VPC & IP Plan
Define CIDR space and subnet allocation for the environment.
AWS LAB ยท 01
Production-Style AWS VPC
Designing a resilient AWS VPC with public and private subnets, controlled Internet access and a multi-AZ architecture.
THE GOAL
Build the foundation correctly.
The goal of this lab is to build a production-style AWS network rather than a single flat VPC.
The design will use multiple Availability Zones, separate public and private subnets, controlled Internet access, routing and security policies.
ARCHITECTURE
Target design.
Architecture diagram will go here
DESIGN COMPONENTS
What this lab will include.
Multi-AZ Subnets
Deploy public and private subnets across multiple Availability Zones.
Routing
Build route tables for public and private traffic flows.
Internet Access
Use an Internet Gateway and NAT architecture for controlled access.
Security
Compare Security Groups and Network ACL behavior.
Failure Testing
Test what happens when components or paths become unavailable.
DESIGN DECISIONS
Why this architecture?
This section will document the reasoning behind subnet placement, routing, Internet access and high-availability decisions.
The goal is not just to show what was configured, but why the architecture was built that way.
LESSONS LEARNED
What changed after building it.
This section will be updated after the lab is complete with troubleshooting notes, unexpected behavior and design improvements.