Understand enterprise hybrid networking, routing domains, connectivity choices, and failure boundaries.

Design non-overlapping address spaces for AWS, on-premises, and future expansion.

Design multi-AZ VPCs with public, private, isolated, and inspection subnets.

Master route selection, propagation, static routes, and asymmetric-routing risks.

Use Transit Gateway as a central routing hub for VPCs and hybrid networks.

Configure VPC, VPN, and Direct Connect connectivity through Transit Gateway.

Connect Transit Gateways across Regions and design controlled global routing.

Connect on-premises networks to AWS using managed IPSec VPN tunnels.

Use BGP, route propagation, and routing policies for resilient hybrid VPNs.

Understand dedicated and hosted connections, VIFs, BGP, and private network paths.

Use Direct Connect Gateway to connect Direct Connect to VPC and transit architectures.

Design redundant Direct Connect connectivity and combine it with VPN failover.

Use Cloud WAN to build centrally managed global networks and segmented connectivity.

Design isolated production, development, shared, and hybrid network segments.

Design DNS resolution between AWS VPCs and on-premises networks.

Provide private service connectivity without broad network routing or public exposure.

Design centralized outbound internet access using Transit Gateway, Network Firewall, and NAT.

Build inspection VPCs using AWS Network Firewall or third-party appliances.

Understand when VPC peering is appropriate and why it does not replace Transit Gateway.

Design shared DNS, directory, monitoring, and internal service access.

Build a scalable network-account model for shared connectivity and workload isolation.

Apply layered segmentation with transit routing, security groups, NACLs, and firewalls.

Design IPv6 connectivity and dual-stack hybrid routing.

Use Flow Logs, Reachability Analyzer, CloudWatch, and network telemetry for troubleshooting.

Use a systematic method to troubleshoot VPN, Direct Connect, routing, DNS, MTU, and security failures.

Understand packet-size problems across VPN, Direct Connect, and hybrid paths.

Design redundant paths, multi-AZ inspection, multi-Region routing, and hybrid failover.

Understand major network cost drivers and optimize without compromising resilience.

Automate network provisioning and governance with AWS CLI and Infrastructure as Code.

Combine VPC, TGW, Direct Connect, VPN, Cloud WAN, DNS, security, and observability.

Design, troubleshoot, and document a production-grade multi-account hybrid AWS network.