Real-world scenario
A web server must be reachable from the internet. You build a VPC with a public subnet, an IGW, and a route table.
By the end you can:
Follow the request/data flow through the architecture.
Work through each concept and mark it understood. This unlocks the knowledge check.
Your logically isolated private network inside AWS.
Why it matters
Everything network-facing lives here; it defines your security perimeter.
When to use it
Always. Design CIDR ranges up front to avoid overlap with on-prem and peers.
Gotcha (exam trap)
CIDR blocks cannot be resized down after creation — plan address space generously.
Finish the walkthrough above to unlock the check.
Use the simulated AWS console below to complete each mission step. No real AWS account is required.
Create a VPC with CIDR 10.0.0.0/16.
In that VPC, create a public subnet (10.0.1.0/24) in us-east-1a.
Bleepx skills build on each other. Continue your learning path across Query, Lab, and Cloud.