Real-world scenario
A bank must keep its database unreachable from the internet but let a public web tier serve customers. You design a VPC where load balancers sit in public subnets and the database hides in private subnets across two AZs.
By the end you can:
Follow the request/data flow through the architecture.
Work through each concept and mark it understood. This unlocks the knowledge check.
Your logically isolated private network inside AWS.
Why it matters
Everything network-facing lives here; it defines your security perimeter.
When to use it
Always. Design CIDR ranges up front to avoid overlap with on-prem and peers.
Gotcha (exam trap)
CIDR blocks cannot be resized down after creation — plan address space generously.
Finish the walkthrough above to unlock the check.
Bleepx skills build on each other. Continue your learning path across Query, Lab, and Cloud.