Reference no: EM134026452
Problem
AWS Academy Learner Lab | Individual Tutorial Assessment Prerequisite (Mandatory) AWS
Case Study (Context) An organisation deploys web applications on Amazon EC2. As the organisation scales, it must ensure that network boundaries, security controls, and resource placement are deliberately designed rather than relying on default configurations.
Recent internal reviews revealed that:
1. Resources are often deployed without clear network placement and separation
2. Security groups are configured ad hoc without understanding exposure risks You are required to design, implement, and justify a VPC-based architecture that supports secure web application deployment while following AWS best practices.
Instructions
1. Log in to the AWS Academy Learner Lab
2. Access the AWS Management Console
For each question below:
1. Perform the required resource creation or configuration
2. Capture at least one screenshot as evidence
3. Provide a critical reflection
Implementation Directions and Questions
A. Create a custom VPC with an appropriate IPv4 CIDR block and relevant EC2 instances inside it. Reflect on why relying on the default VPC is discouraged in production systems. Get the instant assignment help.
B. Create public and private subnets across at least two Availability Zones. Reflect on how this subnet design supports security and fault tolerance.
C. Configure route tables, an Internet Gateway, and a NAT Gateway. Reflect on how routing decisions control exposure to the internet.
D. Create and assign a security group for a resource instance. Reflect on how your chosen inbound rules balance accessibility and security.
E. Launch an EC2 instance in the appropriate subnet and verify web access. Reflect on how subnet placement and security group configuration work together to enable or restrict access.