Follow the request/data flow through the architecture.
Work through each concept and mark it understood. This unlocks the knowledge check.
Your logically isolated private network inside AWS.
Why it matters
Everything network-facing lives here; it defines your security perimeter.
When to use it
Always. Design CIDR ranges up front to avoid overlap with on-prem and peers.
Gotcha (exam trap)
CIDR blocks cannot be resized down after creation — plan address space generously.
A realistic main.tf for this mission. Read it top to bottom — it mirrors the concepts above.
# VPC, Firewall Rules & Cloud NAT
# BleepxCloud — GCP · Intermediate
# Realistic starter — adapt names, regions and CIDRs to your environment.
provider "google" {
project = var.project_id
region = "europe-west1"
}
variable "project_id" { type = string }
# Model the services below as resources:
# - vpc
# - firewall
# - cloud-nat
# - shared-vpc
Bleepx skills build on each other. Continue your learning path across Query, Lab, and Cloud.