📋 Advanced Networking Cheat Sheet

Professional-level architecture questions often combine VPCs, hybrid networks, DNS, inspection, and routing at scale.

Connectivity Choices

  • VPC peering is point-to-point and non-transitive.
  • Transit Gateway supports hub-and-spoke routing across many VPCs and networks.
  • Direct Connect provides dedicated private connectivity from on-premises to AWS.
  • Site-to-Site VPN is faster to provision and often used as backup for Direct Connect.

DNS and Private Access

  • Route 53 Resolver inbound endpoints let on-premises resolve AWS private names.
  • Route 53 Resolver outbound endpoints let VPCs forward selected domains to on-premises DNS.
  • Gateway endpoints support private S3 and DynamoDB access.
  • Interface endpoints use PrivateLink for private access to many AWS services.

Practice Networking Questions

Put your knowledge to the test with practice questions.

More SAP-C02 Cheat Sheets