Understand VPCs, Regions, Availability Zones, and the core AWS virtual network model.

Calculate IPv4 ranges and plan non-overlapping AWS address spaces.

Create subnet ranges in specific Availability Zones and design workload tiers.

Control traffic destinations with route tables, routes, targets, and subnet associations.

Connect public VPC resources to the Internet through an Internet Gateway and correct routes.

Provide outbound IPv4 Internet access from private subnets through a public NAT Gateway.

Control stateful inbound and outbound traffic at the network-interface level.

Control stateless subnet-level traffic with ordered inbound and outbound rules.

Classify subnets by routing behavior and design public, private, and isolated tiers.

Use multiple Availability Zones to build resilient network and application architectures.

Provide private connectivity from VPC resources to supported AWS services using gateway and interface endpoints.

Configure VPC DNS resolution and troubleshoot hostname resolution for AWS and internal services.

Configure VPC DHCP option sets for domain names, DNS servers, and related host configuration.

Allocate and manage static public IPv4 addresses for suitable AWS networking use cases.

Connect two VPCs privately with explicit routes and understand non-transitive connectivity.

Connect many VPCs and networks through a centralized regional routing hub.

Connect AWS networks to on-premises networks using IPsec VPN tunnels and routing.

Diagnose VPC connectivity failures by following the network path layer by layer.