Lookup
Reference sheets
Scannable sheets for the parts of AWS networking you look up rather than read. Each one is a single page of tables, scope diagrams, and the defaults that bite, with every figure traceable to its source.
These cover the topics a lab cannot. A Direct Connect virtual interface needs a physical cross-connect, and a Cloud WAN core network edge bills by the hour in every Region it runs in, so neither reproduces at the cost the labs hold to. A sheet is the honest format for them rather than a placeholder for a lab that is coming later.
Direct Connect: Virtual Interfaces, Gateways, and Prefixes
What terminates on what, and which direction each prefix control acts in. The allowed-prefixes field means opposite things depending on which gateway you set it on.
Direct ConnectTransit Gateway13 minCloud WAN: Segments, Attachment Policies, and Service Insertion
The object model, the policy document that drives all of it, and the defaults that decide whether two attachments can reach each other. Sharing a segment is hub-and-spoke, not a mesh.
Cloud WANTransit Gateway10 minSecurity Groups and Network ACLs: Quotas, Weights, Tracking, and Ports
Every number that decides whether a rule can be added, whether a connection survives a rule change, and whether a reply gets back in. The quota is 60 but the CloudFront prefix list costs 55; a security group is stateful except when it is not; a network ACL needs the ephemeral range and the range depends on who is asking.
NACL / Security GroupsAWS VPC12 min