Week 2 Worklog

OBJECTIVES IN WEEK 2:

  • Understand and practice secure access management with AWS IAM.
  • Master Amazon VPC network architecture and network security layers (Security Groups, NACL).
  • Deploy Hybrid Cloud connectivity via AWS Site-to-Site VPN.
  • Expand knowledge through community events and kick-off the team project.

TASKS OF WEEK 2:

DayTaskStart DateEnd DateReferences
Mon- Practice Lab 4: Access Management with AWS Identity and Access Management (IAM)
+ IAM User and IAM Group
+ IAM Role
+ Switching Roles
- Practice Lab 5: Getting Started with Amazon Virtual Private Cloud (VPC) and AWS Site-to-Site VPN
+ Introduction to Amazon VPC:
* Subnets
* Route Table
* Internet Gateway
* NAT Gateway
+ Network Security with Security Groups and Network ACLs:
* Security groups
* Network ACLs
* VPC Resource Map		12/01/202612/01/2026Lab 4 Guide
Lab 5 Intro
Lab 5 Firewall
Tue- Continue Lab 5 Practice:
+ Prepare Environment:
* Create VPC
* Create Subnet
* Create Internet Gateway
* Create Route Table
* Create Security Group
* Enable VPC Flow Logs
+ Deploy Amazon EC2 Instance
* Create EC2 Instances
* Test Connectivity Methods
* Create Multi-AZ NAT Gateway
* Use Reachability Analyzer
* Configure EIC Endpoint
* AWS Systems Manager Session Manager
* CloudWatch Monitoring & Alerting		13/01/202613/01/2026Lab 5 Prerequisite
Lab 5 Create EC2
Wed- Continue Lab 5 Practice:
+ Setup AWS Site-to-Site VPN:
* Create VPN Environment
Create VPC for VPN
Create EC2 Instance
* Configure VPN Connection
Create Virtual Private Gateway
Create Customer Gateway
Create VPN Connection
Configure Customer Gateway
Customize AWS VPN Tunnel
Advanced VPN Configuration		14/01/202614/01/2026Lab 5 VPN
Thu- Deploy and practice with AWS Networking services (VPC, IGW, NAT Gateway)15/01/202615/01/2026
Fri- Team project meeting: brainstorming, analyzing, research to select suitable ideas16/01/202616/01/2026

ACHIEVEMENTS IN WEEK 2:

  1. Completed Lab 4, mastering the creation of IAM Users, Groups, and Roles for appropriate access delegation.
  2. Successfully built VPC network infrastructure with all components: Subnet, Route Table, IGW, NAT Gateway.
  3. Configured multi-layer network security using Security Groups and Network ACLs.
  4. Deployed and monitored EC2 Instances, configured secure access via Session Manager and EIC Endpoint.
  5. Successfully established AWS Site-to-Site VPN connection to bridge AWS and the simulated On-premise environment.