modes, and What Egress Actually Costs

  Where a NAT Gateway lives determines whether it works at all, how it fails when an AZ degrades, and how much of your data transfer bill is avoidable. All three answers come from the same design decision.

  Associate6 min