AWS VPC và Mạng chuyên sâu: Học qua thực hành!

[This course is fully updated with latest AWS console experience and features. It's 2026 ready !]

This course aims to build the complete understanding of Amazon Virtual Private Cloud (VPC) and Networking from grounds up where you will understand the AWS networking concepts to the depth not just theorotically but by actually performing hands on exercises for all the networking components.

I am sure, this course will take your networking knowledge and experience to a different level where you can confidently design and implement networking components on your own. And believe me, it's one of the most important skill to have to be successful in your AWS journey.

1. Understanding AWS Networking in depth

• Physical on premises networking vs AWS VPC

• Getting familiar with Amazon VPC terminologies - VPC, Subnets, Route tables, Internet Gateway, Security Group, Network ACL

• Understanding VPC CIDR

• Understanding Subnets and Route Tables

• Public Subnet vs Private Subnet

• Understanding NAT (Network Address Translation) Concept

• NAT Gateway and NAT instance

• AWS Private Connectivity options

• Understanding VPC Peering

• VPC Endpoint and Privatelink for private connectivity to AWS Services

• VPN connection / Direct Connect

• Transit Gateway

• AWS Client VPN

2. AWS Networking Hands on exercises (Basics to Advance)

1. Create VPC with single public subnet, launch EC2 instance and connect over internet

2. Create VPC with Pubic and Private subnet, connect to EC2 instance in Private subnet via EC2 instance in Public subnet

3. Create NAT Gateway and allow EC2 instances in Private subnet to access internet through NAT Gateway

4. Create VPC Peering between VPCs across AWS regions and connect to EC2 instance over private IP by using VPC peering connection

5. Create VPC endpoint gateway for S3 and access S3 contents from EC2 instance in Private subnet without requiring internet connection

6. Create and use VPC Private Link to expose your Web service privately to application hosted in another VPC

7. Implement AWS region level failover using AWS Route53

8. Hosting website on S3 using custom domain name from GoDaddy

9. Hosting HTTPS enabled website using S3 and CloudFront

10. Advanced Networking: Setup Site-To-Site VPN between AWS VPC and simulated on-premise network

11. Transit Gateway - Setup communication between multiple VPCs

12. AWS Client VPN end-to-end set up and exploring features like Split Tunnel and accessing remote networks via Client VPN connection

Additional exercises:

1. Application Load Balancer - distribute traffic to backend EC2 instances

2. Enable Sticky session on ALB

3. Enable HTTPS on Application Load Balancer

4. ALB Path based Routing

5. AWS CloudFormation template to deploy VPC and related sources in automated manner

Note: 

This course does not cover all details/limits/what if kind of contents which are required to be prepared for AWS networking certification exam however this course instead focuses on understanding the core concepts by doing hands on exercise.