Skip to content
FR

Design Secure Workloads and Applications

Step 3 of 28

VPC, Application Security, and Connectivity

Learning objectives

After this lesson you will be able to:

  • Design a segmented Amazon VPC with public, private and isolated subnets.
  • Choose correctly between security groups and network ACLs and predict how each behaves.
  • Protect web applications and APIs with AWS WAF, AWS Shield and Amazon CloudFront.
  • Store and rotate credentials with AWS Secrets Manager and AWS Systems Manager Parameter Store.
  • Select the right private connectivity option: VPC endpoints, AWS PrivateLink, Site-to-Site VPN, Direct Connect, or a combination.
  • Answer the SAA-C03 questions for Domain 1, Task 1.2 (secure workloads and applications).

1. Layered security: defense in depth